$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa File: 3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa (raw, json) Hash identifier: dl4WbXpYNQ/yrBu62ZTtAfsXhZ9vaN6iav8BdNMNYMU= Subject key identifier: 0E:D5:27:48:F9:2A:2A:E4:D0:A7:B1:15:88:DE:54:81:E7:C2:43:AF Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Certificate serial: 2E35216A1B1A68FF5B9DC269E6222A13168D6DCC Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa Signing time: Sun 19 Apr 2026 02:00:19 +0000 ROA not before: Sun 19 Apr 2026 01:55:19 +0000 ROA not after: Sun 18 Apr 2027 02:00:19 +0000 asID: 47065 IP address blocks: 138.185.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 17:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:35:21:6a:1b:1a:68:ff:5b:9d:c2:69:e6:22:2a:13:16:8d:6d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Validity Not Before: Apr 19 01:55:19 2026 GMT Not After : Apr 18 02:00:19 2027 GMT Subject: CN=0ED52748F92A2AE4D0A7B11588DE5481E7C243AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:70:55:77:a6:24:2e:58:b4:d6:a4:4c:9b: 7e:07:fe:3c:11:55:b6:45:14:c1:4b:d1:04:f6:58: 58:9e:f3:21:1d:2c:44:60:c0:b1:27:d1:d4:db:e7: 92:a7:6b:3d:15:93:d4:a0:54:16:67:2e:63:c9:05: d6:ac:2d:2a:5a:ff:a1:93:a8:7d:98:7f:08:72:52: 40:a0:f7:22:b6:4d:55:52:2a:9f:67:10:0a:1f:42: 0c:cc:97:c1:45:4d:6f:9c:98:f0:f5:46:4e:ac:76: 8e:b0:59:55:76:00:7c:28:19:f8:d4:fd:3e:c6:f4: dc:33:88:14:e4:13:35:d8:e0:44:9d:cf:1e:0e:6b: 18:b6:a0:9f:39:e9:f7:e4:da:19:2c:d8:b0:f4:0f: 44:10:f9:88:e8:33:4c:f0:f7:d4:3b:11:bb:66:90: a7:9c:a7:e1:6e:08:7b:72:da:8a:47:89:3b:e7:32: 18:55:3e:0d:dc:ed:4f:7e:1e:61:1f:74:59:20:de: c4:58:07:a4:2e:6f:7e:4c:09:13:7b:55:26:52:c4: bf:78:b0:ea:d2:26:d4:e0:f7:76:a0:4f:57:b2:ab: 2c:98:d4:cb:52:1a:6f:b9:c8:45:12:a3:86:2c:cf: 90:9b:33:f7:93:f8:88:cd:68:83:ec:f7:60:67:36: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D5:27:48:F9:2A:2A:E4:D0:A7:B1:15:88:DE:54:81:E7:C2:43:AF X509v3 Authority Key Identifier: keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 Signature Algorithm: sha256WithRSAEncryption a5:16:1b:0e:4f:bb:f8:f0:2c:7f:47:d9:43:3e:f5:7b:15:86: 0e:f1:4d:0d:a0:99:ed:85:86:f0:ec:93:38:b2:65:d9:d2:6e: 54:8b:52:0d:7d:6f:06:42:b2:c0:36:d6:1a:d3:33:39:ed:e5: 28:d5:f3:a5:c8:bc:15:fc:35:81:ae:a9:a6:05:90:bb:6f:31: 55:99:cf:28:96:07:bb:66:83:6e:02:07:d3:6e:96:d0:6d:dd: 0e:3d:f8:9f:58:91:50:12:46:54:4a:22:18:c2:fa:92:ba:aa: 60:d6:42:30:90:83:ee:a8:d3:39:d1:38:33:f9:28:10:19:52: d0:8c:c6:fb:81:b6:8e:13:b9:1d:3c:6e:76:d5:34:11:df:3a: 45:70:58:c3:a0:50:3b:6b:fd:bf:39:ec:1e:f5:8f:94:d2:00: 77:93:66:81:d9:eb:af:34:8d:b2:21:49:ca:7d:67:77:78:31: 1e:04:7a:5e:8a:d1:d8:e4:80:59:2f:21:a2:3a:eb:f8:c9:5d: 08:e9:49:e5:50:48:29:95:24:48:a3:82:a1:a7:1f:5f:dc:85: 73:5f:b1:d6:59:32:7a:a4:0a:f8:37:d9:05:07:be:93:65:32: 09:ac:27:aa:45:84:5d:71:97:78:cd:0f:df:0f:e4:77:ed:2c: 54:27:05:0e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIULjUhahsaaP9bncJp5iIqExaNbcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBQUQ5MjVFNTM0QkQ3MkU2QjNFOTg2OTIwMUQwNDZD NzkxNkFGQzAeFw0yNjA0MTkwMTU1MTlaFw0yNzA0MTgwMjAwMTlaMDMxMTAvBgNV BAMTKDBFRDUyNzQ4RjkyQTJBRTREMEE3QjExNTg4REU1NDgxRTdDMjQzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJHBVd6YkLli01qRMm34H/jwR VbZFFMFL0QT2WFie8yEdLERgwLEn0dTb55Knaz0Vk9SgVBZnLmPJBdasLSpa/6GT qH2YfwhyUkCg9yK2TVVSKp9nEAofQgzMl8FFTW+cmPD1Rk6sdo6wWVV2AHwoGfjU /T7G9NwziBTkEzXY4ESdzx4Oaxi2oJ856ffk2hks2LD0D0QQ+YjoM0zw99Q7Ebtm kKecp+FuCHty2opHiTvnMhhVPg3c7U9+HmEfdFkg3sRYB6Qub35MCRN7VSZSxL94 sOrSJtTg93agT1eyqyyY1MtSGm+5yEUSo4Ysz5CbM/eT+IjNaIPs92BnNuN9AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUDtUnSPkqKuTQp7EViN5UgefCQ68wHwYDVR0j BBgwFoAU8KrZJeU0vXLms+mGkgHQRseRavwwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0Yw QUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMuY3JsMIGFBggr BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC9GMEFBRDkyNUU1 MzRCRDcyRTZCM0U5ODY5MjAxRDA0NkM3OTE2QUZDLmNlcjB5BggrBgEFBQcBCwRt MGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8z LzMxMzMzODJlMzEzODM1MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAz NDM3MzAzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCirnkMA0GCSqGSIb3DQEBCwUAA4IBAQClFhsO T7v48Cx/R9lDPvV7FYYO8U0NoJnthYbw7JM4smXZ0m5Ui1INfW8GQrLANtYa0zM5 7eUo1fOlyLwV/DWBrqmmBZC7bzFVmc8olge7ZoNuAgfTbpbQbd0OPfifWJFQEkZU SiIYwvqSuqpg1kIwkIPuqNM50Tgz+SgQGVLQjMb7gbaOE7kdPG521TQR3zpFcFjD oFA7a/2/Oewe9Y+U0gB3k2aB2euvNI2yIUnKfWd3eDEeBHpeitHY5IBZLyGiOuv4 yV0I6UnlUEgplSRIo4Khpx9f3IVzX7HWWTJ6pAr4N9kFB76TZTIJrCeqRYRdcZd4 zQ/fD+R37SxUJwUO -----END CERTIFICATE-----Generated at Sun Apr 19 10:05:27 2026 by rpki-client