
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
File: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (raw, json)
Hash identifier: mizRw7SEPh8dCHhUZhyfVblF0zvAs4XGiS+DkgdHUSU=
Subject key identifier: BF:92:80:31:56:49:B4:ED:B7:76:8F:80:03:67:3B:FF:9F:31:BF:DA
Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial: 0E63A8231EBE3A70BB784FDC221D79EA31DEF70B
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
Signing time: Sun 02 Aug 2026 00:10:16 +0000
ROA not before: Sun 02 Aug 2026 00:10:16 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 191.166.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 09 Sep 2026 00:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:63:a8:23:1e:be:3a:70:bb:78:4f:dc:22:1d:79:ea:31:de:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Validity
Not Before: Aug 2 00:10:16 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=e1ddd5df1e3084927fcfbe280b5ae2acb3fda30704a3352a92199afb6ed61005, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:c4:f3:96:5a:10:4b:ac:a6:92:0f:34:9c:
e2:18:bf:e2:a2:02:c6:02:b4:9d:d3:92:82:0e:97:
f7:5a:d7:2b:d7:e3:84:83:62:24:34:bb:44:f3:37:
8b:df:74:5b:a6:e4:85:55:31:ff:51:f5:d9:3d:cf:
7d:25:1b:8c:9f:a3:2d:ac:1d:cc:2a:c2:3f:a0:7c:
7e:45:42:90:a4:4a:18:2a:da:7c:78:da:eb:9f:a0:
34:ef:9c:eb:40:61:56:9b:3f:74:17:26:aa:a2:aa:
d1:ba:82:70:b9:49:22:12:89:46:00:a3:be:b5:1d:
e2:1a:9a:66:d6:a5:6d:6f:fd:61:24:f7:b1:52:39:
75:9c:f5:9e:1f:3b:87:87:dd:34:29:7a:f2:31:ba:
4c:46:4f:49:a6:92:7e:d1:a1:24:77:17:f9:c6:c9:
26:61:89:56:03:c7:2b:a1:6e:c9:f7:75:df:35:ba:
4e:29:3d:51:6d:58:67:18:05:19:6f:45:c7:7d:1f:
bf:5c:88:71:73:fc:ba:05:44:b5:27:d7:95:50:76:
a5:15:47:d5:38:48:5b:4a:af:08:5e:55:27:6a:0f:
11:c9:ac:83:61:94:e7:28:5d:20:73:a3:da:b9:22:
23:27:53:64:db:3e:98:7d:c9:66:17:ea:09:0b:92:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:80:31:56:49:B4:ED:B7:76:8F:80:03:67:3B:FF:9F:31:BF:DA
X509v3 Authority Key Identifier:
keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:da:62:f0:ac:b6:87:6d:62:3b:f1:d6:81:91:51:ae:76:89:
77:70:f2:06:7f:ab:25:28:01:f6:e4:ba:d3:51:a8:7f:32:fe:
91:94:3e:a1:09:95:d8:ac:e9:c4:03:6c:8a:40:f9:a3:42:84:
74:e5:cd:ea:d1:33:0e:ab:e3:76:72:cb:57:01:e6:26:b3:4f:
3c:a6:58:fa:29:a1:b6:fb:a6:70:c5:90:ea:b7:c9:70:00:53:
21:33:09:d6:c1:ee:11:b9:4e:dd:38:09:08:c4:3c:7e:36:1a:
80:0b:34:82:06:88:bf:d6:21:94:b9:07:69:42:1e:02:5c:94:
d2:ff:78:15:43:6d:2b:13:61:7b:b7:59:70:f3:92:2a:23:cb:
68:92:10:48:05:03:f3:cc:3f:b3:99:f9:a8:e9:99:84:e1:d1:
a9:76:7e:7e:8d:fb:b6:8b:94:77:61:c3:60:8f:b9:ba:eb:f4:
60:f2:b2:35:85:74:04:98:a8:39:fa:81:15:95:5a:35:bd:f8:
79:54:f8:0f:65:ee:44:25:03:b8:29:a6:97:5f:6f:09:8a:b2:
4b:94:d3:52:55:19:e9:85:f9:d7:6c:1d:3b:fb:b4:7e:01:8f:
78:07:61:4c:ca:36:c2:02:ea:b2:74:17:fc:24:c1:5c:e1:4e:
28:3e:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:50:12 2026 by rpki-client