$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa File: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (raw, json) Hash identifier: UF2NI9to/ZTHTw76rU42WL5vvIIGRtLRLTutrT8D2g8= Subject key identifier: 4F:00:5A:54:98:08:DE:D9:E7:5E:84:26:7E:F8:A2:1A:3D:5F:D3:5D Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 702BF332CB097C57CCEAAF809B51B2584C0B4AFE Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa Signing time: Thu 14 May 2026 00:00:09 +0000 ROA not before: Thu 14 May 2026 00:00:09 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 191.166.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 09 Jun 2026 08:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2b:f3:32:cb:09:7c:57:cc:ea:af:80:9b:51:b2:58:4c:0b:4a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: May 14 00:00:09 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=35d6a74b41446f490eec4553de30d77c669b21ba570d1043ca59983558ffbb1e, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:b9:b1:4d:33:2f:ee:7d:5a:b4:16:07:3d: 3c:0f:37:07:3c:a5:7e:f0:9d:a4:3f:5b:94:7d:a8: da:b9:a7:f0:a9:3f:5c:b6:af:6b:52:85:51:a1:ab: ac:cc:b2:a0:58:18:0f:49:f8:af:e8:85:23:72:39: 51:c2:ed:1f:dd:96:42:b7:5d:a2:2d:74:5c:d0:b7: d8:61:56:43:f9:29:7e:f1:72:3c:6b:df:9c:b5:fd: 4f:6c:9e:d1:0a:82:ec:f5:36:83:fd:fe:49:7b:aa: e5:3c:0c:18:2a:7a:75:9c:65:e5:c1:1b:bb:c0:81: 50:ac:4b:19:a5:61:58:85:5d:47:e5:32:75:75:2d: 4c:b0:98:83:ec:77:b7:92:cf:31:77:4d:d3:d5:84: df:52:43:78:f2:c2:55:2f:f1:e2:79:3a:c6:1d:06: ed:2a:d7:29:f4:9b:9f:32:85:10:19:77:d2:a3:e9: de:57:dc:6b:ab:c5:22:42:39:b3:1e:ed:60:3e:1e: db:be:06:f1:28:8f:6b:8c:42:aa:4a:cb:5e:b3:f4: 7c:92:c5:c3:7c:1e:b8:07:55:4c:bf:bc:41:0b:b0: d4:02:91:2a:83:1c:35:ab:83:99:47:af:e7:fb:ce: 0a:65:40:dd:8b:c3:60:b2:74:60:fb:7c:1e:a1:9f: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:5A:54:98:08:DE:D9:E7:5E:84:26:7E:F8:A2:1A:3D:5F:D3:5D X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.166.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:b4:eb:d8:81:13:9f:ca:2d:a3:18:8d:99:80:46:59:ac:15: f3:3f:ac:81:0d:75:f1:25:df:02:3a:a3:c9:99:40:b4:91:89: a9:5c:f8:2e:f8:7b:b2:12:a0:d7:f0:fb:2a:83:89:bb:0c:99: e0:24:b5:7b:42:6d:fb:ae:81:c3:9d:08:d8:86:65:5f:85:39: 84:0a:f5:54:88:42:ee:de:ce:31:fc:36:53:6e:5f:25:b0:70: a7:b3:be:d3:e0:76:49:19:22:99:7f:66:5a:bd:79:9e:90:04: ae:a7:86:84:e4:b7:bb:97:00:f8:f2:5c:35:63:6d:e0:57:d5: e1:08:85:c7:51:39:6e:2a:4f:a4:95:4c:50:fe:47:e2:9b:b2: 61:98:aa:3a:c1:8b:8c:b0:af:45:79:df:d4:c1:39:a0:84:ad: 7a:26:bd:82:4e:c3:73:79:2f:14:49:c7:42:c0:db:4f:f6:f3: a9:51:d0:00:13:85:ea:67:7e:9d:c9:b4:47:eb:d7:f5:9e:00: ee:33:29:f3:32:c7:ec:27:ab:16:f1:a5:cb:43:1e:cf:f7:0b: 56:4c:a2:ed:72:86:44:09:70:c8:db:09:2a:ef:88:76:aa:db: a9:2d:6a:7e:67:2a:1e:3d:49:99:4a:35:e3:4b:b5:64:01:12: 40:0b:7b:2c -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUcCvzMssJfFfM6q+Am1GyWEwLSv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjA1MTQwMDAwMDlaFw0yNjA4MTIyMzU5NTlaMHoxSTBHBgNV BAUTQDM1ZDZhNzRiNDE0NDZmNDkwZWVjNDU1M2RlMzBkNzdjNjY5YjIxYmE1NzBk MTA0M2NhNTk5ODM1NThmZmJiMWUxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5iubFNMy/ufVq0Fgc9PA83BzylfvCdpD9blH2o2rmn8Kk/XLava1KFUaGr rMyyoFgYD0n4r+iFI3I5UcLtH92WQrddoi10XNC32GFWQ/kpfvFyPGvfnLX9T2ye 0QqC7PU2g/3+SXuq5TwMGCp6dZxl5cEbu8CBUKxLGaVhWIVdR+UydXUtTLCYg+x3 t5LPMXdN09WE31JDePLCVS/x4nk6xh0G7SrXKfSbnzKFEBl30qPp3lfca6vFIkI5 sx7tYD4e274G8SiPa4xCqkrLXrP0fJLFw3weuAdVTL+8QQuw1AKRKoMcNauDmUev 5/vOCmVA3YvDYLJ0YPt8HqGfVacCAwEAAaOCAnYwggJyMB0GA1UdDgQWBBRPAFpU mAje2edehCZ++KIaPV/TXTAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9y c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy81NmNlN2NkMC0w ODRlLTRlZDYtYWFlNy0wNzNhNTZmNzRmMjgucm9hMIGIBgNVHR8EgYAwfjB8oHqg eIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3Zv bHVtZS9jNDc0ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xP WHNQcGp5Ni1wNGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAv6YwDQYJKoZIhvcNAQEL BQADggEBAA6069iBE5/KLaMYjZmARlmsFfM/rIENdfEl3wI6o8mZQLSRialc+C74 e7ISoNfw+yqDibsMmeAktXtCbfuugcOdCNiGZV+FOYQK9VSIQu7ezjH8NlNuXyWw cKezvtPgdkkZIpl/Zlq9eZ6QBK6nhoTkt7uXAPjyXDVjbeBX1eEIhcdROW4qT6SV TFD+R+KbsmGYqjrBi4ywr0V539TBOaCErXomvYJOw3N5LxRJx0LA20/286lR0AAT hepnfp3JtEfr1/WeAO4zKfMyx+wnqxbxpctDHs/3C1ZMou1yhkQJcMjbCSrviHaq 26ktan5nKh49SZlKNeNLtWQBEkALeyw= -----END CERTIFICATE-----Generated at Sat Jun 6 04:57:40 2026 by rpki-client