$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa File: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (raw, json) Hash identifier: /5i0CBtWtIr2f+LyVMLO74BzD14crgZu7EgayTvzu/s= Subject key identifier: 13:E5:9E:84:D9:10:92:7C:F0:A3:C8:06:F5:E7:80:73:4A:44:2F:40 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 30CD7386C5AD03BEEE960566DA45B5218A918BD3 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa Signing time: Wed 21 Oct 2026 00:10:07 +0000 ROA not before: Wed 21 Oct 2026 00:10:07 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 191.166.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 00:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cd:73:86:c5:ad:03:be:ee:96:05:66:da:45:b5:21:8a:91:8b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Oct 21 00:10:07 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=a0f533562dc60414dbdf4d5ee388bbe422539d97991887c18db7af6780336e05, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:13:3a:6c:c2:10:ca:3b:2b:f0:0d:7b:8a: 30:48:ad:9b:55:48:2a:92:02:a8:2f:b8:1a:fd:e8: 57:2d:a8:a5:32:ba:fd:25:3c:b0:b3:25:85:f7:95: 21:2d:64:f5:22:82:a7:77:0b:0e:1f:56:c7:ff:b5: cd:c3:0f:3e:5f:6c:a8:da:31:f2:21:e1:e2:ee:d7: 83:94:a4:78:37:73:98:85:04:a9:3a:29:22:ed:b2: b0:fc:64:6e:aa:09:d0:b6:30:d7:cd:23:16:b9:e7: 9a:63:ca:7c:e2:81:d5:49:9c:b1:f0:c8:31:65:c1: 37:45:35:54:33:1a:e8:da:6d:94:66:e3:0d:dc:cc: bd:22:b1:5b:f6:cf:16:6b:06:1c:15:ee:f7:52:cb: 06:da:85:50:04:99:54:ec:00:f7:dd:54:18:c0:fa: 6c:9d:10:53:2d:9b:4f:8b:3f:ab:83:60:08:9c:7c: 7c:45:37:77:89:0a:88:92:a7:d3:ba:c4:96:d2:9a: 4c:7e:c0:e5:0e:3b:53:03:9a:0d:4b:05:56:a2:43: 29:ab:9c:0a:c4:dc:af:1b:fd:36:f1:88:e6:97:17: 58:05:27:6a:e1:24:ec:ff:31:61:9e:ac:ac:c7:d4: ac:77:40:91:80:6a:82:86:06:44:fb:48:60:6f:dc: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:9E:84:D9:10:92:7C:F0:A3:C8:06:F5:E7:80:73:4A:44:2F:40 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.166.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:ee:17:7f:0b:53:20:5f:93:7c:94:7f:97:20:f9:c4:e0:fd: 0b:cc:34:df:31:48:89:ef:63:58:44:2c:32:b5:f2:91:8c:e8: e4:4e:3b:9c:9c:c0:ed:0d:aa:09:c7:a2:cf:e6:54:98:07:bc: 8b:f3:f0:69:02:ee:a2:a5:9c:e9:47:f0:ae:f3:49:21:b3:7f: 66:ff:b8:19:e2:03:6e:12:3a:ef:7a:ee:7c:98:81:da:ab:e7: b9:c5:23:ab:ae:e7:1b:90:73:62:c3:93:72:41:29:42:28:24: 8f:b6:5f:4e:aa:a2:08:3d:3d:35:ca:97:f7:3b:cd:6a:59:8c: 0f:62:36:a9:aa:c8:6c:ae:a7:95:df:a6:e4:b6:06:dc:4d:ff: bf:7e:a1:fc:57:e4:d3:4e:19:91:54:67:84:43:6d:dc:ee:a5: b2:61:5b:40:98:80:73:aa:7c:0d:7b:bb:59:8a:b2:b3:2a:0e: 4f:59:19:08:0e:b0:19:3b:c9:58:01:c1:91:72:c4:79:62:cd: 6a:66:2f:76:9b:e3:5a:89:ba:82:c2:43:5e:0b:19:22:82:88: f1:48:6f:c1:e3:6d:bc:90:a9:71:77:f4:57:77:ff:f0:8e:fd: a3:f5:90:39:32:1e:e7:0a:53:11:f2:5e:92:90:f7:0f:7f:30: 72:66:29:51 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUMM1zhsWtA77ulgVm2kW1IYqRi9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjEwMjEwMDEwMDdaFw0yNzAxMTkyMzU5NTlaMHoxSTBHBgNV BAUTQGEwZjUzMzU2MmRjNjA0MTRkYmRmNGQ1ZWUzODhiYmU0MjI1MzlkOTc5OTE4 ODdjMThkYjdhZjY3ODAzMzZlMDUxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJ+EzpswhDKOyvwDXuKMEitm1VIKpICqC+4Gv3oVy2opTK6/SU8sLMlhfeV IS1k9SKCp3cLDh9Wx/+1zcMPPl9sqNox8iHh4u7Xg5SkeDdzmIUEqTopIu2ysPxk bqoJ0LYw180jFrnnmmPKfOKB1UmcsfDIMWXBN0U1VDMa6NptlGbjDdzMvSKxW/bP FmsGHBXu91LLBtqFUASZVOwA991UGMD6bJ0QUy2bT4s/q4NgCJx8fEU3d4kKiJKn 07rEltKaTH7A5Q47UwOaDUsFVqJDKaucCsTcrxv9NvGI5pcXWAUnauEk7P8xYZ6s rMfUrHdAkYBqgoYGRPtIYG/cS4kCAwEAAaOCAnYwggJyMB0GA1UdDgQWBBQT5Z6E 2RCSfPCjyAb154BzSkQvQDAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9y c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy81NmNlN2NkMC0w ODRlLTRlZDYtYWFlNy0wNzNhNTZmNzRmMjgucm9hMIGIBgNVHR8EgYAwfjB8oHqg eIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3Zv bHVtZS9jNDc0ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xP WHNQcGp5Ni1wNGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAv6YwDQYJKoZIhvcNAQEL BQADggEBADnuF38LUyBfk3yUf5cg+cTg/QvMNN8xSInvY1hELDK18pGM6OROO5yc wO0NqgnHos/mVJgHvIvz8GkC7qKlnOlH8K7zSSGzf2b/uBniA24SOu967nyYgdqr 57nFI6uu5xuQc2LDk3JBKUIoJI+2X06qogg9PTXKl/c7zWpZjA9iNqmqyGyup5Xf puS2BtxN/79+ofxX5NNOGZFUZ4RDbdzupbJhW0CYgHOqfA17u1mKsrMqDk9ZGQgO sBk7yVgBwZFyxHlizWpmL3ab41qJuoLCQ14LGSKCiPFIb8HjbbyQqXF39Fd3//CO /aP1kDkyHucKUxHyXpKQ9w9/MHJmKVE= -----END CERTIFICATE-----Generated at Sat Oct 31 22:47:08 2026 by rpki-client