$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/652E9863BB94BE38DE009C7822770B33CF78D2E6A36FE08A6166CC4387A9290A/0/34352e3137342e3132342e302f32322d3232203d3e20323635353733.roa File: 34352e3137342e3132342e302f32322d3232203d3e20323635353733.roa (raw, json) Hash identifier: CvTJAYUecafEZ9z7wu8n94aq5HoQjMqoJzoMFF1z8KI= Subject key identifier: 41:BC:D4:1B:70:EB:E8:3B:A1:43:22:74:D8:76:E7:81:D5:F8:27:EE Certificate issuer: /CN=CAC9004CD0B892E39FD109A314FA2A6FCD777801 Certificate serial: 3429949DFEC351DBB49D352B3C74FDC95176A93E Authority key identifier: CA:C9:00:4C:D0:B8:92:E3:9F:D1:09:A3:14:FA:2A:6F:CD:77:78:01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAC9004CD0B892E39FD109A314FA2A6FCD777801.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/652E9863BB94BE38DE009C7822770B33CF78D2E6A36FE08A6166CC4387A9290A/0/34352e3137342e3132342e302f32322d3232203d3e20323635353733.roa Signing time: Sat 11 Jul 2026 18:20:00 +0000 ROA not before: Sat 11 Jul 2026 18:15:00 +0000 ROA not after: Sat 10 Jul 2027 18:20:00 +0000 asID: 265573 IP address blocks: 45.174.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/652E9863BB94BE38DE009C7822770B33CF78D2E6A36FE08A6166CC4387A9290A/0/CAC9004CD0B892E39FD109A314FA2A6FCD777801.crl rsync://repository.lacnic.net/rpki/lacnic/652E9863BB94BE38DE009C7822770B33CF78D2E6A36FE08A6166CC4387A9290A/0/CAC9004CD0B892E39FD109A314FA2A6FCD777801.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAC9004CD0B892E39FD109A314FA2A6FCD777801.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:94:9d:fe:c3:51:db:b4:9d:35:2b:3c:74:fd:c9:51:76:a9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC9004CD0B892E39FD109A314FA2A6FCD777801 Validity Not Before: Jul 11 18:15:00 2026 GMT Not After : Jul 10 18:20:00 2027 GMT Subject: CN=41BCD41B70EBE83BA1432274D876E781D5F827EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:e5:10:f5:d9:11:2b:69:ca:ee:30:49:c0: 90:57:d3:ef:ea:cc:a7:ca:da:b3:57:7f:87:6f:36: ae:bb:ea:bd:ec:37:51:2a:f5:bb:c4:94:29:c0:3e: 72:42:dc:44:05:9a:03:d4:d7:95:42:49:9b:21:d2: 0a:71:eb:d9:e5:53:a6:fd:a8:69:9d:96:e5:85:a0: dd:4a:c5:a8:71:41:a6:9c:80:b1:53:68:81:3d:17: 06:12:b0:66:21:b5:ef:6c:d5:3c:ff:19:f3:ca:95: 5d:e1:ce:f1:c6:91:50:b4:2d:4e:4b:5e:ec:5f:79: 25:56:fe:d9:db:05:90:dd:d9:49:92:9a:b2:87:d5: 5a:c6:01:78:67:49:21:06:67:de:70:40:cb:8e:26: 0e:55:73:94:0a:9b:79:ed:9a:50:94:f7:f2:be:52: 21:c8:04:74:49:e0:54:b6:59:09:0b:95:d1:72:28: cc:00:eb:49:76:a7:d1:70:e4:a2:6c:f2:7a:dc:41: d2:9b:3c:f1:4c:3a:ed:a0:72:9d:6d:36:8b:92:72: 83:58:14:5d:02:6e:f8:15:e8:a6:b9:03:69:44:78: e4:c1:6e:5b:79:43:dc:ef:c7:6d:a8:ae:3e:3d:71: 36:77:13:75:59:3d:6e:a8:7d:e1:fd:56:f3:3f:c8: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BC:D4:1B:70:EB:E8:3B:A1:43:22:74:D8:76:E7:81:D5:F8:27:EE X509v3 Authority Key Identifier: keyid:CA:C9:00:4C:D0:B8:92:E3:9F:D1:09:A3:14:FA:2A:6F:CD:77:78:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/652E9863BB94BE38DE009C7822770B33CF78D2E6A36FE08A6166CC4387A9290A/0/CAC9004CD0B892E39FD109A314FA2A6FCD777801.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAC9004CD0B892E39FD109A314FA2A6FCD777801.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/652E9863BB94BE38DE009C7822770B33CF78D2E6A36FE08A6166CC4387A9290A/0/34352e3137342e3132342e302f32322d3232203d3e20323635353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.124.0/22 Signature Algorithm: sha256WithRSAEncryption 08:af:4b:7c:5a:37:19:56:08:4f:94:06:21:2a:b8:3a:8b:06: 80:d9:81:3a:a5:4b:b8:6d:3b:61:7e:67:8f:ac:82:a0:c8:5f: dd:44:2f:a1:54:13:ab:30:4c:c3:00:20:85:c5:e6:9a:13:ce: 6f:4c:2f:bf:19:3f:ce:a4:22:a5:82:ec:63:6e:93:2d:d6:86: 77:4b:11:3c:15:52:95:08:7e:e1:25:e7:c3:56:e0:0e:ad:a0: bb:0d:14:85:e4:4d:10:9e:7f:71:13:11:57:66:b5:60:ac:ee: 64:00:8b:7c:79:5a:bc:52:9c:27:ee:35:56:4b:94:e8:88:e6: 30:b0:6b:de:b0:fc:58:21:7f:ce:b3:b6:66:31:c0:71:b9:82: 83:41:f0:c4:58:c8:b2:e9:cf:d7:a6:d8:d7:cb:59:9e:c8:4c: 0b:f7:54:e1:4e:2e:30:d2:1c:4d:22:7f:63:de:ae:22:6c:36: 8c:55:25:10:79:62:d5:86:50:2d:b1:86:42:24:f1:81:12:3a: 43:f3:5c:c2:19:a8:c6:ab:6f:de:5c:ba:72:0a:6a:aa:1e:5b: 17:96:fc:a1:b6:c3:1d:1e:b2:1c:32:61:46:ea:7f:a9:43:e0: dc:af:8b:17:95:60:84:e3:1c:80:ce:03:1e:8f:51:4a:66:b4: c7:b4:e4:a9 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUNCmUnf7DUdu0nTUrPHT9yVF2qT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDOTAwNENEMEI4OTJFMzlGRDEwOUEzMTRGQTJBNkZD RDc3NzgwMTAeFw0yNjA3MTExODE1MDBaFw0yNzA3MTAxODIwMDBaMDMxMTAvBgNV BAMTKDQxQkNENDFCNzBFQkU4M0JBMTQzMjI3NEQ4NzZFNzgxRDVGODI3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnuUQ9dkRK2nK7jBJwJBX0+/q zKfK2rNXf4dvNq676r3sN1Eq9bvElCnAPnJC3EQFmgPU15VCSZsh0gpx69nlU6b9 qGmdluWFoN1KxahxQaacgLFTaIE9FwYSsGYhte9s1Tz/GfPKlV3hzvHGkVC0LU5L XuxfeSVW/tnbBZDd2UmSmrKH1VrGAXhnSSEGZ95wQMuOJg5Vc5QKm3ntmlCU9/K+ UiHIBHRJ4FS2WQkLldFyKMwA60l2p9Fw5KJs8nrcQdKbPPFMOu2gcp1tNouScoNY FF0CbvgV6Ka5A2lEeOTBblt5Q9zvx22orj49cTZ3E3VZPW6ofeH9VvM/yMeRAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUQbzUG3Dr6DuhQyJ02HbngdX4J+4wHwYDVR0j BBgwFoAUyskATNC4kuOf0QmjFPoqb813eAEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NTJFOTg2M0JCOTRCRTM4REUwMDlDNzgyMjc3MEIzM0NG NzhEMkU2QTM2RkUwOEE2MTY2Q0M0Mzg3QTkyOTBBLzAvQ0FDOTAwNENEMEI4OTJF MzlGRDEwOUEzMTRGQTJBNkZDRDc3NzgwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUM5MDA0Q0QwQjg5MkUzOUZE MTA5QTMxNEZBMkE2RkNENzc3ODAxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjUyRTk4NjNCQjk0QkUzOERFMDA5Qzc4MjI3NzBCMzNDRjc4RDJFNkEz NkZFMDhBNjE2NkNDNDM4N0E5MjkwQS8wLzM0MzUyZTMxMzczNDJlMzEzMjM0MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzUzNzMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa58 MA0GCSqGSIb3DQEBCwUAA4IBAQAIr0t8WjcZVghPlAYhKrg6iwaA2YE6pUu4bTth fmePrIKgyF/dRC+hVBOrMEzDACCFxeaaE85vTC+/GT/OpCKlguxjbpMt1oZ3SxE8 FVKVCH7hJefDVuAOraC7DRSF5E0Qnn9xExFXZrVgrO5kAIt8eVq8Upwn7jVWS5To iOYwsGvesPxYIX/Os7ZmMcBxuYKDQfDEWMiy6c/XptjXy1meyEwL91ThTi4w0hxN In9j3q4ibDaMVSUQeWLVhlAtsYZCJPGBEjpD81zCGajGq2/eXLpyCmqqHlsXlvyh tsMdHrIcMmFG6n+pQ+Dcr4sXlWCE4xyAzgMej1FKZrTHtOSp -----END CERTIFICATE-----Generated at Fri Jul 24 19:44:09 2026 by rpki-client