$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa File: 3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa (raw, json) Hash identifier: hLNnCe48GaifOENn+pxRLt4s+VfNFhrhS9wZt88N0qQ= Subject key identifier: 99:09:0F:DA:BF:97:9F:19:D5:AB:9A:36:43:1A:D1:B4:5D:93:CC:15 Certificate issuer: /CN=5CD3515583757EA0B20F8D85166821CBE4204EE9 Certificate serial: 2A3205094C7E1CB7C448F7C713B34C8A35930342 Authority key identifier: 5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa Signing time: Tue 04 Feb 2025 18:27:52 +0000 ROA not before: Tue 04 Feb 2025 18:22:52 +0000 ROA not after: Tue 03 Feb 2026 18:27:52 +0000 asID: 271872 IP address blocks: 128.201.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:32:05:09:4c:7e:1c:b7:c4:48:f7:c7:13:b3:4c:8a:35:93:03:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD3515583757EA0B20F8D85166821CBE4204EE9 Validity Not Before: Feb 4 18:22:52 2025 GMT Not After : Feb 3 18:27:52 2026 GMT Subject: CN=99090FDABF979F19D5AB9A36431AD1B45D93CC15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:5f:01:ae:6a:f4:2c:97:1a:57:f7:78:c2: 49:47:a1:12:6c:33:24:77:5c:34:dd:f4:74:17:53: de:38:d2:8d:6a:66:25:9a:4f:6c:c2:ea:eb:ea:1e: fd:33:b4:3f:5f:66:78:e8:61:de:53:06:79:16:6f: 6a:f2:39:c5:62:60:2f:e0:0c:75:39:b1:1c:d4:91: b6:9c:e1:1f:a2:71:29:2e:5c:41:f9:ac:d0:6c:09: e6:04:da:49:bf:6a:7b:69:21:90:9c:0f:b6:e8:de: 1f:1c:30:4c:e2:5d:a0:e7:9b:45:5b:e2:16:b7:1e: 66:ad:00:84:5f:3d:47:fb:e0:c5:7e:2d:04:0f:b0: 66:e8:0f:4a:bd:43:56:5f:d5:27:1a:ee:cc:64:fe: b1:42:67:cf:91:30:34:d9:ab:83:55:46:47:16:c9: 6c:42:b6:8a:f0:09:f8:5c:49:73:d4:b6:f2:12:38: 86:08:b6:5b:7c:e6:4b:1b:10:9e:00:21:88:29:23: d0:73:3c:72:1f:0c:7a:a4:12:9c:07:2d:6b:cd:56: 71:6f:08:ca:7f:17:28:24:e9:86:24:bd:ed:f3:1c: 00:5b:68:0c:fe:0a:0d:cf:86:da:56:83:e9:14:c2: 7d:fe:9c:cc:86:0e:62:27:bf:34:1d:ef:89:05:04: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:09:0F:DA:BF:97:9F:19:D5:AB:9A:36:43:1A:D1:B4:5D:93:CC:15 X509v3 Authority Key Identifier: keyid:5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.224.0/22 Signature Algorithm: sha256WithRSAEncryption ac:a2:80:63:2e:0e:24:e9:af:7e:b7:24:88:54:f1:c8:25:3c: 88:04:4f:a7:71:1b:7d:7d:e1:a3:dc:ee:55:90:41:3a:17:c1: 20:ec:2b:d8:aa:ae:67:96:19:57:81:da:23:ed:3f:ca:8c:52: 5c:64:76:ee:8b:e5:4d:8e:70:f1:43:bb:f7:66:6c:9b:a3:18: 03:e4:03:72:09:6f:a0:f5:20:6c:3c:c1:d0:29:28:38:d6:b4: fa:fd:2c:00:d0:13:75:c7:30:ad:ee:92:53:be:62:42:54:4e: 6e:c7:2d:07:bd:b4:86:82:d7:0c:02:6c:c3:ea:94:6e:f6:fa: c3:98:d7:66:da:50:0f:8e:6a:f1:e7:50:c5:c0:88:3b:38:1f: 70:9b:e5:0d:c0:89:87:18:0c:60:42:24:76:f7:d7:40:68:be: 2f:0e:32:61:6d:40:2a:50:b6:2f:2b:f4:d7:4b:07:06:56:a9: d0:61:3d:5c:a1:f8:63:87:f4:d0:be:fa:ee:6b:bd:ab:81:33: 34:28:91:c0:4f:30:10:08:ec:c7:55:b2:f9:48:55:a1:bf:f4: 93:0b:91:65:ef:96:41:76:ca:94:a9:a1:c3:f4:e5:e6:c1:6e: 09:b6:fe:38:0d:7c:c8:53:3b:45:4c:07:5f:f2:c4:8b:d3:30: 52:07:8c:95 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUKjIFCUx+HLfESPfHE7NMijWTA0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEMzUxNTU4Mzc1N0VBMEIyMEY4RDg1MTY2ODIxQ0JF NDIwNEVFOTAeFw0yNTAyMDQxODIyNTJaFw0yNjAyMDMxODI3NTJaMDMxMTAvBgNV BAMTKDk5MDkwRkRBQkY5NzlGMTlENUFCOUEzNjQzMUFEMUI0NUQ5M0NDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTl8Brmr0LJcaV/d4wklHoRJs MyR3XDTd9HQXU9440o1qZiWaT2zC6uvqHv0ztD9fZnjoYd5TBnkWb2ryOcViYC/g DHU5sRzUkbac4R+icSkuXEH5rNBsCeYE2km/antpIZCcD7bo3h8cMEziXaDnm0Vb 4ha3HmatAIRfPUf74MV+LQQPsGboD0q9Q1Zf1Sca7sxk/rFCZ8+RMDTZq4NVRkcW yWxCtorwCfhcSXPUtvISOIYItlt85ksbEJ4AIYgpI9BzPHIfDHqkEpwHLWvNVnFv CMp/Fygk6YYkve3zHABbaAz+Cg3PhtpWg+kUwn3+nMyGDmInvzQd74kFBFezAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUmQkP2r+XnxnVq5o2QxrRtF2TzBUwHwYDVR0j BBgwFoAUXNNRVYN1fqCyD42FFmghy+QgTukwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREE2MDFGNjE0RDhDQ0UwMzgzRkZEQTRCMzY0MUYxNjVF MzVFRjhGNDFEOENDNkM5QkI5QzcyODNGMDE1RDU0LzAvNUNEMzUxNTU4Mzc1N0VB MEIyMEY4RDg1MTY2ODIxQ0JFNDIwNEVFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Q0QzNTE1NTgzNzU3RUEwQjIw RjhEODUxNjY4MjFDQkU0MjA0RUU5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RBNjAxRjYxNEQ4Q0NFMDM4M0ZGREE0QjM2NDFGMTY1RTM1RUY4RjQx RDhDQzZDOUJCOUM3MjgzRjAxNUQ1NC8wLzMxMzIzODJlMzIzMDMxMmUzMjMyMzQy ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzEzODM3MzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKA yeAwDQYJKoZIhvcNAQELBQADggEBAKyigGMuDiTpr363JIhU8cglPIgET6dxG319 4aPc7lWQQToXwSDsK9iqrmeWGVeB2iPtP8qMUlxkdu6L5U2OcPFDu/dmbJujGAPk A3IJb6D1IGw8wdApKDjWtPr9LADQE3XHMK3uklO+YkJUTm7HLQe9tIaC1wwCbMPq lG72+sOY12baUA+OavHnUMXAiDs4H3Cb5Q3AiYcYDGBCJHb310Bovi8OMmFtQCpQ ti8r9NdLBwZWqdBhPVyh+GOH9NC++u5rvauBMzQokcBPMBAI7MdVsvlIVaG/9JML kWXvlkF2ypSpocP05ebBbgm2/jgNfMhTO0VMB1/yxIvTMFIHjJU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:12 2025 by rpki-client