$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3133312e302e3137322e302f32322d3232203d3e203134313137.roa File: 3133312e302e3137322e302f32322d3232203d3e203134313137.roa (raw, json) Hash identifier: WvQCvnScCE/uRYSQ5Okt6F9VeeQwiJ2iu4UEIU6CObg= Subject key identifier: 4B:7C:0E:88:48:B6:68:0A:6D:79:F6:66:3F:3F:39:E5:4F:05:B8:D1 Certificate issuer: /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3 Certificate serial: 21D7D929AFC511E4748E3C7B4D361142ED9AC113 Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3133312e302e3137322e302f32322d3232203d3e203134313137.roa Signing time: Tue 01 Jul 2025 19:15:02 +0000 ROA not before: Tue 01 Jul 2025 19:10:02 +0000 ROA not after: Tue 30 Jun 2026 19:15:02 +0000 asID: 14117 IP address blocks: 131.0.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d7:d9:29:af:c5:11:e4:74:8e:3c:7b:4d:36:11:42:ed:9a:c1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3 Validity Not Before: Jul 1 19:10:02 2025 GMT Not After : Jun 30 19:15:02 2026 GMT Subject: CN=4B7C0E8848B6680A6D79F6663F3F39E54F05B8D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:68:5d:56:db:d6:b3:60:80:8b:43:45:eb: 5a:39:ef:6a:84:c5:a3:26:17:c6:24:a8:eb:2e:73: 21:42:fc:d6:7e:d7:e2:70:91:f3:22:99:14:7b:b8: af:47:39:1e:2f:b1:60:fd:49:ab:db:9b:71:1c:72: ff:58:93:b5:3c:30:75:3d:77:29:46:cc:c7:da:a5: ae:c9:79:a6:5f:b8:ea:37:05:90:62:ef:c8:76:20: 14:97:47:c4:f3:26:86:ab:51:4f:25:e4:f6:6e:64: be:37:59:e4:09:63:0f:86:ee:f1:66:bb:73:40:bf: 49:26:25:a9:71:f2:9e:06:09:1a:eb:18:fd:0a:ad: ce:68:70:bf:1c:a9:f4:27:b7:0f:fc:58:df:6b:d2: cf:85:13:8b:96:13:0f:49:38:71:eb:5e:d7:b6:95: c4:ae:ae:4b:9a:d1:d2:9c:31:19:63:a8:02:ab:54: 6a:0a:c5:92:f9:99:a2:f4:57:0f:9f:dc:77:e1:30: b3:2e:ba:9a:d3:89:f2:0c:77:77:4b:17:d4:74:ca: 02:54:a0:8a:35:f0:6f:c4:a7:65:32:93:da:c5:3a: ac:9b:54:b4:b3:74:73:2c:cd:e7:a8:cf:d4:46:5c: 54:74:d9:bc:f0:87:1d:ea:69:58:e2:71:a4:2b:ad: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:0E:88:48:B6:68:0A:6D:79:F6:66:3F:3F:39:E5:4F:05:B8:D1 X509v3 Authority Key Identifier: keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3133312e302e3137322e302f32322d3232203d3e203134313137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.172.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:0a:47:94:54:70:ef:6e:f5:ba:da:58:60:c9:f6:47:71:e3: 81:33:69:da:9f:46:60:22:a2:33:f8:a2:29:3f:d5:f9:7a:0f: f1:c8:79:98:6e:59:96:26:d6:73:52:be:12:d2:db:8f:c7:01: 4e:5d:64:68:f9:46:9b:27:7e:3a:cc:60:d7:99:e1:8c:4f:bc: 69:51:1d:b8:71:3b:8e:69:82:54:ec:8c:d1:87:8b:46:f4:1e: 40:6e:28:8d:d6:90:37:7d:c9:8d:16:0b:ef:a4:5a:a0:27:c2: b1:09:3c:69:8d:9e:eb:f8:fb:32:73:ea:d9:53:f8:a7:85:03: 8c:c0:28:ca:4c:d4:b9:4b:6c:ab:68:1e:a3:fa:cf:37:15:7e: 05:6c:39:f1:a4:2d:6c:d4:81:ca:fd:ef:c5:80:34:19:dd:e1: 5d:46:57:a4:fd:2c:00:72:9e:30:45:66:b2:c3:39:1e:c0:9f: 9a:e2:14:15:62:b1:fc:82:af:cb:b9:09:e8:28:de:14:a0:b7: c8:2b:01:2e:dc:bd:51:6d:72:d6:34:f8:e8:cc:7b:27:fd:d4: 9f:99:af:1f:2d:a8:30:2c:01:a2:b8:22:cd:c9:2d:8c:0e:22: 21:35:a9:36:e4:08:98:f4:cd:9c:10:17:57:27:3e:43:df:12: 19:38:55:a4 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUIdfZKa/FEeR0jjx7TTYRQu2awRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCMjgyQjM0NzQwQkQ5OUNERjg5NDMwNjJCN0RDRUMz QzRCMUZGMzAeFw0yNTA3MDExOTEwMDJaFw0yNjA2MzAxOTE1MDJaMDMxMTAvBgNV BAMTKDRCN0MwRTg4NDhCNjY4MEE2RDc5RjY2NjNGM0YzOUU1NEYwNUI4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0WhdVtvWs2CAi0NF61o572qE xaMmF8YkqOsucyFC/NZ+1+JwkfMimRR7uK9HOR4vsWD9Savbm3Eccv9Yk7U8MHU9 dylGzMfapa7JeaZfuOo3BZBi78h2IBSXR8TzJoarUU8l5PZuZL43WeQJYw+G7vFm u3NAv0kmJalx8p4GCRrrGP0Krc5ocL8cqfQntw/8WN9r0s+FE4uWEw9JOHHrXte2 lcSurkua0dKcMRljqAKrVGoKxZL5maL0Vw+f3HfhMLMuuprTifIMd3dLF9R0ygJU oIo18G/Ep2Uyk9rFOqybVLSzdHMszeeoz9RGXFR02bzwhx3qaVjicaQrrUSpAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUS3wOiEi2aAptefZmPz855U8FuNEwHwYDVR0j BBgwFoAUjbKCs0dAvZnN+JQwYrfc7DxLH/MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENkMwQ0U4Q0ZDQTE0MTQxQzNBRTQyREU2RUZDNkJCQzc3 MTY4OTRERjQ1NDIyMjQwMTRFNDE3RTJFMTRBQjJCLzAvOERCMjgyQjM0NzQwQkQ5 OUNERjg5NDMwNjJCN0RDRUMzQzRCMUZGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REIyODJCMzQ3NDBCRDk5Q0RG ODk0MzA2MkI3RENFQzNDNEIxRkYzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDZDMENFOENGQ0ExNDE0MUMzQUU0MkRFNkVGQzZCQkM3NzE2ODk0REY0 NTQyMjI0MDE0RTQxN0UyRTE0QUIyQi8wLzMxMzMzMTJlMzAyZTMxMzczMjJlMzAy ZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMTMxMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKDAKwwDQYJ KoZIhvcNAQELBQADggEBAI0KR5RUcO9u9braWGDJ9kdx44EzadqfRmAiojP4oik/ 1fl6D/HIeZhuWZYm1nNSvhLS24/HAU5dZGj5RpsnfjrMYNeZ4YxPvGlRHbhxO45p glTsjNGHi0b0HkBuKI3WkDd9yY0WC++kWqAnwrEJPGmNnuv4+zJz6tlT+KeFA4zA KMpM1LlLbKtoHqP6zzcVfgVsOfGkLWzUgcr978WANBnd4V1GV6T9LABynjBFZrLD OR7An5riFBVisfyCr8u5Cego3hSgt8grAS7cvVFtctY0+OjMeyf91J+Zrx8tqDAs AaK4Is3JLYwOIiE1qTbkCJj0zZwQF1cnPkPfEhk4VaQ= -----END CERTIFICATE-----Generated at Fri Jul 4 18:43:52 2025 by rpki-client