$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/79de1a10-540a-49e4-92f2-b8e81488ffd1.roa File: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (raw, json) Hash identifier: sLfhaquCadTlwI/xVGTbj11vctb2w10uHvrSn5Bu4PM= Subject key identifier: 70:9C:64:06:76:5B:1F:B0:80:24:F6:B1:E6:55:7E:FC:A0:0F:29:91 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 7B1680191D165F116F9A1E7409E1122A0398AF77 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/79de1a10-540a-49e4-92f2-b8e81488ffd1.roa Signing time: Mon 05 Oct 2026 00:00:11 +0000 ROA not before: Mon 05 Oct 2026 00:00:11 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2803:4ed0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:16:80:19:1d:16:5f:11:6f:9a:1e:74:09:e1:12:2a:03:98:af:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Oct 5 00:00:11 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=bdcc9b5fe62444a684865de15d3c82afa5009124588ccfbbf936dff692ffa33f, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:f1:d6:40:e2:04:06:f0:eb:29:dd:14:67: 4a:d2:9a:ad:07:3c:bb:d6:c2:aa:33:93:94:3c:bd: e3:4d:0e:f9:da:3a:2c:11:3f:cf:4c:3a:14:93:de: c8:08:5c:f8:c0:65:3c:e7:5f:68:b4:d4:87:38:5b: 41:2a:f1:df:37:10:27:d3:2f:6e:49:48:ce:c6:50: 9b:e0:4a:d0:ce:59:99:8a:6f:13:42:66:df:cf:8e: 7f:dc:1d:3d:dd:0e:ba:20:50:17:b3:e1:3c:29:f4: 76:00:21:17:b7:e5:a8:5f:91:4b:af:4d:53:a7:14: a4:61:66:39:ec:ec:19:02:e2:61:c5:27:5c:6f:a2: 1e:e7:a0:a0:22:8a:a4:6c:74:fb:97:53:4f:5c:e5: 80:a4:2d:8e:94:8d:bf:f7:cc:64:e4:b1:24:04:97: cb:bd:f1:52:cf:d0:b6:ac:bb:9d:79:f6:8b:8f:8e: e7:08:14:b0:04:7f:e1:a2:64:39:c8:a3:84:27:4b: d9:20:16:d9:20:8a:4b:7e:54:41:ff:3f:f5:84:e0: 1f:62:18:b4:1a:9d:7d:23:b9:1f:39:31:3c:1d:a4: e5:2f:a0:50:71:d1:73:44:f1:4f:3e:fa:29:09:e8: fc:80:a4:2e:25:fb:cc:28:c9:26:9c:06:2d:7a:ad: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:64:06:76:5B:1F:B0:80:24:F6:B1:E6:55:7E:FC:A0:0F:29:91 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/79de1a10-540a-49e4-92f2-b8e81488ffd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4ed0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:f5:c9:87:ec:fe:e5:ba:0f:8b:5d:bc:a7:b5:11:66:3c:37: 10:fe:f7:2e:4f:ba:4a:fe:4b:a9:be:0a:e8:6c:99:33:22:78: 08:7e:b4:ad:63:a0:d1:da:cf:93:70:91:52:b8:ac:17:b7:f2: e9:96:4b:66:b3:19:1f:5e:d5:2d:bd:bc:13:e6:00:0f:18:08: 6a:2c:59:9b:ac:39:03:d8:4d:75:68:b9:57:1b:8d:1f:d2:e0: d2:b3:89:6f:27:57:f0:c8:a1:90:9b:f9:f5:30:bd:e3:62:3d: 78:09:bd:fd:9e:a1:43:0a:37:7e:eb:36:d9:83:bc:f2:08:a1: c7:8e:1b:9c:b3:dc:3d:30:1c:5c:7a:ac:e0:9e:77:8d:40:37: e2:b9:15:db:fb:50:b9:49:b0:ce:ff:13:9a:82:98:58:4a:47: f5:dd:f8:07:4c:bd:ae:31:7f:36:fc:5b:87:08:0d:1e:67:86: bc:91:06:8b:cc:17:07:c9:09:e7:34:68:6b:f7:cd:af:42:ed: 33:bd:88:f1:0f:c9:e1:03:98:15:a8:9f:74:a0:87:b9:62:de: ea:aa:53:5f:e1:ee:58:f9:c3:cb:9a:ef:32:e2:60:9a:94:8f: d7:14:4f:fe:df:e6:85:b0:2e:d0:2e:6a:09:98:7e:08:85:65: 8b:a3:d2:49 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgIUexaAGR0WXxFvmh50CeESKgOYr3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjEwMDUwMDAwMTFaFw0yNzAxMDMyMzU5NTlaMHoxSTBHBgNV BAUTQGJkY2M5YjVmZTYyNDQ0YTY4NDg2NWRlMTVkM2M4MmFmYTUwMDkxMjQ1ODhj Y2ZiYmY5MzZkZmY2OTJmZmEzM2YxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2t8dZA4gQG8Osp3RRnStKarQc8u9bCqjOTlDy9400O+do6LBE/z0w6FJPe yAhc+MBlPOdfaLTUhzhbQSrx3zcQJ9MvbklIzsZQm+BK0M5ZmYpvE0Jm38+Of9wd Pd0OuiBQF7PhPCn0dgAhF7flqF+RS69NU6cUpGFmOezsGQLiYcUnXG+iHuegoCKK pGx0+5dTT1zlgKQtjpSNv/fMZOSxJASXy73xUs/Qtqy7nXn2i4+O5wgUsAR/4aJk OcijhCdL2SAW2SCKS35UQf8/9YTgH2IYtBqdfSO5HzkxPB2k5S+gUHHRc0TxTz76 KQno/ICkLiX7zCjJJpwGLXqtR0UCAwEAAaOCAngwggJ0MB0GA1UdDgQWBBRwnGQG dlsfsIAk9rHmVX78oA8pkTAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9y c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy83OWRlMWExMC01 NDBhLTQ5ZTQtOTJmMi1iOGU4MTQ4OGZmZDEucm9hMIGIBgNVHR8EgYAwfjB8oHqg eIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3Zv bHVtZS9jNDc0ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xP WHNQcGp5Ni1wNGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANO0DANBgkqhkiG9w0B AQsFAAOCAQEALvXJh+z+5boPi128p7URZjw3EP73Lk+6Sv5Lqb4K6GyZMyJ4CH60 rWOg0drPk3CRUrisF7fy6ZZLZrMZH17VLb28E+YADxgIaixZm6w5A9hNdWi5VxuN H9Lg0rOJbydX8MihkJv59TC942I9eAm9/Z6hQwo3fus22YO88gihx44bnLPcPTAc XHqs4J53jUA34rkV2/tQuUmwzv8TmoKYWEpH9d34B0y9rjF/NvxbhwgNHmeGvJEG i8wXB8kJ5zRoa/fNr0LtM72I8Q/J4QOYFaifdKCHuWLe6qpTX+HuWPnDy5rvMuJg mpSP1xRP/t/mhbAu0C5qCZh+CIVli6PSSQ== -----END CERTIFICATE-----Generated at Thu Oct 15 02:04:04 2026 by rpki-client