$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e203635353639.roa File: 3230302e332e3135322e302f32322d3233203d3e203635353639.roa (raw, json) Hash identifier: M0zImmkWH/N24YCmzcJJ4RmFGxt/XhCDiNFLrokwMtQ= Subject key identifier: 3C:97:23:9A:D3:CC:AD:C9:4B:11:DD:44:EF:00:AE:6B:91:C3:BD:97 Certificate issuer: /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595 Certificate serial: 734ABEA9C6C9F564FA6A9014FBC5AE8E5989C30F Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e203635353639.roa Signing time: Fri 26 Sep 2025 15:15:00 +0000 ROA not before: Fri 26 Sep 2025 15:10:00 +0000 ROA not after: Fri 25 Sep 2026 15:15:00 +0000 asID: 65569 IP address blocks: 200.3.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4a:be:a9:c6:c9:f5:64:fa:6a:90:14:fb:c5:ae:8e:59:89:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595 Validity Not Before: Sep 26 15:10:00 2025 GMT Not After : Sep 25 15:15:00 2026 GMT Subject: CN=3C97239AD3CCADC94B11DD44EF00AE6B91C3BD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:7f:e3:79:00:a6:3b:08:57:62:c3:12:7a: d6:cc:b6:31:0e:d1:05:fe:bf:55:05:4a:bb:57:ca: c5:c3:5f:9c:db:69:9a:95:3e:ab:f1:d2:b2:86:95: 3c:7d:e9:40:14:c4:df:86:16:28:e7:d6:9a:a9:e5: 1b:5f:73:14:97:48:e9:86:93:6a:61:8a:f8:a9:7f: 5c:b5:c0:ae:af:58:f9:96:8a:99:b1:4d:41:41:75: 8f:46:52:74:54:6e:d5:31:ca:c4:16:41:fe:ee:ba: 0f:e8:6e:6f:aa:92:7b:45:59:f5:a6:6d:7c:91:84: a5:83:ce:c6:0f:45:08:0c:56:ed:8c:d4:81:c1:c9: 8a:0e:bd:08:c8:d7:cb:de:69:d2:64:3c:91:c0:d7: 8d:cb:99:91:05:23:71:dc:99:62:19:cb:29:4f:57: 48:8d:65:3a:90:80:ce:cb:e9:b3:06:74:90:3a:6e: 66:32:80:8c:3a:88:09:4f:3c:dd:0e:28:23:30:5e: cc:23:73:85:9b:78:d6:21:c3:0d:88:95:0b:07:70: 49:c1:58:ce:08:ef:ca:25:12:8f:af:68:50:13:88: 69:60:58:43:ef:c6:1e:1d:41:21:61:1f:48:0e:99: 70:f5:f4:aa:30:e1:8f:b3:29:f5:41:91:10:0f:c6: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:23:9A:D3:CC:AD:C9:4B:11:DD:44:EF:00:AE:6B:91:C3:BD:97 X509v3 Authority Key Identifier: keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e203635353639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.3.152.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:82:5f:9c:a8:9d:02:a9:4c:36:47:e3:1f:21:e6:a0:fb:c6: 4d:9c:08:64:9f:13:ee:b6:1b:de:21:e4:2c:1c:23:9c:95:b5: 8a:6c:e9:e0:03:5b:3f:f8:60:85:3e:00:0b:99:f2:c5:a4:0e: 3e:9b:a9:b9:68:90:c1:a0:92:3f:fd:92:ff:e3:40:ab:1b:8b: 49:f7:3d:1a:06:a8:b0:3c:ca:46:a7:48:ba:1c:e1:ff:69:31: 9c:7d:67:31:24:3e:11:59:36:f7:fa:3a:d7:eb:fd:88:d6:d5: d4:80:98:20:52:b3:2d:c6:ad:b1:80:d3:b0:c6:72:54:87:3a: 3c:fd:06:d7:f0:7d:70:d1:c6:25:9c:0a:0a:1f:16:44:3c:b5: 79:10:c8:63:18:73:d3:3c:3c:7d:a1:a2:6f:db:66:f2:27:2e: 08:c5:26:ed:19:5b:dd:f2:0b:d5:1b:26:cc:c4:1c:ef:35:fe: fe:99:b7:a3:4d:25:31:ba:b3:3e:ae:1d:ad:18:4f:99:a5:16: 7d:a7:3d:ff:cd:3c:d4:5f:f0:fb:af:b6:48:c4:cc:37:9d:1e: 1b:af:66:05:7c:f4:a2:69:82:96:51:3c:45:31:c5:e5:6e:f5: ff:59:73:a0:d3:0b:b3:69:fc:3a:95:1e:6f:ef:16:44:6b:ef: 9c:49:9b:f0 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUc0q+qcbJ9WT6apAU+8WujlmJww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ2MDkwM0I4Mzc1RkM1QzJDQjg5MTYzNUUwRUE4N0I1 MERBMzU5NTAeFw0yNTA5MjYxNTEwMDBaFw0yNjA5MjUxNTE1MDBaMDMxMTAvBgNV BAMTKDNDOTcyMzlBRDNDQ0FEQzk0QjExREQ0NEVGMDBBRTZCOTFDM0JEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVfX/jeQCmOwhXYsMSetbMtjEO 0QX+v1UFSrtXysXDX5zbaZqVPqvx0rKGlTx96UAUxN+GFijn1pqp5RtfcxSXSOmG k2phivipf1y1wK6vWPmWipmxTUFBdY9GUnRUbtUxysQWQf7uug/obm+qkntFWfWm bXyRhKWDzsYPRQgMVu2M1IHByYoOvQjI18veadJkPJHA143LmZEFI3HcmWIZyylP V0iNZTqQgM7L6bMGdJA6bmYygIw6iAlPPN0OKCMwXswjc4WbeNYhww2IlQsHcEnB WM4I78olEo+vaFATiGlgWEPvxh4dQSFhH0gOmXD19Kow4Y+zKfVBkRAPxqvBAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUPJcjmtPMrclLEd1E7wCua5HDvZcwHwYDVR0j BBgwFoAUDWCQO4N1/FwsuJFjXg6oe1DaNZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Q0U1Q0Q5RTQyRjk4QUM3OTdENjVFOTZBOUQwOUUzMUY1 RkJDNTg4NEQxRjgwMkZBRTgwQ0Y4RkQ1MEZERjlELzAvMEQ2MDkwM0I4Mzc1RkM1 QzJDQjg5MTYzNUUwRUE4N0I1MERBMzU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDYwOTAzQjgzNzVGQzVDMkNC ODkxNjM1RTBFQTg3QjUwREEzNTk1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUNFNUNEOUU0MkY5OEFDNzk3RDY1RTk2QTlEMDlFMzFGNUZCQzU4ODRE MUY4MDJGQUU4MENGOEZENTBGREY5RC8wLzMyMzAzMDJlMzMyZTMxMzUzMjJlMzAy ZjMyMzIyZDMyMzMyMDNkM2UyMDM2MzUzNTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIA5gwDQYJ KoZIhvcNAQELBQADggEBAByCX5yonQKpTDZH4x8h5qD7xk2cCGSfE+62G94h5Cwc I5yVtYps6eADWz/4YIU+AAuZ8sWkDj6bqblokMGgkj/9kv/jQKsbi0n3PRoGqLA8 ykanSLoc4f9pMZx9ZzEkPhFZNvf6Otfr/YjW1dSAmCBSsy3GrbGA07DGclSHOjz9 BtfwfXDRxiWcCgofFkQ8tXkQyGMYc9M8PH2hom/bZvInLgjFJu0ZW93yC9UbJszE HO81/v6Zt6NNJTG6sz6uHa0YT5mlFn2nPf/NPNRf8PuvtkjEzDedHhuvZgV89KJp gpZRPEUxxeVu9f9Zc6DTC7Np/DqVHm/vFkRr75xJm/A= -----END CERTIFICATE-----Generated at Wed Nov 5 17:12:30 2025 by rpki-client