$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3130303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3130303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: ncHMPG2l3a9aNwbB4GLFYDtrNHKSDwn8/6S0PxhEC8M= Subject key identifier: 58:5C:86:C3:FC:ED:87:16:25:19:2D:64:1F:3B:5F:90:80:D6:22:EA Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 2935CA1ED0CF2504C2E8110D24AC1C30131CC585 Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3130303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:01 +0000 ROA not before: Mon 03 Nov 2025 01:20:01 +0000 ROA not after: Mon 02 Nov 2026 01:25:01 +0000 asID: 273134 IP address blocks: 2803:5450:100::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:35:ca:1e:d0:cf:25:04:c2:e8:11:0d:24:ac:1c:30:13:1c:c5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:01 2025 GMT Not After : Nov 2 01:25:01 2026 GMT Subject: CN=585C86C3FCED871625192D641F3B5F9080D622EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:da:c0:c1:76:ef:4f:c6:03:a0:b9:e0:b0: 33:b1:49:fe:d3:6b:95:78:07:97:5a:47:06:a5:80: 06:d8:f6:94:f4:b6:43:cf:b0:3f:98:f6:f4:f4:28: 2f:18:e4:73:f6:a1:ec:a1:fa:51:ce:6f:25:d8:e8: 22:31:9f:2f:d8:90:77:1d:43:8b:fa:bb:0c:91:af: 92:98:b5:d8:8d:3d:08:1a:55:c5:e1:bc:20:11:38: 50:02:86:34:fe:6a:94:b1:b5:a7:1f:4a:e3:15:f5: b9:64:66:7d:73:72:bc:37:73:88:1b:8c:24:97:7b: 14:40:bf:2f:12:36:e8:c6:48:91:97:7e:9a:05:43: 9d:dc:90:11:9c:a1:5d:6e:3f:48:70:62:0d:f5:90: 87:52:d4:90:a6:f6:71:de:e5:71:48:a0:f1:fc:f9: cb:22:d1:b4:73:c3:ab:0a:ed:a2:53:b8:23:f9:70: 41:34:df:8b:78:43:81:2c:51:8d:c7:56:d7:92:35: f0:94:5c:67:6a:d1:5d:4f:1c:dc:d2:ba:bc:9e:e5: c6:a8:ee:6f:7b:28:ec:39:4c:e5:82:78:44:09:9a: e9:26:1c:71:7f:74:f2:f6:dc:f0:4a:cf:be:b1:4b: 15:be:38:a7:13:30:d0:4f:be:6b:83:73:c2:08:f4: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5C:86:C3:FC:ED:87:16:25:19:2D:64:1F:3B:5F:90:80:D6:22:EA X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3130303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:100::/42 Signature Algorithm: sha256WithRSAEncryption 37:ce:1a:e4:e3:24:ea:66:69:43:38:20:6a:39:b7:60:dc:49: 13:60:a4:3e:af:38:07:a3:39:0a:a9:ea:be:65:80:6d:83:2e: b1:27:64:1d:bf:44:76:a3:3b:22:ab:0d:14:9e:f4:5f:4b:b9: e1:02:19:58:d3:7a:2d:e4:61:51:ce:92:a1:12:06:c5:c9:0b: 2d:a5:32:34:29:78:61:f3:c0:73:d3:05:08:dc:1c:fd:07:8b: 88:12:17:c6:0a:23:4b:81:37:d8:b1:58:72:c5:d9:e3:f6:35: 35:5a:e1:60:22:9e:c8:c9:f5:96:67:17:b0:f2:7a:c6:b2:54: 5a:50:75:08:ab:26:c6:be:cf:53:1e:49:1d:37:c6:a7:c2:07: 56:42:08:2c:46:d2:62:c3:59:f9:fc:9a:fc:db:3a:69:b7:3e: ef:43:46:2e:a0:a9:4f:5f:15:6c:ed:93:96:ad:40:0a:c0:d1: 47:6f:93:be:1e:9b:f4:5e:2d:f2:4f:50:01:71:67:9d:49:51: 95:fc:bf:44:72:b2:66:74:34:32:94:2a:bb:71:82:ff:40:18: 62:87:8e:8e:87:89:19:d0:ab:b5:5e:b9:35:23:aa:b3:00:a6: 6a:63:67:b1:4e:35:38:00:26:9c:23:46:99:35:ef:bf:dc:ba: 45:e6:2e:4a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKTXKHtDPJQTC6BENJKwcMBMcxYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDFaFw0yNjExMDIwMTI1MDFaMDMxMTAvBgNV BAMTKDU4NUM4NkMzRkNFRDg3MTYyNTE5MkQ2NDFGM0I1RjkwODBENjIyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcptrAwXbvT8YDoLngsDOxSf7T a5V4B5daRwalgAbY9pT0tkPPsD+Y9vT0KC8Y5HP2oeyh+lHObyXY6CIxny/YkHcd Q4v6uwyRr5KYtdiNPQgaVcXhvCAROFAChjT+apSxtacfSuMV9blkZn1zcrw3c4gb jCSXexRAvy8SNujGSJGXfpoFQ53ckBGcoV1uP0hwYg31kIdS1JCm9nHe5XFIoPH8 +csi0bRzw6sK7aJTuCP5cEE034t4Q4EsUY3HVteSNfCUXGdq0V1PHNzSurye5cao 7m97KOw5TOWCeEQJmukmHHF/dPL23PBKz76xSxW+OKcTMNBPvmuDc8II9AClAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWFyGw/zthxYlGS1kHztfkIDWIuowHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzEz MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAEAMA0GCSqGSIb3DQEBCwUAA4IBAQA3zhrk4yTqZmlDOCBqObdg3EkT YKQ+rzgHozkKqeq+ZYBtgy6xJ2Qdv0R2ozsiqw0UnvRfS7nhAhlY03ot5GFRzpKh EgbFyQstpTI0KXhh88Bz0wUI3Bz9B4uIEhfGCiNLgTfYsVhyxdnj9jU1WuFgIp7I yfWWZxew8nrGslRaUHUIqybGvs9THkkdN8anwgdWQggsRtJiw1n5/Jr82zpptz7v Q0YuoKlPXxVs7ZOWrUAKwNFHb5O+Hpv0Xi3yT1ABcWedSVGV/L9EcrJmdDQylCq7 cYL/QBhih46Oh4kZ0Ku1Xrk1I6qzAKZqY2exTjU4ACacI0aZNe+/3LpF5i5K -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:18 2025 by rpki-client