$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3232203d3e20323030343534.roa File: 3230382e38352e382e302f32322d3232203d3e20323030343534.roa (raw, json) Hash identifier: O/0vAhsMyLBKv8yqL6LzYbVMMi1drTbReMkacO8bOq8= Subject key identifier: 67:16:7C:C7:4A:A1:4F:36:39:EE:15:D6:10:11:10:FC:CE:8E:02:43 Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643 Certificate serial: 7042FBB474B3093AB114D0D1429ACB9FB5F44124 Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3232203d3e20323030343534.roa Signing time: Mon 20 Jan 2025 05:01:51 +0000 ROA not before: Mon 20 Jan 2025 04:56:51 +0000 ROA not after: Mon 19 Jan 2026 05:01:51 +0000 asID: 200454 IP address blocks: 208.85.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Feb 2025 23:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:42:fb:b4:74:b3:09:3a:b1:14:d0:d1:42:9a:cb:9f:b5:f4:41:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643 Validity Not Before: Jan 20 04:56:51 2025 GMT Not After : Jan 19 05:01:51 2026 GMT Subject: CN=67167CC74AA14F3639EE15D6101110FCCE8E0243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:f1:d3:a8:2c:af:9f:9a:f4:05:bf:59:5f: d3:72:44:f0:9e:a7:17:9f:eb:5f:b2:1d:57:55:98: 7e:4d:07:9b:02:0a:dc:78:a0:4c:93:d9:04:0a:21: 3f:ac:65:a8:d9:a0:41:3e:f4:a5:b6:ad:e5:d7:b6: db:93:3f:ac:47:d3:82:8a:fa:b3:6d:c9:44:db:bc: fc:ae:5f:a7:69:e7:db:45:4f:b5:2a:c7:a8:62:bc: 0b:f2:82:4b:0d:de:d7:c4:02:6d:6e:cb:89:bc:54: 17:ba:d4:a5:b3:70:90:62:55:78:1a:59:17:a1:5a: 1f:7f:db:64:88:2c:6e:01:9d:79:95:00:90:24:5c: 75:2f:6e:bd:a3:d2:00:a6:7b:cf:fd:62:ac:bd:8b: 90:3f:59:83:9c:ee:d3:9c:57:a7:d0:09:fe:d2:d2: 1f:b7:9f:da:85:f6:69:eb:75:e8:e6:4c:64:24:de: b7:02:85:2b:05:aa:0d:c8:6f:12:49:df:d0:c3:8a: b1:d9:a5:a7:fd:bb:87:8e:ce:aa:9c:67:27:75:5b: 88:e3:4d:e2:8e:9a:e5:e9:f7:f6:fc:c1:3f:cb:ef: 68:ea:11:96:9d:26:52:ea:b0:18:63:38:ea:89:6a: a6:7a:48:49:69:a0:40:1f:4e:f4:43:09:42:6b:f4: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:16:7C:C7:4A:A1:4F:36:39:EE:15:D6:10:11:10:FC:CE:8E:02:43 X509v3 Authority Key Identifier: keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer Subject Information Access: Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3232203d3e20323030343534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.85.8.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:4f:26:4c:69:86:54:a2:83:58:10:94:0b:c0:88:8d:d9:d1: 55:85:b3:30:13:7c:1b:64:f1:13:a1:a7:c1:43:dd:bc:79:a3: 8e:bd:42:15:a8:9d:7f:bd:b0:0e:99:e7:78:94:ac:a8:0e:ea: 8d:ac:1a:93:8e:a4:f3:7e:3b:52:86:7d:33:49:99:3c:f3:6a: b6:d5:b2:b5:7b:72:d7:30:0f:c4:15:63:03:ff:20:00:2b:2d: af:fe:36:35:6b:b1:0c:32:a5:bf:20:58:db:04:73:71:d0:4e: 8c:14:55:92:5c:14:a5:48:ab:e6:05:4c:75:fd:50:55:9b:43: c3:f7:75:f7:1e:39:22:05:72:28:52:3d:39:e5:63:8f:a8:9d: ed:6b:8b:9b:04:a3:3d:8a:72:d9:c2:4e:94:d8:8e:2e:30:47: 84:5b:48:3a:d9:50:f9:d6:bc:e6:91:a4:95:91:08:da:8e:0e: 0b:77:a6:7a:9d:a9:25:91:a5:48:25:4b:73:74:c1:e3:1b:ca: 82:fb:0b:34:51:45:54:75:3d:5e:07:6c:ec:2f:f5:2b:4b:c9: cb:8b:d1:98:e1:a2:6e:d1:0a:60:86:eb:c3:4e:70:cd:de:53: 0f:9e:18:26:b0:87:02:0f:6a:4f:45:27:5f:6d:25:5a:b2:24: 8f:59:be:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUcEL7tHSzCTqxFNDRQprLn7X0QSQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMWI1M2Y4OTNhNGE1NjlkZjlkNmQ5MzNk MjlhNjUzYWJkYjgxMDg2NDMwHhcNMjUwMTIwMDQ1NjUxWhcNMjYwMTE5MDUwMTUx WjAzMTEwLwYDVQQDEyg2NzE2N0NDNzRBQTE0RjM2MzlFRTE1RDYxMDExMTBGQ0NF OEUwMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvvx06gsr5+a 9AW/WV/TckTwnqcXn+tfsh1XVZh+TQebAgrceKBMk9kECiE/rGWo2aBBPvSltq3l 17bbkz+sR9OCivqzbclE27z8rl+naefbRU+1KseoYrwL8oJLDd7XxAJtbsuJvFQX utSls3CQYlV4GlkXoVoff9tkiCxuAZ15lQCQJFx1L269o9IApnvP/WKsvYuQP1mD nO7TnFen0An+0tIft5/ahfZp63Xo5kxkJN63AoUrBaoNyG8SSd/Qw4qx2aWn/buH js6qnGcndVuI403ijprl6ff2/ME/y+9o6hGWnSZS6rAYYzjqiWqmekhJaaBAH070 QwlCa/R8cwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFGcWfMdKoU82Oe4V1hAREPzO jgJDMB8GA1UdIwQYMBaAFKFWTM4unHMk0xj8tKCKALsJ87RpMA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8u Y29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzEvQTE1NjRDQ0UyRTlDNzMyNEQzMThG Q0I0QTA4QTAwQkIwOUYzQjQ2OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFi N2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI2Y2U0MDhkLTU1ODEt NDgzZC05MGIzLTUxMTlmYzgzMDA2NC8wMTI4NmQ1NDExYjUzZjg5M2E0YTU2OWRm OWQ2ZDkzM2QyOWE2NTNhYmRiODEwODY0My5jZXIwgYgGCCsGAQUFBwELBHwwejB4 BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmxlaXRlY2FzdHJvLmNvbS9yZXBvL0NB U1RSTy1JTlRFUk5FVC8xLzMyMzAzODJlMzgzNTJlMzgyZTMwMmYzMjMyMmQzMjMy MjAzZDNlMjAzMjMwMzAzNDM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALQVQgwDQYJKoZIhvcNAQEL BQADggEBAC5PJkxphlSig1gQlAvAiI3Z0VWFszATfBtk8ROhp8FD3bx5o469QhWo nX+9sA6Z53iUrKgO6o2sGpOOpPN+O1KGfTNJmTzzarbVsrV7ctcwD8QVYwP/IAAr La/+NjVrsQwypb8gWNsEc3HQTowUVZJcFKVIq+YFTHX9UFWbQ8P3dfceOSIFcihS PTnlY4+one1ri5sEoz2KctnCTpTYji4wR4RbSDrZUPnWvOaRpJWRCNqODgt3pnqd qSWRpUglS3N0weMbyoL7CzRRRVR1PV4HbOwv9StLycuL0Zjhom7RCmCG68NOcM3e Uw+eGCawhwIPak9FJ19tJVqyJI9Zvpo= -----END CERTIFICATE-----Generated at Wed Feb 5 09:37:00 2025 by rpki-client