$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa File: 323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa (raw, json) Hash identifier: ZgjTNLaiIfaDnwaey2eZAo3SRD4z/GRl5w+KE7CxxGM= Subject key identifier: 78:29:E5:30:9E:E0:19:F1:47:CC:67:88:FD:69:89:EB:F0:C8:09:A0 Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643 Certificate serial: 282775D121AAE5C1679D954F1C7B89935121329E Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa Signing time: Mon 20 Jan 2025 05:01:53 +0000 ROA not before: Mon 20 Jan 2025 04:56:53 +0000 ROA not after: Mon 19 Jan 2026 05:01:53 +0000 asID: 215153 IP address blocks: 2602:faa5:f0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Feb 2025 23:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:27:75:d1:21:aa:e5:c1:67:9d:95:4f:1c:7b:89:93:51:21:32:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643 Validity Not Before: Jan 20 04:56:53 2025 GMT Not After : Jan 19 05:01:53 2026 GMT Subject: CN=7829E5309EE019F147CC6788FD6989EBF0C809A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:f0:e2:56:d1:0e:00:ea:3a:9c:e2:f5:b6: 6a:1c:ec:55:67:42:76:0a:d2:f2:7e:86:eb:bb:0b: 1b:02:9a:be:3e:e9:41:6b:25:25:40:34:4f:8e:5d: 4c:43:ba:7a:29:f9:2e:10:cc:bb:d6:5f:56:19:11: 7c:cf:c4:38:c4:ed:e0:1e:58:91:12:7d:0a:8a:a8: 2f:04:54:d9:69:1e:77:1d:4c:96:09:2c:90:6c:51: a3:b6:2f:92:5f:be:93:3b:64:ad:f5:29:2f:88:e3: fa:de:38:89:d0:73:dc:e2:8b:2c:00:d1:89:7e:85: 31:86:4e:78:96:2c:1f:48:07:73:b0:f0:94:58:24: 90:5b:21:a5:5c:5a:61:78:e3:90:f6:fe:7f:a4:7a: 70:1c:54:1e:80:d8:04:5e:11:44:3c:0c:7d:da:4f: be:48:63:0a:0c:fb:1d:eb:45:fc:35:73:2c:b4:42: 65:ae:4c:03:6e:c7:3d:45:c4:ac:13:3c:d3:02:26: ba:6c:4c:c3:f3:87:4f:69:88:ed:fd:e7:ca:77:7e: 82:b2:37:2c:f6:35:65:22:fc:a8:c5:0b:a7:e4:dc: e4:72:0a:36:b0:c9:cf:a1:1d:54:85:5e:01:93:dc: 0b:70:3e:da:40:0a:9d:f9:dd:e6:cf:52:05:f9:65: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:29:E5:30:9E:E0:19:F1:47:CC:67:88:FD:69:89:EB:F0:C8:09:A0 X509v3 Authority Key Identifier: keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer Subject Information Access: Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:faa5:f0c::/48 Signature Algorithm: sha256WithRSAEncryption 2f:01:f0:00:28:38:22:ae:e9:38:84:d8:8b:70:d9:ac:c9:e0: bb:5c:d7:36:12:d7:c1:3c:11:e2:fd:ae:46:3b:db:0e:80:17: 20:3b:3e:c9:ef:1f:51:f5:40:f5:24:2b:6d:16:23:f3:2f:ad: 8b:54:b9:19:fa:8e:09:e3:d9:b2:4b:89:3d:66:78:87:cc:b6: db:22:0d:d1:a0:8f:98:d9:8d:5c:04:e1:db:6f:3a:c8:88:ba: 82:be:3a:86:38:ca:a2:7b:81:aa:b1:f7:11:c5:70:e3:6f:bb: 08:19:96:80:79:2a:76:4f:07:b6:67:1e:80:ef:4a:90:31:f4: 41:9b:f1:76:10:94:41:db:42:3a:1e:1a:ca:bb:66:c9:6d:a4: 9b:53:49:9d:54:07:d1:68:02:c7:e2:8e:01:f0:e3:ff:2d:63: 72:a8:b2:76:23:72:65:1a:37:86:38:59:a1:b4:8a:59:e0:a4: 9d:51:c3:bc:da:2f:17:73:b5:46:73:14:17:8c:6d:4f:2b:06: e2:c0:5c:a6:6f:8d:57:01:e5:42:40:9b:5d:cf:7d:63:6a:84: 86:61:06:4f:ad:ef:3f:02:40:42:b0:95:bf:bc:d7:69:47:62: 7b:86:ba:ed:77:af:95:75:39:c6:d9:fb:6c:1b:4f:e9:d7:a2: b6:5a:65:7d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIUKCd10SGq5cFnnZVPHHuJk1EhMp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMWI1M2Y4OTNhNGE1NjlkZjlkNmQ5MzNk MjlhNjUzYWJkYjgxMDg2NDMwHhcNMjUwMTIwMDQ1NjUzWhcNMjYwMTE5MDUwMTUz WjAzMTEwLwYDVQQDEyg3ODI5RTUzMDlFRTAxOUYxNDdDQzY3ODhGRDY5ODlFQkYw QzgwOUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrbw4lbRDgDq Opzi9bZqHOxVZ0J2CtLyfobruwsbApq+PulBayUlQDRPjl1MQ7p6KfkuEMy71l9W GRF8z8Q4xO3gHliREn0KiqgvBFTZaR53HUyWCSyQbFGjti+SX76TO2St9SkviOP6 3jiJ0HPc4ossANGJfoUxhk54liwfSAdzsPCUWCSQWyGlXFpheOOQ9v5/pHpwHFQe gNgEXhFEPAx92k++SGMKDPsd60X8NXMstEJlrkwDbsc9RcSsEzzTAia6bEzD84dP aYjt/efKd36Csjcs9jVlIvyoxQun5Nzkcgo2sMnPoR1UhV4Bk9wLcD7aQAqd+d3m z1IF+WWZQQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFHgp5TCe4BnxR8xniP1pievw yAmgMB8GA1UdIwQYMBaAFKFWTM4unHMk0xj8tKCKALsJ87RpMA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8u Y29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzEvQTE1NjRDQ0UyRTlDNzMyNEQzMThG Q0I0QTA4QTAwQkIwOUYzQjQ2OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFi N2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI2Y2U0MDhkLTU1ODEt NDgzZC05MGIzLTUxMTlmYzgzMDA2NC8wMTI4NmQ1NDExYjUzZjg5M2E0YTU2OWRm OWQ2ZDkzM2QyOWE2NTNhYmRiODEwODY0My5jZXIwgZUGCCsGAQUFBwELBIGIMIGF MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmxlaXRlY2FzdHJvLmNvbS9yZXBv L0NBU1RSTy1JTlRFUk5FVC8xLzMyMzYzMDMyM2E2NjYxNjEzNTNhNjYzMDYzM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzEzNTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6 pQ8MMA0GCSqGSIb3DQEBCwUAA4IBAQAvAfAAKDgiruk4hNiLcNmsyeC7XNc2EtfB PBHi/a5GO9sOgBcgOz7J7x9R9UD1JCttFiPzL62LVLkZ+o4J49myS4k9ZniHzLbb Ig3RoI+Y2Y1cBOHbbzrIiLqCvjqGOMqie4GqsfcRxXDjb7sIGZaAeSp2Twe2Zx6A 70qQMfRBm/F2EJRB20I6HhrKu2bJbaSbU0mdVAfRaALH4o4B8OP/LWNyqLJ2I3Jl GjeGOFmhtIpZ4KSdUcO82i8Xc7VGcxQXjG1PKwbiwFymb41XAeVCQJtdz31jaoSG YQZPre8/AkBCsJW/vNdpR2J7hrrtd6+VdTnG2ftsG0/p16K2WmV9 -----END CERTIFICATE-----Generated at Wed Feb 5 09:44:17 2025 by rpki-client