$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa File: 3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa (raw, json) Hash identifier: oHLQFsjXRFv3CKzqdnVL+OPwxzuvXFWJNWc6iw0Sujk= Subject key identifier: 37:E8:20:50:73:AB:11:7B:5C:4D:70:F7:5A:AA:72:4C:EC:37:0D:5E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0950502654CA20789EB8A0A4FC4EF4D9B1806472 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa Signing time: Mon 15 Jul 2024 08:50:09 +0000 ROA not before: Mon 15 Jul 2024 08:45:09 +0000 ROA not after: Mon 14 Jul 2025 08:50:09 +0000 asID: 396982 IP address blocks: 134.195.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Feb 2025 22:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:50:50:26:54:ca:20:78:9e:b8:a0:a4:fc:4e:f4:d9:b1:80:64:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:09 2024 GMT Not After : Jul 14 08:50:09 2025 GMT Subject: CN=37E8205073AB117B5C4D70F75AAA724CEC370D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:b2:5b:ae:f2:74:72:28:58:90:37:3d:98: a7:f1:87:a8:92:5c:a0:0b:c5:93:b4:0f:e7:a4:b8: 7b:a1:5a:1d:80:14:85:ed:b1:e7:80:10:6b:80:5c: c7:79:30:97:75:ed:e0:20:34:d0:78:db:d6:a6:d9: 38:0c:7e:fa:18:a6:47:2b:dd:c1:74:e1:3b:1d:fd: 37:7d:a8:f4:86:9e:dc:af:4d:3c:2b:16:5b:c4:15: 0e:a4:4d:8d:71:57:16:a9:7c:19:26:62:8f:58:60: 33:37:3d:7b:f2:50:b9:9e:f3:22:1a:77:0e:c7:47: 34:d7:bf:c1:07:9d:ea:d5:f8:b6:05:73:c5:95:9b: 64:6f:e0:80:37:7a:17:8d:9d:1e:2b:d0:a6:c8:ed: 58:13:49:90:45:e0:36:0d:5b:9d:64:5a:28:9d:76: cd:62:82:47:f7:f5:96:ff:22:be:4f:c6:89:ba:04: 0a:50:c6:9a:b5:4b:97:56:41:7b:e1:1c:dd:d6:1a: fa:e5:9e:de:8e:0d:71:d1:11:83:0a:0d:1a:20:05: 42:22:7b:8c:0c:ef:1d:50:b0:7e:08:e9:16:a1:1c: 84:9b:aa:1e:6e:dd:70:21:b4:59:29:a7:08:9e:95: 54:ee:2b:aa:7c:57:e1:9b:5e:8f:99:8f:88:fc:f9: 10:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:20:50:73:AB:11:7B:5C:4D:70:F7:5A:AA:72:4C:EC:37:0D:5E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption b6:d4:7d:8e:3d:d6:52:cb:3c:98:09:58:e3:4c:39:b8:5e:c4: 7f:8e:22:95:c6:a0:3f:14:df:ab:60:fb:eb:13:62:33:6a:fd: ef:7d:92:d3:db:ab:15:bf:b5:c7:b0:64:a4:00:4b:b8:8b:47: 5c:5a:00:dc:30:e8:4f:18:fd:7a:ac:22:e2:b7:fe:31:41:ca: aa:cb:0d:5e:85:c3:d8:33:4a:2b:3b:6c:67:3f:d1:6b:ca:7e: 1e:a4:f9:ef:3e:a0:11:12:80:ef:d6:e9:60:aa:5f:b5:50:0e: 93:02:d8:6b:26:9f:db:f5:c8:30:4b:34:cd:15:3a:b4:0f:e4: e3:bd:68:68:53:6b:f4:e7:77:60:d1:35:3d:f9:7e:03:03:a8: 88:6a:6c:4f:43:79:56:ed:fb:58:bc:f0:72:3d:15:09:37:e7: 51:06:50:65:86:30:83:a5:d8:27:90:b2:2b:5f:53:57:d6:c8: b9:85:1c:39:fc:63:52:56:ff:e9:73:7f:a9:85:42:6c:a2:b6: 33:34:29:9a:4f:cb:5c:6d:75:67:39:d0:59:d3:58:dc:38:bb: 7a:57:7d:50:88:07:49:1a:6b:2b:fd:38:55:60:e6:61:65:c9: 7b:f2:fe:2d:fb:64:f2:e0:0a:08:77:4b:46:c4:a9:29:74:a6: 33:d3:16:f5 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUCVBQJlTKIHieuKCk/E702bGAZHIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTA5WhcNMjUwNzE0MDg1MDA5 WjAzMTEwLwYDVQQDEygzN0U4MjA1MDczQUIxMTdCNUM0RDcwRjc1QUFBNzI0Q0VD MzcwRDVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KKyW67ydHIo WJA3PZin8YeoklygC8WTtA/npLh7oVodgBSF7bHngBBrgFzHeTCXde3gIDTQeNvW ptk4DH76GKZHK93BdOE7Hf03faj0hp7cr008KxZbxBUOpE2NcVcWqXwZJmKPWGAz Nz178lC5nvMiGncOx0c017/BB53q1fi2BXPFlZtkb+CAN3oXjZ0eK9CmyO1YE0mQ ReA2DVudZFoonXbNYoJH9/WW/yK+T8aJugQKUMaatUuXVkF74Rzd1hr65Z7ejg1x 0RGDCg0aIAVCInuMDO8dULB+COkWoRyEm6oebt1wIbRZKacInpVU7iuqfFfhm16P mY+I/PkQ+wIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFDfoIFBzqxF7XE1w91qqckzs Nw1eMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzMzM0MmUzMTM5MzUyZTMxMzAz MDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzkzNjM5MzgzMi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AYbDZDANBgkqhkiG9w0BAQsFAAOCAQEAttR9jj3WUss8mAlY40w5uF7Ef44ilcag PxTfq2D76xNiM2r9732S09urFb+1x7BkpABLuItHXFoA3DDoTxj9eqwi4rf+MUHK qssNXoXD2DNKKztsZz/Ra8p+HqT57z6gERKA79bpYKpftVAOkwLYayaf2/XIMEs0 zRU6tA/k471oaFNr9Od3YNE1Pfl+AwOoiGpsT0N5Vu37WLzwcj0VCTfnUQZQZYYw g6XYJ5CyK19TV9bIuYUcOfxjUlb/6XN/qYVCbKK2MzQpmk/LXG11ZznQWdNY3Di7 eld9UIgHSRprK/04VWDmYWXJe/L+Lftk8uAKCHdLRsSpKXSmM9MW9Q== -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:01 2025 by rpki-client