$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa File: 3134312e3139332e32312e302f32342d3234203d3e203338303233.roa (raw, json) Hash identifier: m8qkn6GS+G0TALltwExFuCHLoR8+4Y2dMkH2PASxG+E= Subject key identifier: DB:FD:2E:24:3D:EE:8B:20:EF:EE:49:2A:C0:36:55:93:A2:D9:26:B2 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0F3E4C9C94BBF22F8AFA5EC3D93511966425E1D2 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa Signing time: Mon 22 Apr 2024 22:09:41 +0000 ROA not before: Mon 22 Apr 2024 22:04:41 +0000 ROA not after: Mon 21 Apr 2025 22:09:41 +0000 asID: 38023 IP address blocks: 141.193.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 00:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3e:4c:9c:94:bb:f2:2f:8a:fa:5e:c3:d9:35:11:96:64:25:e1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Apr 22 22:04:41 2024 GMT Not After : Apr 21 22:09:41 2025 GMT Subject: CN=DBFD2E243DEE8B20EFEE492AC0365593A2D926B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:2d:bd:b5:e0:e9:64:41:af:96:36:32:14: 1c:f7:e3:d5:5a:00:3e:5b:71:77:69:d4:f4:c3:f5: 2b:e6:eb:7f:e4:12:d7:0a:51:16:c3:ca:aa:71:ad: 4e:1b:13:71:c4:6d:9b:24:36:4e:bf:3b:f5:cc:a2: 88:75:6d:c0:74:f8:83:9f:f6:3c:3b:23:c4:10:40: e9:a0:d4:05:03:0b:d1:57:62:63:3c:35:ab:f8:03: 5d:51:9e:a4:e3:e0:92:b1:74:55:10:a7:2f:a0:3c: 7d:bf:1f:7b:8d:f7:cf:96:07:d9:c9:83:9f:ad:02: 22:9b:cc:f8:97:6f:cb:02:a0:e4:34:75:43:02:f8: b3:df:42:c4:46:48:96:c9:5f:cc:44:96:46:c8:6a: 3b:be:08:95:67:2c:0f:09:96:02:05:46:a8:ea:28: 42:74:a3:26:be:89:bc:85:d4:24:0c:7e:b8:b7:0d: 24:07:31:73:12:1e:2f:40:18:d1:35:d8:61:0b:5c: 9e:54:31:71:d4:75:da:30:72:c2:6b:a3:61:6d:29: 33:86:8c:de:73:9d:55:cd:a5:ae:c4:fc:32:ab:1c: 1b:54:1b:6a:10:b3:3b:e0:a8:55:83:79:7a:22:3a: ea:ef:28:7f:1e:e9:9b:69:6d:fa:42:a7:90:63:a2: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FD:2E:24:3D:EE:8B:20:EF:EE:49:2A:C0:36:55:93:A2:D9:26:B2 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.193.21.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:f1:e9:1a:7d:e1:60:c9:ac:d6:91:a6:9a:13:d6:26:ec:6d: cf:9b:82:4f:4a:8e:ed:e3:57:48:fd:f5:f5:75:31:4a:60:92: 09:3a:0f:1d:4b:3c:7f:62:f8:fb:5c:27:34:7a:35:c7:b9:4a: ee:cd:bd:cc:17:fc:ec:b2:5a:2f:5b:ef:d2:a0:c8:06:4d:97: bf:0a:d0:ab:74:e6:8c:2b:71:f1:10:13:48:d6:b5:16:33:02: 89:96:0d:ed:dc:8c:fe:ca:6d:65:37:2e:63:80:a7:48:7d:b4: 45:dd:95:5e:f6:5f:1a:cf:2f:aa:9f:95:c9:c6:0b:7f:7d:3f: 65:5c:5e:e7:44:62:35:0f:e9:12:c2:f7:f2:6c:9c:56:4e:2e: 84:9f:43:9e:21:37:b7:88:bd:6e:65:ae:bb:88:6b:3b:b7:d2: 37:8d:ca:cb:fc:6a:b2:31:a0:0f:c7:ff:43:50:e2:df:d6:2b: e5:5c:f6:2c:ff:c5:17:c5:46:9c:1d:1b:ce:4a:9a:ad:3c:63: 5a:ee:47:34:f0:26:e4:94:02:43:4f:d6:6a:ab:a5:90:dd:d5: de:82:df:f5:d1:50:77:ed:e3:cf:76:4c:40:21:33:ca:d7:3a: 4c:62:5d:ec:6b:d6:93:03:78:eb:d9:b3:7a:2e:1e:23:38:52: 2d:24:e2:e0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUDz5MnJS78i+K+l7D2TURlmQl4dIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNDIyMjIwNDQxWhcNMjUwNDIxMjIwOTQx WjAzMTEwLwYDVQQDEyhEQkZEMkUyNDNERUU4QjIwRUZFRTQ5MkFDMDM2NTU5M0Ey RDkyNkIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCItvbXg6WRB r5Y2MhQc9+PVWgA+W3F3adT0w/Ur5ut/5BLXClEWw8qqca1OGxNxxG2bJDZOvzv1 zKKIdW3AdPiDn/Y8OyPEEEDpoNQFAwvRV2JjPDWr+ANdUZ6k4+CSsXRVEKcvoDx9 vx97jffPlgfZyYOfrQIim8z4l2/LAqDkNHVDAviz30LERkiWyV/MRJZGyGo7vgiV ZywPCZYCBUao6ihCdKMmvom8hdQkDH64tw0kBzFzEh4vQBjRNdhhC1yeVDFx1HXa MHLCa6NhbSkzhozec51VzaWuxPwyqxwbVBtqELM74KhVg3l6Ijrq7yh/HumbaW36 QqeQY6LUdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNv9LiQ97osg7+5JKsA2VZOi 2SayMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzAzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEV MA0GCSqGSIb3DQEBCwUAA4IBAQBM8ekafeFgyazWkaaaE9Ym7G3Pm4JPSo7t41dI /fX1dTFKYJIJOg8dSzx/Yvj7XCc0ejXHuUruzb3MF/zsslovW+/SoMgGTZe/CtCr dOaMK3HxEBNI1rUWMwKJlg3t3Iz+ym1lNy5jgKdIfbRF3ZVe9l8azy+qn5XJxgt/ fT9lXF7nRGI1D+kSwvfybJxWTi6En0OeITe3iL1uZa67iGs7t9I3jcrL/GqyMaAP x/9DUOLf1ivlXPYs/8UXxUacHRvOSpqtPGNa7kc08CbklAJDT9Zqq6WQ3dXegt/1 0VB37ePPdkxAITPK1zpMYl3sa9aTA3jr2bN6Lh4jOFItJOLg -----END CERTIFICATE-----Generated at Sun May 5 01:11:40 2024 by rpki-client on console-ams.rpki-client.org