$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa File: 323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa (raw, json) Hash identifier: ItA+cdqaLZsTNr50ZiSOLkEijxrKaplEW1o2DKgsaoQ= Subject key identifier: BD:E4:8E:93:C5:9B:3F:1A:3C:4E:7A:13:A6:8D:F6:A6:86:40:8C:9A Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0774153C1B55BDC194160DCFD417079CC4B3E29A Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa Signing time: Mon 15 Jul 2024 08:50:13 +0000 ROA not before: Mon 15 Jul 2024 08:45:13 +0000 ROA not after: Mon 14 Jul 2025 08:50:13 +0000 asID: 137256 IP address blocks: 2602:feda:1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 08:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:74:15:3c:1b:55:bd:c1:94:16:0d:cf:d4:17:07:9c:c4:b3:e2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:13 2024 GMT Not After : Jul 14 08:50:13 2025 GMT Subject: CN=BDE48E93C59B3F1A3C4E7A13A68DF6A686408C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:08:30:f3:dc:83:34:a5:99:9f:cf:91:62: c5:50:f1:80:dc:49:5a:a8:26:dc:cf:2b:c6:23:e3: 4e:4f:dd:0f:61:de:6f:5c:92:3d:c6:2b:e7:dc:30: 07:57:a3:9a:d4:a7:11:d8:7f:3e:be:85:98:f2:c2: 3c:bb:15:fb:e4:a8:c3:13:c9:25:13:ae:d9:68:38: e8:dd:93:85:24:90:39:9a:59:d9:9d:ea:22:c8:e0: 80:e4:91:ae:c6:6c:29:55:80:1f:ae:40:33:5c:e6: 05:b7:1d:ff:60:25:a1:39:b1:f9:cc:97:e5:50:01: 25:6b:18:8a:fe:b4:71:91:80:c1:b0:85:c2:9b:65: 4c:72:96:f6:9c:ee:fb:65:d4:4b:09:03:97:23:b0: 23:2b:90:b2:7b:8e:01:ff:59:01:70:ea:e1:a5:99: 44:65:53:1f:f8:4a:92:4e:7a:81:4d:12:ac:ae:81: 87:bb:e1:a7:86:5f:a0:05:f8:02:09:74:08:8a:74: a9:29:35:92:d6:30:d7:62:47:8c:3d:b4:d8:cf:6d: 7a:5d:55:78:00:94:08:7d:02:6c:83:99:7b:19:4f: cc:2a:98:d9:2a:1d:ab:62:43:fe:cc:e8:c9:00:54: 15:31:fd:23:af:43:b5:bf:91:5f:da:e9:af:20:77: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E4:8E:93:C5:9B:3F:1A:3C:4E:7A:13:A6:8D:F6:A6:86:40:8C:9A X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:1d0::/44 Signature Algorithm: sha256WithRSAEncryption bd:51:b0:83:cc:fc:60:78:86:6a:27:e7:5b:ba:c0:ab:91:af: 9e:88:dd:8e:fd:ed:e1:e0:7e:2f:a1:79:c1:18:7b:83:4b:cd: 73:61:ae:40:73:53:01:ff:44:5a:d3:1e:a9:cc:81:52:40:98: bd:1d:7a:21:21:0f:45:9a:08:51:02:ff:7f:ac:f4:f7:ec:27: e6:7f:dd:bc:c8:e6:55:2a:42:0d:b0:0c:5a:6b:95:66:20:fc: ae:32:ae:43:2e:39:a6:6d:5d:62:d2:44:63:14:8f:3b:bb:94: 49:2c:92:d5:31:8d:97:77:2c:d1:a2:c9:e8:58:a6:0e:e3:8d: 5c:2e:8c:94:56:a3:68:72:ff:f1:6f:fe:d4:63:b8:51:69:35: 87:27:d7:6c:9b:60:26:cf:d0:b5:b5:95:2b:2c:d0:52:81:1a: a7:14:74:fd:20:75:79:9f:3b:1b:4a:aa:c7:30:a1:8e:b4:a6: b9:f2:fe:8f:f4:76:92:02:f6:4a:0e:47:08:cf:62:6a:78:dd: 74:31:36:a3:1e:0b:fd:ef:fe:2b:cb:2a:96:de:33:49:d2:4c: ed:35:93:a8:06:8d:c9:41:2b:ad:88:b1:fd:78:74:23:72:cc: 75:42:47:af:1d:66:82:d7:25:a2:3c:50:27:4d:78:3c:38:8d: 81:2c:ad:86 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUB3QVPBtVvcGUFg3P1BcHnMSz4powDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEzWhcNMjUwNzE0MDg1MDEz WjAzMTEwLwYDVQQDEyhCREU0OEU5M0M1OUIzRjFBM0M0RTdBMTNBNjhERjZBNjg2 NDA4QzlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvsIMPPcgzSl mZ/PkWLFUPGA3ElaqCbczyvGI+NOT90PYd5vXJI9xivn3DAHV6Oa1KcR2H8+voWY 8sI8uxX75KjDE8klE67ZaDjo3ZOFJJA5mlnZneoiyOCA5JGuxmwpVYAfrkAzXOYF tx3/YCWhObH5zJflUAElaxiK/rRxkYDBsIXCm2VMcpb2nO77ZdRLCQOXI7AjK5Cy e44B/1kBcOrhpZlEZVMf+EqSTnqBTRKsroGHu+Gnhl+gBfgCCXQIinSpKTWS1jDX YkeMPbTYz216XVV4AJQIfQJsg5l7GU/MKpjZKh2rYkP+zOjJAFQVMf0jr0O1v5Ff 2umvIHcysQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFL3kjpPFmz8aPE56E6aN9qaG QIyaMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzE2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM3MzIzNTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gHQMA0GCSqGSIb3DQEBCwUAA4IBAQC9UbCDzPxgeIZqJ+dbusCr ka+eiN2O/e3h4H4voXnBGHuDS81zYa5Ac1MB/0Ra0x6pzIFSQJi9HXohIQ9FmghR Av9/rPT37Cfmf928yOZVKkINsAxaa5VmIPyuMq5DLjmmbV1i0kRjFI87u5RJLJLV MY2XdyzRosnoWKYO441cLoyUVqNocv/xb/7UY7hRaTWHJ9dsm2Amz9C1tZUrLNBS gRqnFHT9IHV5nzsbSqrHMKGOtKa58v6P9HaSAvZKDkcIz2JqeN10MTajHgv97/4r yyqW3jNJ0kztNZOoBo3JQSutiLH9eHQjcsx1QkevHWaC1yWiPFAnTXg8OI2BLK2G -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org