$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa File: 323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa (raw, json) Hash identifier: z9UYZebQBBpym1JZwdF6FFNm2qdmel0cBVtyPOo1aYY= Subject key identifier: 91:66:0D:E1:F4:68:9C:B4:D7:10:17:74:25:F8:3A:2B:FF:A8:D3:93 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2A974F4669C5EF6F4920AEBEF686FBC02506DA59 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa Signing time: Mon 14 Aug 2023 07:53:37 +0000 ROA not before: Mon 14 Aug 2023 07:48:37 +0000 ROA not after: Mon 12 Aug 2024 07:53:37 +0000 asID: 40916 IP address blocks: 2602:feda:3a0::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:97:4f:46:69:c5:ef:6f:49:20:ae:be:f6:86:fb:c0:25:06:da:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Aug 14 07:48:37 2023 GMT Not After : Aug 12 07:53:37 2024 GMT Subject: CN=91660DE1F4689CB4D710177425F83A2BFFA8D393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:b5:9c:19:00:10:c0:30:8f:ec:1a:5e:df: 73:eb:fe:7b:fe:23:d9:27:fe:5f:f8:28:47:97:5e: c7:d3:5d:36:17:2e:67:19:e8:0a:35:34:46:9f:d4: 1c:ab:3e:2d:b0:15:dc:04:47:8a:af:c2:9e:0f:f8: ce:41:17:88:65:34:e5:ef:96:50:2f:06:ba:46:36: 3a:e8:fe:57:e1:08:67:7e:03:81:a1:2f:b6:0c:5b: bd:74:ed:98:84:73:d6:b8:9d:ab:7f:50:d4:89:cc: 3f:0c:a8:2c:fb:79:8d:b1:9a:f7:83:f9:30:d3:34: b9:db:43:d7:82:f3:db:16:c2:33:d4:da:2a:07:7a: bc:0b:b4:4c:91:b3:97:b9:81:f8:96:04:6e:56:85: 5d:d0:31:95:68:9c:47:75:2a:5f:b6:c1:8f:b9:d8: 5c:34:03:46:f8:0b:57:72:ac:8e:ef:31:a6:98:54: 27:60:35:19:05:a4:4e:f0:59:14:0b:79:e9:c7:5e: 7a:7b:ce:c9:e7:f3:e6:e5:10:fe:b2:71:bc:ac:30: f1:04:b2:da:33:4b:d3:1c:71:34:21:c3:f9:ba:15: 58:14:9e:74:19:39:96:36:a0:3b:04:91:14:4e:06: c5:e7:e1:2a:8c:57:72:11:56:16:a3:1f:29:e0:d8: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:66:0D:E1:F4:68:9C:B4:D7:10:17:74:25:F8:3A:2B:FF:A8:D3:93 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a0::/45 Signature Algorithm: sha256WithRSAEncryption 22:8b:6c:b0:74:be:f8:0f:aa:05:c6:60:11:19:b0:df:c8:a5: 5a:90:b6:78:00:6e:42:f1:bf:1a:e1:e3:cd:e3:73:f7:11:a1: 84:de:2d:86:9e:af:d9:7f:67:4d:40:57:0d:f3:42:3d:85:1d: f2:07:b4:15:d4:9d:7f:7a:bd:1f:11:1a:77:e7:32:8e:9f:ca: e7:00:f6:a9:66:1a:30:64:f7:a0:89:05:72:62:f7:18:c1:aa: 8e:d9:2b:85:98:20:d0:a0:27:54:e8:d3:dd:a9:e1:cd:a2:97: 23:33:22:1f:65:9c:14:8d:a7:40:43:37:b4:2b:07:33:2a:05: a3:40:c6:73:48:fe:64:d3:67:ea:f2:c8:1a:dd:07:ba:58:ef: 12:55:d4:37:1b:ce:00:41:2a:0f:7f:a1:cf:2c:d3:e3:c9:ad: 17:b1:c8:5d:5c:a7:9f:8c:4c:78:3b:82:28:6e:f8:d2:96:95: 12:d7:6f:76:39:0b:aa:17:3e:d6:4a:70:4a:2e:80:7b:4a:d6: b7:2e:75:db:ea:1b:75:43:df:c2:bd:97:75:84:b9:cf:68:79: 92:fa:92:79:bf:80:80:d6:69:c9:34:90:38:aa:a8:7e:2e:72: 5f:da:52:73:ba:48:b3:66:86:cb:71:a4:f7:aa:81:e7:9e:2b: a7:55:90:74 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUKpdPRmnF729JIK6+9ob7wCUG2lkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODM3WhcNMjQwODEyMDc1MzM3 WjAzMTEwLwYDVQQDEyg5MTY2MERFMUY0Njg5Q0I0RDcxMDE3NzQyNUY4M0EyQkZG QThEMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1W1nBkAEMAw j+waXt9z6/57/iPZJ/5f+ChHl17H0102Fy5nGegKNTRGn9Qcqz4tsBXcBEeKr8Ke D/jOQReIZTTl75ZQLwa6RjY66P5X4QhnfgOBoS+2DFu9dO2YhHPWuJ2rf1DUicw/ DKgs+3mNsZr3g/kw0zS520PXgvPbFsIz1NoqB3q8C7RMkbOXuYH4lgRuVoVd0DGV aJxHdSpftsGPudhcNANG+AtXcqyO7zGmmFQnYDUZBaRO8FkUC3npx156e87J5/Pm 5RD+snG8rDDxBLLaM0vTHHE0IcP5uhVYFJ50GTmWNqA7BJEUTgbF5+EqjFdyEVYW ox8p4NiFuQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFJFmDeH0aJy01xAXdCX4Oiv/ qNOTMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MzYxMzAzYTNhMmYzNDM1MmQzNDM4MjAzZDNlMjAzNDMwMzkzMTM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcDJgL+2gOgMA0GCSqGSIb3DQEBCwUAA4IBAQAii2ywdL74D6oFxmARGbDfyKVa kLZ4AG5C8b8a4ePN43P3EaGE3i2Gnq/Zf2dNQFcN80I9hR3yB7QV1J1/er0fERp3 5zKOn8rnAPapZhowZPegiQVyYvcYwaqO2SuFmCDQoCdU6NPdqeHNopcjMyIfZZwU jadAQze0KwczKgWjQMZzSP5k02fq8sga3Qe6WO8SVdQ3G84AQSoPf6HPLNPjya0X schdXKefjEx4O4IobvjSlpUS1292OQuqFz7WSnBKLoB7Sta3LnXb6ht1Q9/CvZd1 hLnPaHmS+pJ5v4CA1mnJNJA4qqh+LnJf2lJzukizZobLcaT3qoHnniunVZB0 -----END CERTIFICATE-----Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org