$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: kfVpzzJVQrtMCFeukJ5dHXGRiCMVsLd24DxxxdxKvBI= Subject key identifier: 41:32:58:C6:A8:60:7D:23:D8:9F:A7:24:D3:7C:5C:1C:26:F0:FC:92 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 370F76104AABA49B3E8DFB966F728032CB4F5B62 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 15 Jul 2024 08:50:11 +0000 ROA not before: Mon 15 Jul 2024 08:45:11 +0000 ROA not after: Mon 14 Jul 2025 08:50:11 +0000 asID: 46997 IP address blocks: 2602:feda::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 08:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0f:76:10:4a:ab:a4:9b:3e:8d:fb:96:6f:72:80:32:cb:4f:5b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:11 2024 GMT Not After : Jul 14 08:50:11 2025 GMT Subject: CN=413258C6A8607D23D89FA724D37C5C1C26F0FC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:4f:32:e4:2e:6d:e9:36:62:0d:07:e4:48: 76:ab:93:6f:1b:39:f6:7f:36:c1:7a:18:8d:0c:7a: 91:42:14:06:56:40:a4:e8:e1:3d:ec:3a:2d:ec:8a: 9c:de:fc:c7:fa:a4:cc:58:e3:e9:c1:f7:1b:c6:6b: b5:23:24:6c:1b:cd:54:b5:3e:d9:49:a5:9b:60:90: 93:7c:47:45:b2:72:8b:49:d9:ab:19:55:23:11:7c: 85:bb:38:8e:d3:ba:9a:b3:e6:cb:c6:dc:ad:4a:73: e8:63:3b:67:c5:82:79:b0:a0:dd:18:1b:80:9d:a1: 7a:6f:72:89:4a:bd:1f:c3:f1:da:0b:04:3d:df:da: 72:ed:b6:68:ba:cc:44:42:d5:75:85:de:03:a6:ec: 63:9d:94:f3:be:2b:7b:34:d8:82:1c:b4:33:5e:4f: 56:d4:43:95:3a:35:d4:e5:fd:5a:78:a0:9d:f0:ca: 64:d8:77:be:1d:41:90:1c:95:9b:c3:f0:fd:04:8e: ea:d4:55:2a:2b:d0:fe:15:54:dd:63:0d:60:d4:f3: 69:6d:86:03:39:9a:69:6c:e3:4e:64:90:32:99:0e: 52:fa:84:4b:25:16:7e:b2:41:29:bf:bc:43:c2:ee: 6d:c8:ec:76:fd:c1:2c:26:c5:6f:16:c3:57:21:1c: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:58:C6:A8:60:7D:23:D8:9F:A7:24:D3:7C:5C:1C:26:F0:FC:92 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda::/48 Signature Algorithm: sha256WithRSAEncryption b3:37:c4:d6:e1:a7:f7:74:ca:84:ce:ca:38:93:d6:9a:3c:59: b5:56:3c:02:7c:7a:2f:c9:53:a0:24:7c:e6:0a:37:63:c3:c0: 85:98:c7:64:9f:49:95:82:39:6a:58:5d:ad:2a:bf:e3:94:39: 04:fd:b5:5c:ac:04:d1:ef:76:c3:d6:8c:05:c9:b9:36:18:fa: 4b:92:67:aa:f2:26:e7:63:30:18:21:21:72:b4:ba:d5:b8:af: 8d:2b:3d:85:3a:7a:b1:7c:26:b9:b5:40:bb:81:16:0b:2b:72: 5f:55:5b:b4:db:aa:3b:9e:41:e6:c8:8c:e1:32:24:7d:05:8c: ae:c8:a8:f7:ee:d4:73:18:71:0b:e0:37:26:df:2c:80:47:c2: 95:4f:bd:6b:33:80:f6:46:e2:fd:d5:a0:b8:f4:8c:e4:f3:d1: 0e:fa:48:f3:5a:12:ec:f5:e6:0d:0f:c9:87:88:72:bd:ed:6e: 32:40:a5:63:8f:06:6e:08:f4:fc:ae:4c:8a:f9:19:1a:3e:92: c1:3b:b0:cc:e1:a2:06:5c:b1:26:96:40:3b:fb:98:32:74:2f: 22:ea:d6:ae:ae:70:ec:ce:0e:3c:fa:c7:b3:51:d5:23:d3:a2: 5a:c8:50:52:a7:02:7c:4e:dd:41:49:0b:d7:7b:2f:e5:ca:58: 05:29:1b:7b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUNw92EEqrpJs+jfuWb3KAMstPW2IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTExWhcNMjUwNzE0MDg1MDEx WjAzMTEwLwYDVQQDEyg0MTMyNThDNkE4NjA3RDIzRDg5RkE3MjREMzdDNUMxQzI2 RjBGQzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru9PMuQubek2 Yg0H5Eh2q5NvGzn2fzbBehiNDHqRQhQGVkCk6OE97Dot7Iqc3vzH+qTMWOPpwfcb xmu1IyRsG81UtT7ZSaWbYJCTfEdFsnKLSdmrGVUjEXyFuziO07qas+bLxtytSnPo YztnxYJ5sKDdGBuAnaF6b3KJSr0fw/HaCwQ939py7bZousxEQtV1hd4DpuxjnZTz vit7NNiCHLQzXk9W1EOVOjXU5f1aeKCd8Mpk2He+HUGQHJWbw/D9BI7q1FUqK9D+ FVTdYw1g1PNpbYYDOZppbONOZJAymQ5S+oRLJRZ+skEpv7xDwu5tyOx2/cEsJsVv FsNXIRzS/wIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFEEyWMaoYH0j2J+nJNN8XBwm 8PySMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/toA ADANBgkqhkiG9w0BAQsFAAOCAQEAszfE1uGn93TKhM7KOJPWmjxZtVY8Anx6L8lT oCR85go3Y8PAhZjHZJ9JlYI5alhdrSq/45Q5BP21XKwE0e92w9aMBcm5Nhj6S5Jn qvIm52MwGCEhcrS61bivjSs9hTp6sXwmubVAu4EWCytyX1VbtNuqO55B5siM4TIk fQWMrsio9+7UcxhxC+A3Jt8sgEfClU+9azOA9kbi/dWguPSM5PPRDvpI81oS7PXm DQ/Jh4hyve1uMkClY48Gbgj0/K5MivkZGj6SwTuwzOGiBlyxJpZAO/uYMnQvIurW rq5w7M4OPPrHs1HVI9OiWshQUqcCfE7dQUkL13sv5cpYBSkbew== -----END CERTIFICATE-----Generated at Mon Nov 25 09:01:48 2024 by rpki-client on console-ams.rpki-client.org