$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa File: 323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa (raw, json) Hash identifier: F0v+bk1JGtj5PqkvFplZDzo2+l27KjF8exXsr/dK098= Subject key identifier: 6A:3B:D6:CC:AA:20:66:7C:8F:D9:67:40:D5:51:D3:72:A5:5E:3C:9D Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5E0C0661D6B5949D69844C17E2AD65B98C98520B Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa Signing time: Mon 15 Jul 2024 08:50:10 +0000 ROA not before: Mon 15 Jul 2024 08:45:10 +0000 ROA not after: Mon 14 Jul 2025 08:50:10 +0000 asID: 47158 IP address blocks: 2602:feda:ab0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 08:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0c:06:61:d6:b5:94:9d:69:84:4c:17:e2:ad:65:b9:8c:98:52:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:10 2024 GMT Not After : Jul 14 08:50:10 2025 GMT Subject: CN=6A3BD6CCAA20667C8FD96740D551D372A55E3C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:c5:7a:64:a1:fe:da:7b:3b:7d:4c:7e:04: f3:6e:58:1a:72:56:42:92:23:2e:7d:47:5e:16:ad: 5f:3e:0d:e8:97:d2:05:86:4b:b7:a9:a4:6d:bf:17: fb:ae:b8:65:cf:78:8b:4e:23:8e:a3:7d:7b:9b:59: cc:d2:39:ea:ec:01:28:29:6d:5e:92:af:90:2e:70: be:79:b2:e8:e2:85:05:2d:93:02:a2:fb:0f:a5:f4: 65:50:18:54:37:67:f1:bf:44:0f:f3:80:29:a8:0d: 7c:aa:48:42:97:48:ed:e6:b9:90:a1:5a:e8:91:b1: 1e:51:c4:d0:e1:38:9f:d6:d4:77:ff:a6:75:41:5d: 0b:5b:36:ea:43:53:99:ab:3e:4a:17:ac:33:83:52: 58:68:ca:08:f5:70:01:73:cb:56:4f:9a:be:05:a2: 53:59:bf:e7:d3:6e:31:03:a3:93:46:64:9a:91:ee: 31:6a:1e:5d:14:92:41:5c:9f:b2:87:1a:ed:47:ae: 4e:ef:4d:b2:05:d8:01:c2:a5:0f:5b:80:06:f4:69: fe:6f:c5:e0:53:0f:30:e1:cc:b9:f5:45:d5:77:99: 68:77:62:0f:3f:73:48:75:4a:77:6a:7e:fe:46:df: 4c:ee:99:70:54:38:b7:14:78:89:29:6a:be:1f:1e: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3B:D6:CC:AA:20:66:7C:8F:D9:67:40:D5:51:D3:72:A5:5E:3C:9D X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ab0::/44 Signature Algorithm: sha256WithRSAEncryption 39:86:21:35:a5:21:1c:1a:4a:38:13:1c:5c:1c:ea:ff:1f:d5: 41:b5:23:50:70:e7:c0:7f:94:c0:7f:f5:72:df:9d:c5:15:6b: 53:64:d2:64:4f:6a:4e:2f:f3:29:ec:19:ee:14:1c:34:94:e8: c6:98:22:fd:08:ea:1c:e4:3f:f2:39:26:6a:6d:de:78:04:95: 58:b4:07:fb:d5:37:55:15:6f:54:22:20:5d:8c:55:c2:16:d2: 24:f5:6b:1c:94:df:10:ab:a6:62:49:5b:62:a0:0e:28:23:da: 2b:23:93:28:57:8c:e6:4d:da:03:77:05:3f:51:bc:62:e3:39: be:ec:e9:52:1c:0b:f9:25:80:a7:96:68:6f:41:54:13:8c:78: 4b:0f:c4:e4:a6:98:47:79:5e:52:b8:70:0b:28:27:43:c7:87: 7a:14:33:80:8c:83:b4:24:a2:41:c0:d1:ad:70:a6:21:c1:f8: 63:6e:3b:7a:f9:27:a2:4f:6b:99:91:a4:12:87:c3:6f:8d:5a: 34:3b:f5:9f:e9:c4:54:04:f9:96:d7:0d:e9:34:8c:af:b3:98: 7c:0f:c5:b6:d3:0f:27:8a:22:f7:11:82:de:36:3f:e3:ab:51: 74:4c:ff:0d:5e:7e:f5:77:fe:b7:ca:4d:c6:e3:7f:3c:0a:48: 90:63:e8:55 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUXgwGYda1lJ1phEwX4q1luYyYUgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEwWhcNMjUwNzE0MDg1MDEw WjAzMTEwLwYDVQQDEyg2QTNCRDZDQ0FBMjA2NjdDOEZEOTY3NDBENTUxRDM3MkE1 NUUzQzlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6/FemSh/tp7 O31MfgTzblgaclZCkiMufUdeFq1fPg3ol9IFhku3qaRtvxf7rrhlz3iLTiOOo317 m1nM0jnq7AEoKW1ekq+QLnC+ebLo4oUFLZMCovsPpfRlUBhUN2fxv0QP84ApqA18 qkhCl0jt5rmQoVrokbEeUcTQ4Tif1tR3/6Z1QV0LWzbqQ1OZqz5KF6wzg1JYaMoI 9XABc8tWT5q+BaJTWb/n024xA6OTRmSake4xah5dFJJBXJ+yhxrtR65O702yBdgB wqUPW4AG9Gn+b8XgUw8w4cy59UXVd5lod2IPP3NIdUp3an7+Rt9M7plwVDi3FHiJ KWq+Hx7M+wIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFGo71syqIGZ8j9lnQNVR03Kl XjydMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTYyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM3MzEzNTM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJgL+2gqwMA0GCSqGSIb3DQEBCwUAA4IBAQA5hiE1pSEcGko4ExxcHOr/H9VB tSNQcOfAf5TAf/Vy353FFWtTZNJkT2pOL/Mp7BnuFBw0lOjGmCL9COoc5D/yOSZq bd54BJVYtAf71TdVFW9UIiBdjFXCFtIk9WsclN8Qq6ZiSVtioA4oI9orI5MoV4zm TdoDdwU/Ubxi4zm+7OlSHAv5JYCnlmhvQVQTjHhLD8TkpphHeV5SuHALKCdDx4d6 FDOAjIO0JKJBwNGtcKYhwfhjbjt6+SeiT2uZkaQSh8NvjVo0O/Wf6cRUBPmW1w3p NIyvs5h8D8W20w8niiL3EYLeNj/jq1F0TP8NXn71d/63yk3G4388CkiQY+hV -----END CERTIFICATE-----Generated at Mon Nov 25 09:01:48 2024 by rpki-client on console-ams.rpki-client.org