$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: zl/ZQcwrA6XKhKKZZSvhcGidEq7I4kqdNVO8xDB9FXE= Subject key identifier: 44:7C:8F:D9:AE:97:3B:36:1D:4A:D0:5F:63:1B:74:60:79:0E:A6:2B Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7A6257A0EDB7B37BAAFEBBB7583F40808F21FF1A Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 15 Jul 2024 08:50:09 +0000 ROA not before: Mon 15 Jul 2024 08:45:09 +0000 ROA not after: Mon 14 Jul 2025 08:50:09 +0000 asID: 46997 IP address blocks: 2602:feda:ae5::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:62:57:a0:ed:b7:b3:7b:aa:fe:bb:b7:58:3f:40:80:8f:21:ff:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:09 2024 GMT Not After : Jul 14 08:50:09 2025 GMT Subject: CN=447C8FD9AE973B361D4AD05F631B7460790EA62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:9f:8a:f8:6f:75:59:1a:33:12:81:bc:30: 56:d7:9b:65:b2:63:43:b3:0c:16:1b:c5:29:45:f1: b7:c3:7d:b0:a2:87:ac:9c:b2:5f:c5:c5:28:c3:37: 60:9e:44:94:da:e3:32:53:a3:f7:d3:e0:ec:87:29: d5:d1:25:bb:77:2a:5b:53:ac:91:6d:84:28:83:65: 66:ba:13:bd:02:e7:44:cb:28:2a:d2:6c:eb:03:76: 2c:f8:f2:70:49:d6:12:2c:aa:d8:44:33:f3:3b:a8: e6:e5:3e:29:4d:2c:09:23:c2:ba:77:15:22:66:2d: 30:ab:e3:0f:67:b9:3e:5f:22:14:90:6e:55:e3:bd: 4e:34:22:05:ac:7f:75:37:ab:dd:6a:6a:49:a1:14: e2:8b:25:a5:69:04:43:0c:de:25:3a:52:19:58:c0: 70:83:05:54:31:fd:2f:18:dd:5d:34:fc:48:56:71: 18:0a:6f:35:82:27:87:22:f6:12:e8:47:29:4a:eb: e3:2c:3c:53:f3:d7:1b:0d:e0:80:df:3c:03:59:8d: c8:85:d3:e2:4b:0f:2e:a7:7c:dd:4f:61:28:31:9c: df:3c:f8:ca:94:ff:27:5a:b1:bf:b9:e3:31:6a:ff: 55:a5:bc:c5:6e:94:09:92:5a:34:53:4c:77:ba:a2: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7C:8F:D9:AE:97:3B:36:1D:4A:D0:5F:63:1B:74:60:79:0E:A6:2B X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae5::/48 Signature Algorithm: sha256WithRSAEncryption 29:a9:e2:c3:5e:5f:b4:d7:d5:9f:98:02:60:d9:ed:e7:e2:77: 8d:b7:e5:5a:97:de:92:76:eb:29:59:5b:a0:3b:67:6d:18:0c: cf:9f:8e:35:c0:21:4c:e0:74:07:ac:d4:a5:82:6b:c6:7e:9c: 91:1e:21:c2:df:09:c0:1e:16:01:d1:39:1c:dc:83:9f:c7:08: 3d:59:fe:d9:f7:9f:af:f7:79:f5:88:1f:5a:2d:91:b1:47:1d: 11:f7:ad:c2:4e:e7:2f:58:d9:27:2f:3f:04:5c:d6:e0:f4:fe: da:ce:53:bf:04:b6:20:5e:19:55:5e:07:12:16:f3:04:c1:34: 25:fa:28:59:ae:6c:bb:08:f8:14:27:18:b5:e5:3a:57:7e:26: e8:9b:93:52:bd:d6:e4:1c:50:36:6f:03:79:45:5b:fa:e5:5f: c0:0d:0d:c1:f6:b6:bd:77:6b:7c:d9:c0:c4:3e:bb:cb:11:fd: 73:c8:9e:4a:37:11:a7:b5:b0:78:40:17:b5:55:df:fa:19:a8: 69:17:c7:0f:97:ae:3c:cf:1f:58:58:18:1c:54:e3:fe:f1:2d: f7:ea:a5:33:26:ae:1e:26:9c:14:aa:81:fe:c4:a1:85:0e:d1: 68:fe:e8:6f:38:e1:70:75:d7:83:e6:eb:23:06:d7:b8:27:3c: 1f:31:ba:d4 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUemJXoO23s3uq/ru3WD9AgI8h/xowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTA5WhcNMjUwNzE0MDg1MDA5 WjAzMTEwLwYDVQQDEyg0NDdDOEZEOUFFOTczQjM2MUQ0QUQwNUY2MzFCNzQ2MDc5 MEVBNjJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGfivhvdVka MxKBvDBW15tlsmNDswwWG8UpRfG3w32wooesnLJfxcUowzdgnkSU2uMyU6P30+Ds hynV0SW7dypbU6yRbYQog2VmuhO9AudEyygq0mzrA3Ys+PJwSdYSLKrYRDPzO6jm 5T4pTSwJI8K6dxUiZi0wq+MPZ7k+XyIUkG5V471ONCIFrH91N6vdampJoRTiiyWl aQRDDN4lOlIZWMBwgwVUMf0vGN1dNPxIVnEYCm81gieHIvYS6EcpSuvjLDxT89cb DeCA3zwDWY3IhdPiSw8up3zdT2EoMZzfPPjKlP8nWrG/ueMxav9VpbzFbpQJklo0 U0x3uqIPGQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFER8j9mulzs2HUrQX2MbdGB5 DqYrMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTY1MzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2grlMA0GCSqGSIb3DQEBCwUAA4IBAQApqeLDXl+019WfmAJg2e3n4neN t+Val96SduspWVugO2dtGAzPn441wCFM4HQHrNSlgmvGfpyRHiHC3wnAHhYB0Tkc 3IOfxwg9Wf7Z95+v93n1iB9aLZGxRx0R963CTucvWNknLz8EXNbg9P7azlO/BLYg XhlVXgcSFvMEwTQl+ihZrmy7CPgUJxi15TpXfibom5NSvdbkHFA2bwN5RVv65V/A DQ3B9ra9d2t82cDEPrvLEf1zyJ5KNxGntbB4QBe1Vd/6GahpF8cPl648zx9YWBgc VOP+8S336qUzJq4eJpwUqoH+xKGFDtFo/uhvOOFwddeD5usjBte4JzwfMbrU -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org