$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa File: 323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa (raw, json) Hash identifier: vLjXergiHNvWQuos4FJzThMMKeoG3P3cQIvIac/ATik= Subject key identifier: 91:1A:F5:9E:1B:CA:8A:77:45:5A:BE:13:0D:AC:D3:34:A9:15:32:81 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6DA3B5EDA560E64B54B2E8E9D129B854B7F8AFC1 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa Signing time: Mon 15 Jul 2024 08:50:15 +0000 ROA not before: Mon 15 Jul 2024 08:45:15 +0000 ROA not after: Mon 14 Jul 2025 08:50:15 +0000 asID: 140727 IP address blocks: 2602:feda:afa::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a3:b5:ed:a5:60:e6:4b:54:b2:e8:e9:d1:29:b8:54:b7:f8:af:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:15 2024 GMT Not After : Jul 14 08:50:15 2025 GMT Subject: CN=911AF59E1BCA8A77455ABE130DACD334A9153281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:c4:75:aa:44:6c:49:79:59:34:95:21:ec: bc:e6:5c:1a:95:b2:5e:a1:27:fa:ae:cc:88:17:e4: 34:74:a0:aa:27:e5:33:45:5e:66:90:5a:3c:b9:7e: e3:30:92:95:cb:39:cb:49:3c:11:af:e7:2b:29:85: 0c:6a:a0:c9:58:0b:0e:3f:ac:f4:3f:8d:5b:df:0a: 25:ba:5d:70:74:5d:78:f0:6b:f2:8b:6c:5f:ce:01: d1:96:2f:ad:a6:ed:70:ca:97:59:de:2c:2a:98:91: 45:55:a9:6b:5e:24:49:9f:32:50:30:ac:5b:55:41: d6:9a:22:2d:d7:39:92:dc:96:5d:62:bf:8f:a8:a1: d1:67:f9:3e:8a:95:4c:80:5e:97:03:46:ac:15:15: 5b:ca:fe:d1:dd:97:87:fa:95:75:fe:33:b2:0a:70: 73:f8:f7:fb:22:f7:bf:2d:d1:4f:d0:4a:b1:b4:5a: 80:74:2d:41:90:73:3f:02:e6:d4:fd:ee:f5:39:fe: 80:8e:01:95:3a:50:56:ea:8f:15:1d:94:2e:76:1a: 2e:f5:75:8e:97:23:ba:49:ff:4f:18:2e:51:62:58: b6:cb:dc:63:a6:4b:6e:47:fc:a4:f7:b7:cf:d7:c8: 77:14:79:fb:82:e8:1e:07:ec:ba:a8:02:d4:40:32: 7c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:F5:9E:1B:CA:8A:77:45:5A:BE:13:0D:AC:D3:34:A9:15:32:81 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:afa::/48 Signature Algorithm: sha256WithRSAEncryption 75:81:f7:35:9d:fc:c2:72:11:da:0c:f8:67:a6:19:36:ae:0e: b6:84:c1:e1:a2:d1:65:86:9f:bf:2a:b7:66:b6:39:d9:a2:47: bf:95:f9:ec:19:7d:0e:74:9a:15:27:98:76:8e:1c:06:f0:ae: 3e:21:81:fa:55:5b:41:16:b9:45:a6:f2:bc:50:72:c6:a2:6e: de:3d:44:3a:b8:85:51:80:60:a5:79:eb:a9:26:91:7a:08:1c: ee:4e:57:b5:4e:ed:bc:6f:a4:bd:01:6c:bd:f9:c9:a1:ff:4d: 49:ee:d7:eb:c5:59:8d:b7:ba:d5:e5:fe:71:11:6f:e1:4f:26: 48:81:eb:9b:73:d9:fe:c8:af:f6:78:18:69:d1:c0:ff:ab:8a: 28:b8:82:39:29:0d:bc:86:37:d7:ce:3f:eb:2a:b4:59:cb:08: 13:41:b5:f3:61:f9:7d:6d:14:a4:b8:8d:81:33:f5:5a:64:90: 02:68:cc:b7:83:d2:af:e7:3d:84:2c:b5:ed:52:6c:79:00:0c: 5f:cd:45:31:27:e0:a6:3d:de:1b:bc:12:54:eb:d0:9e:95:89: 7f:cd:c1:b3:4e:aa:fd:e1:db:6d:40:0c:64:9d:f3:ae:27:5e: 9e:a5:5f:de:42:2a:c0:0e:70:b7:1b:70:c9:bf:cf:9d:07:e0: 90:19:8a:14 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUbaO17aVg5ktUsujp0Sm4VLf4r8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTE1WhcNMjUwNzE0MDg1MDE1 WjAzMTEwLwYDVQQDEyg5MTFBRjU5RTFCQ0E4QTc3NDU1QUJFMTMwREFDRDMzNEE5 MTUzMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pTEdapEbEl5 WTSVIey85lwalbJeoSf6rsyIF+Q0dKCqJ+UzRV5mkFo8uX7jMJKVyznLSTwRr+cr KYUMaqDJWAsOP6z0P41b3wolul1wdF148Gvyi2xfzgHRli+tpu1wypdZ3iwqmJFF ValrXiRJnzJQMKxbVUHWmiIt1zmS3JZdYr+PqKHRZ/k+ipVMgF6XA0asFRVbyv7R 3ZeH+pV1/jOyCnBz+Pf7Ive/LdFP0EqxtFqAdC1BkHM/AubU/e71Of6AjgGVOlBW 6o8VHZQudhou9XWOlyO6Sf9PGC5RYli2y9xjpktuR/yk97fP18h3FHn7gugeB+y6 qALUQDJ8jwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJEa9Z4byop3RVq+Ew2s0zSp FTKBMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NjYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzczMjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gr6MA0GCSqGSIb3DQEBCwUAA4IBAQB1gfc1nfzCchHaDPhnphk2 rg62hMHhotFlhp+/KrdmtjnZoke/lfnsGX0OdJoVJ5h2jhwG8K4+IYH6VVtBFrlF pvK8UHLGom7ePUQ6uIVRgGCleeupJpF6CBzuTle1Tu28b6S9AWy9+cmh/01J7tfr xVmNt7rV5f5xEW/hTyZIgeubc9n+yK/2eBhp0cD/q4oouII5KQ28hjfXzj/rKrRZ ywgTQbXzYfl9bRSkuI2BM/VaZJACaMy3g9Kv5z2ELLXtUmx5AAxfzUUxJ+CmPd4b vBJU69CelYl/zcGzTqr94dttQAxknfOuJ16epV/eQirADnC3G3DJv8+dB+CQGYoU -----END CERTIFICATE-----Generated at Sun Feb 16 21:55:29 2025 by rpki-client