$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa File: 323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa (raw, json) Hash identifier: UsOVDERW9USOOZb7LzNRPZTQyqvwlFhGhfimfS+65Ws= Subject key identifier: 5C:C3:C2:43:FC:3D:1A:4B:B7:F2:CC:E8:26:8F:CE:C3:B0:DE:C5:80 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6599B24B7F24F34244C350001665D9359AF3A992 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa Signing time: Mon 15 Jul 2024 08:50:11 +0000 ROA not before: Mon 15 Jul 2024 08:45:11 +0000 ROA not after: Mon 14 Jul 2025 08:50:11 +0000 asID: 212705 IP address blocks: 2602:feda:b70::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:99:b2:4b:7f:24:f3:42:44:c3:50:00:16:65:d9:35:9a:f3:a9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:11 2024 GMT Not After : Jul 14 08:50:11 2025 GMT Subject: CN=5CC3C243FC3D1A4BB7F2CCE8268FCEC3B0DEC580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:78:da:bb:52:6c:98:c3:43:07:14:d3:25: d0:a5:f2:59:b1:ff:2a:ec:c1:bd:46:70:44:63:9f: df:45:35:83:2e:8a:38:55:2d:90:27:ea:fa:29:7d: b2:88:74:10:d2:a2:e7:a2:bd:36:c7:e4:65:33:83: 28:a6:2a:0e:27:76:29:ab:a2:81:8e:77:42:14:1e: 82:4b:14:17:b6:ef:c8:1a:3f:be:ea:0f:c4:80:fb: c6:9a:82:86:de:d9:1b:a1:a6:01:60:2f:1e:02:0f: 8c:5e:16:f8:a6:10:6d:9d:4d:e1:3b:4e:72:f8:7a: 0d:f5:06:ce:b2:62:9c:e3:66:9c:c1:00:ec:d1:f0: 62:50:be:2c:aa:95:1d:22:ca:25:54:35:9a:5d:f8: 17:78:6c:16:1c:75:30:37:7a:37:23:59:77:51:00: f6:db:50:c7:4d:ea:68:21:36:43:23:5d:9c:0a:f0: 77:5d:57:0e:94:ec:ee:52:24:90:75:c2:10:55:c0: 75:2d:04:d1:79:fb:f9:d4:3c:8f:6a:d2:bb:a2:bc: 7c:d1:19:6c:9d:ab:54:48:12:d2:a9:53:75:75:c9: 76:82:a1:b8:8f:f7:0e:f4:8d:07:a5:62:15:9f:c9: 96:e8:c2:aa:a1:f7:81:b8:29:40:e6:8b:5a:b7:8e: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:C2:43:FC:3D:1A:4B:B7:F2:CC:E8:26:8F:CE:C3:B0:DE:C5:80 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b70::/44 Signature Algorithm: sha256WithRSAEncryption 05:e4:65:fb:13:ca:43:63:44:4d:57:ca:f6:56:d3:32:47:72: d1:21:c9:32:7d:6b:d8:3b:29:ac:4e:a1:58:54:00:13:2f:62: d8:e5:b6:26:06:3b:70:52:15:0b:57:de:f3:b3:34:9b:d0:5f: 68:67:44:b3:9f:85:54:23:2d:05:93:04:30:f1:8e:41:d0:66: f2:c8:d2:c7:ae:01:51:6c:f3:df:0f:f4:8f:6f:50:9c:9e:9e: 9d:f3:59:f0:23:c7:53:9f:e9:79:c3:8e:24:d5:93:78:74:b8: 28:24:4a:2b:74:68:17:34:11:fb:c7:3a:45:88:81:ab:06:ff: 48:6e:36:20:bc:71:6e:e8:54:ee:fb:1e:fd:bf:18:38:d8:86: 64:36:48:cf:94:e7:ea:e0:f4:99:a7:76:2e:82:52:f4:7a:f4: 4d:b3:ec:05:de:3e:66:5e:5c:43:65:60:49:80:b6:4a:31:e1: 9c:d2:e7:d9:88:23:f3:e2:7e:95:95:20:2a:b0:8f:78:ce:01: b2:6b:2f:bc:97:60:ba:89:f2:61:d5:23:32:ed:f9:4b:7f:da: 0f:02:48:ad:a0:44:5e:24:0b:9d:4d:9e:b6:3a:ed:f0:9f:60: f8:df:1d:3c:e8:0f:1c:81:58:17:bb:6f:25:46:0e:49:e7:cb: a4:6b:23:06 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUZZmyS38k80JEw1AAFmXZNZrzqZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTExWhcNMjUwNzE0MDg1MDEx WjAzMTEwLwYDVQQDEyg1Q0MzQzI0M0ZDM0QxQTRCQjdGMkNDRTgyNjhGQ0VDM0Iw REVDNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q142rtSbJjD QwcU0yXQpfJZsf8q7MG9RnBEY5/fRTWDLoo4VS2QJ+r6KX2yiHQQ0qLnor02x+Rl M4MopioOJ3Ypq6KBjndCFB6CSxQXtu/IGj++6g/EgPvGmoKG3tkboaYBYC8eAg+M Xhb4phBtnU3hO05y+HoN9QbOsmKc42acwQDs0fBiUL4sqpUdIsolVDWaXfgXeGwW HHUwN3o3I1l3UQD221DHTepoITZDI12cCvB3XVcOlOzuUiSQdcIQVcB1LQTRefv5 1DyPatK7orx80RlsnatUSBLSqVN1dcl2gqG4j/cO9I0HpWIVn8mW6MKqofeBuClA 5otat44+hQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFzDwkP8PRpLt/LM6CaPzsOw 3sWAMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzczMDM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gtwMA0GCSqGSIb3DQEBCwUAA4IBAQAF5GX7E8pDY0RNV8r2VtMy R3LRIckyfWvYOymsTqFYVAATL2LY5bYmBjtwUhULV97zszSb0F9oZ0Szn4VUIy0F kwQw8Y5B0GbyyNLHrgFRbPPfD/SPb1Ccnp6d81nwI8dTn+l5w44k1ZN4dLgoJEor dGgXNBH7xzpFiIGrBv9IbjYgvHFu6FTu+x79vxg42IZkNkjPlOfq4PSZp3YuglL0 evRNs+wF3j5mXlxDZWBJgLZKMeGc0ufZiCPz4n6VlSAqsI94zgGyay+8l2C6ifJh 1SMy7flLf9oPAkitoEReJAudTZ62Ou3wn2D43x086A8cgVgXu28lRg5J58ukayMG -----END CERTIFICATE-----Generated at Sun Feb 16 21:48:12 2025 by rpki-client