$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa File: 323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa (raw, json) Hash identifier: WFev6ZvjCOMObxnOpfS5/fLT9ZZUM3Lt8oQ9xgT39Ec= Subject key identifier: 3D:5C:BE:8D:1F:AE:4A:8A:B9:BA:93:E5:40:6A:E2:6D:F5:6E:A0:4E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 59C4F972AF1DAE783A387A6CFA73DCFE1DA19027 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa Signing time: Mon 15 Jul 2024 08:50:15 +0000 ROA not before: Mon 15 Jul 2024 08:45:15 +0000 ROA not after: Mon 14 Jul 2025 08:50:15 +0000 asID: 139328 IP address blocks: 2602:feda:bf0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c4:f9:72:af:1d:ae:78:3a:38:7a:6c:fa:73:dc:fe:1d:a1:90:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:15 2024 GMT Not After : Jul 14 08:50:15 2025 GMT Subject: CN=3D5CBE8D1FAE4A8AB9BA93E5406AE26DF56EA04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:2d:b1:e7:b5:89:48:d3:5d:74:90:53:24: 01:15:be:a5:6b:e8:23:10:80:38:fc:24:e0:8e:04: 08:0e:bb:e6:44:e9:d8:ba:a1:aa:85:ca:7d:ab:9a: 54:91:0e:2b:d8:69:5c:7e:cf:51:41:97:42:2f:e8: 01:b2:c4:7e:95:5c:26:a4:71:44:0f:80:8b:da:8b: 63:c9:9c:c5:04:1f:00:35:f3:55:3d:a0:89:b5:3a: 61:09:e8:62:b5:29:a3:b9:4d:29:8a:a2:c0:5a:e4: ee:09:06:dc:46:90:b1:ab:46:31:fa:37:b9:41:8d: d3:ea:3b:46:c5:71:04:c9:0a:dd:c2:4f:6a:4d:0e: 83:6c:da:45:e9:da:7e:c2:ce:4d:81:47:dd:4a:f6: 3a:d1:ad:34:5f:88:3e:37:56:df:a7:9f:58:7b:dd: 44:f3:08:33:55:2e:08:b3:9a:8f:79:e7:a9:fd:0d: ab:e2:cf:1d:c5:25:a0:10:9f:60:34:ef:c5:7e:e9: 22:e6:07:f4:c0:08:45:ba:87:46:99:aa:87:98:0b: a1:66:2f:ce:66:6f:5e:fb:e6:d4:ca:fd:23:1b:9f: d2:2d:9a:e3:46:70:5e:0c:22:bb:20:88:b4:2a:af: b4:6b:1a:62:ab:ed:85:a6:04:ea:35:b4:0e:aa:ba: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5C:BE:8D:1F:AE:4A:8A:B9:BA:93:E5:40:6A:E2:6D:F5:6E:A0:4E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:bf0::/44 Signature Algorithm: sha256WithRSAEncryption 1e:01:22:f5:b2:0d:10:65:5f:7e:18:d2:67:fa:5a:97:dd:4f: 2b:17:15:a9:e2:98:eb:22:25:eb:8a:9f:e2:4f:05:2c:e7:61: 25:16:de:03:98:67:5d:5a:27:e7:83:7d:02:a4:5c:25:41:be: f6:f4:26:57:78:53:0c:f3:28:b2:3b:d8:5b:28:be:4b:e4:77: f8:a8:01:db:0f:48:4f:73:cb:aa:dd:b7:a7:c5:fc:0a:7d:96: 50:f0:3b:85:c0:0e:35:b9:c9:41:56:6c:8f:e4:08:cd:a0:84: f5:d9:47:22:94:bd:cf:61:a3:b3:33:db:38:92:95:9b:0d:38: 99:ed:f1:da:84:04:53:66:38:e0:7e:f5:75:e1:33:6c:81:2e: c8:d6:cb:cf:1b:97:47:8f:24:75:16:4f:cc:23:6e:74:f0:f9: 25:a5:5c:cc:2e:21:fb:d3:11:41:ab:2d:44:69:2e:1e:d4:d7: 0e:ca:54:f0:15:73:82:f2:3c:25:da:b3:32:fc:6d:e3:12:24: b2:f8:3f:95:9b:4e:a4:cc:da:69:0b:17:28:04:ab:cb:fa:f7: 0e:5d:69:3d:11:5e:f1:c3:13:87:0e:f4:3e:b0:3f:77:fb:09: 97:48:d3:ff:b7:55:28:83:3f:0f:5c:52:b5:6b:49:1b:e0:a3: 6c:47:83:09 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUWcT5cq8drng6OHps+nPc/h2hkCcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTE1WhcNMjUwNzE0MDg1MDE1 WjAzMTEwLwYDVQQDEygzRDVDQkU4RDFGQUU0QThBQjlCQTkzRTU0MDZBRTI2REY1 NkVBMDRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA544tsee1iUjT XXSQUyQBFb6la+gjEIA4/CTgjgQIDrvmROnYuqGqhcp9q5pUkQ4r2Glcfs9RQZdC L+gBssR+lVwmpHFED4CL2otjyZzFBB8ANfNVPaCJtTphCehitSmjuU0piqLAWuTu CQbcRpCxq0Yx+je5QY3T6jtGxXEEyQrdwk9qTQ6DbNpF6dp+ws5NgUfdSvY60a00 X4g+N1bfp59Ye91E8wgzVS4Is5qPeeep/Q2r4s8dxSWgEJ9gNO/Ffuki5gf0wAhF uodGmaqHmAuhZi/OZm9e++bUyv0jG5/SLZrjRnBeDCK7IIi0Kq+0axpiq+2FpgTq NbQOqrpsTQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFD1cvo0frkqKubqT5UBq4m31 bqBOMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjI2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM5MzMzMjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gvwMA0GCSqGSIb3DQEBCwUAA4IBAQAeASL1sg0QZV9+GNJn+lqX 3U8rFxWp4pjrIiXrip/iTwUs52ElFt4DmGddWifng30CpFwlQb729CZXeFMM8yiy O9hbKL5L5Hf4qAHbD0hPc8uq3benxfwKfZZQ8DuFwA41uclBVmyP5AjNoIT12Uci lL3PYaOzM9s4kpWbDTiZ7fHahARTZjjgfvV14TNsgS7I1svPG5dHjyR1Fk/MI250 8PklpVzMLiH70xFBqy1EaS4e1NcOylTwFXOC8jwl2rMy/G3jEiSy+D+Vm06kzNpp CxcoBKvL+vcOXWk9EV7xwxOHDvQ+sD93+wmXSNP/t1Uogz8PXFK1a0kb4KNsR4MJ -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org