$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa File: 323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa (raw, json) Hash identifier: yqrIyQAj3sSM/FGUQU6AYybaIdOZfyQbMqO9Gvb/wV4= Subject key identifier: B7:DD:0B:E5:BE:F9:55:D8:D1:04:A3:E5:92:42:04:BA:E3:72:DC:01 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7D9CF54EF77BFA456CADAA655832587F31DE8C28 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa Signing time: Mon 15 Jul 2024 08:50:10 +0000 ROA not before: Mon 15 Jul 2024 08:45:10 +0000 ROA not after: Mon 14 Jul 2025 08:50:10 +0000 asID: 142427 IP address blocks: 2602:feda:dc0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9c:f5:4e:f7:7b:fa:45:6c:ad:aa:65:58:32:58:7f:31:de:8c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:10 2024 GMT Not After : Jul 14 08:50:10 2025 GMT Subject: CN=B7DD0BE5BEF955D8D104A3E5924204BAE372DC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:cb:e7:47:db:31:26:22:b6:ea:9d:d5:59: 2a:f8:ee:9e:7b:c4:f9:36:0c:a8:4c:18:dc:68:1b: 79:57:c6:41:9a:f6:96:6b:5a:89:08:b4:1c:aa:10: 24:27:b1:74:6c:ac:85:bc:65:6a:7f:47:d3:9c:c2: 37:e5:b9:27:93:1d:7b:61:bb:d4:d6:6d:98:eb:9d: 92:1e:56:ae:2e:2e:36:5b:42:52:92:46:fc:0a:a0: 83:c8:69:59:b3:2e:01:fa:55:22:cd:21:6b:15:f8: e0:08:97:7a:b8:49:1c:25:b2:26:73:57:2f:df:88: 7d:17:e6:3f:ae:5a:90:dc:2f:85:bb:2a:4c:f2:08: d6:1f:0a:32:20:84:33:be:3b:fb:2b:c1:bd:67:9a: 78:a8:a3:4e:38:a9:59:94:8f:67:b0:8e:28:0e:a8: 29:98:f6:95:fe:43:68:c0:cd:5c:4a:1b:26:70:a4: ab:a8:3e:68:0b:31:d3:83:3e:5b:10:1d:40:4b:64: 32:5c:dc:8f:39:5a:6d:4d:4a:e7:09:0e:80:a9:75: ad:60:65:44:86:58:51:a3:5e:51:6d:a1:9e:17:64: 27:8f:24:a4:b5:30:e7:c8:8d:27:ee:04:49:ae:fc: 29:65:51:4e:9f:d8:17:bc:6c:16:25:c7:e7:db:ae: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:0B:E5:BE:F9:55:D8:D1:04:A3:E5:92:42:04:BA:E3:72:DC:01 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:dc0::/44 Signature Algorithm: sha256WithRSAEncryption b7:27:e5:e0:e9:17:ee:a6:9a:a8:74:db:35:df:36:b5:4a:02: 61:a2:d5:e0:fd:8d:68:1e:e4:8f:6d:36:9c:16:cc:51:ee:a7: 17:72:e2:49:1b:d6:47:a2:27:32:7b:e7:63:88:8e:ca:78:45: f4:9c:1d:24:f5:74:f0:69:05:72:d3:75:f5:48:6c:68:60:f6: a0:08:16:f3:e3:77:92:f9:16:e2:d5:dc:6d:44:85:08:c0:d7: 55:33:4e:1b:7a:32:9b:35:06:66:aa:1d:1b:8a:e2:7a:33:77: fa:c2:65:bd:54:88:9a:9e:ef:ca:d4:14:e1:f5:7e:c4:a2:cd: 6c:fc:c2:5e:ca:61:0b:0d:63:00:df:d5:3b:8d:25:63:d4:7a: bd:28:74:63:3c:d6:98:8f:ce:30:88:cc:b2:ee:63:7f:e8:4d: 79:b6:70:09:78:d8:7a:14:28:a3:52:c2:f6:56:31:99:35:b4: 1f:0e:41:4e:2b:e9:57:42:37:3a:46:94:4d:9e:54:d4:d0:82: 98:7e:4f:58:fc:93:30:6b:31:b0:38:7b:01:cf:8d:30:99:56: 45:bb:67:4d:07:fa:82:15:51:9c:93:63:1d:9e:bc:bf:a2:48: 6c:7c:41:73:d7:87:e2:d6:83:6e:5c:ad:2b:c3:aa:9e:05:df: d6:44:64:b8 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfZz1Tvd7+kVsraplWDJYfzHejCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEwWhcNMjUwNzE0MDg1MDEw WjAzMTEwLwYDVQQDEyhCN0REMEJFNUJFRjk1NUQ4RDEwNEEzRTU5MjQyMDRCQUUz NzJEQzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wHL50fbMSYi tuqd1Vkq+O6ee8T5NgyoTBjcaBt5V8ZBmvaWa1qJCLQcqhAkJ7F0bKyFvGVqf0fT nMI35bknkx17YbvU1m2Y652SHlauLi42W0JSkkb8CqCDyGlZsy4B+lUizSFrFfjg CJd6uEkcJbImc1cv34h9F+Y/rlqQ3C+FuypM8gjWHwoyIIQzvjv7K8G9Z5p4qKNO OKlZlI9nsI4oDqgpmPaV/kNowM1cShsmcKSrqD5oCzHTgz5bEB1AS2QyXNyPOVpt TUrnCQ6AqXWtYGVEhlhRo15RbaGeF2QnjySktTDnyI0n7gRJrvwpZVFOn9gXvGwW Jcfn266MIQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLfdC+W++VXY0QSj5ZJCBLrj ctwBMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQ2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzQzMjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g3AMA0GCSqGSIb3DQEBCwUAA4IBAQC3J+Xg6RfuppqodNs13za1 SgJhotXg/Y1oHuSPbTacFsxR7qcXcuJJG9ZHoicye+djiI7KeEX0nB0k9XTwaQVy 03X1SGxoYPagCBbz43eS+Rbi1dxtRIUIwNdVM04bejKbNQZmqh0biuJ6M3f6wmW9 VIianu/K1BTh9X7Eos1s/MJeymELDWMA39U7jSVj1Hq9KHRjPNaYj84wiMyy7mN/ 6E15tnAJeNh6FCijUsL2VjGZNbQfDkFOK+lXQjc6RpRNnlTU0IKYfk9Y/JMwazGw OHsBz40wmVZFu2dNB/qCFVGck2Mdnry/okhsfEFz14fi1oNuXK0rw6qeBd/WRGS4 -----END CERTIFICATE-----Generated at Sun Feb 16 21:54:30 2025 by rpki-client