$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa File: 323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa (raw, json) Hash identifier: 7IqnWjaovmt7rqGTjWDarNUYx3ZagowMzLSi4PMgNdg= Subject key identifier: 33:97:26:1F:22:E8:6D:A6:F6:CC:72:58:9B:DB:A6:54:D5:0F:24:BF Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 786CC7F0ED2E27E4E935FD352D4599EB78A579E5 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa Signing time: Mon 15 Jul 2024 08:50:15 +0000 ROA not before: Mon 15 Jul 2024 08:45:15 +0000 ROA not after: Mon 14 Jul 2025 08:50:15 +0000 asID: 147071 IP address blocks: 2602:feda:df0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6c:c7:f0:ed:2e:27:e4:e9:35:fd:35:2d:45:99:eb:78:a5:79:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:15 2024 GMT Not After : Jul 14 08:50:15 2025 GMT Subject: CN=3397261F22E86DA6F6CC72589BDBA654D50F24BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:97:4c:b6:13:eb:df:8a:08:0b:9f:47:0f: 52:76:d2:a0:7b:22:cd:2d:44:98:dd:54:97:f8:1b: 6c:70:8d:e4:09:40:2a:4f:a8:6f:52:56:f9:4f:4b: 55:de:ff:af:95:4f:5f:e5:84:f4:b2:8b:45:25:cb: b0:fc:bc:29:ae:d3:e6:ef:44:55:70:e6:ff:4d:25: 1b:82:b1:40:d0:10:48:fe:c1:3c:3e:08:fb:e3:3f: 7c:90:4a:ce:36:b5:d5:76:18:9b:21:1b:d5:fc:ab: 91:86:5d:1b:cd:fe:fc:fa:66:8c:35:0f:b4:f3:4a: 5d:b7:c8:62:c6:cc:d7:f6:1b:33:7e:da:e1:70:84: 52:e5:e7:d8:ac:07:b3:b4:d6:4a:6b:36:2e:2b:01: 20:2c:d8:33:f3:68:45:d4:64:cf:f4:45:36:fb:92: 1c:50:56:3b:73:80:a0:a8:f0:70:29:59:b5:6f:fb: 82:bd:6b:e6:ed:91:32:a0:31:46:e8:49:70:03:b8: 8f:c7:b1:ce:c1:3e:fa:58:79:25:89:76:73:16:f3: 76:f2:54:06:90:c4:34:c2:ea:2c:6e:b0:6c:c5:bf: c9:9b:b1:3a:f8:ce:d4:ee:9c:c2:45:7b:74:44:11: d9:79:86:c3:4f:f0:0b:58:83:4b:8c:4d:44:03:49: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:97:26:1F:22:E8:6D:A6:F6:CC:72:58:9B:DB:A6:54:D5:0F:24:BF X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:df0::/44 Signature Algorithm: sha256WithRSAEncryption b3:f5:5b:f4:2f:19:e7:7d:26:95:e5:ed:bf:68:5a:c2:ce:b5: e1:f5:b4:f6:b7:58:c4:d3:d4:e9:a4:da:09:f3:a4:a6:27:db: fe:d9:7d:92:14:e8:c0:34:77:93:d5:9c:58:7c:e4:57:0e:ec: 7d:8d:ed:93:88:1d:45:16:dd:8e:bf:cd:ad:42:9a:22:cf:92: e0:c8:97:b9:e2:95:53:5a:c2:c0:97:6e:23:48:e4:81:7d:3a: e3:52:19:2b:ce:e0:21:8e:56:b4:c4:5f:cb:ee:39:50:1e:14: 7e:e1:c4:6e:49:5c:3c:31:1e:5e:e5:79:68:06:53:ba:07:62: a2:65:8b:c9:7a:4c:09:fb:ff:e6:1e:35:0d:e8:15:2c:1c:1a: 4f:9a:1f:4d:6f:a3:f5:b1:f6:08:e2:ab:d3:70:db:bb:9e:ae: 24:8a:59:f0:3f:b2:df:ac:c3:42:64:98:31:64:62:d4:06:4e: 55:39:ff:b7:9c:73:1d:6f:0e:8d:55:db:d6:40:cb:c6:fd:34: 78:52:7f:b9:84:8d:22:45:9f:7d:a8:72:33:88:88:08:a8:bc: 68:a7:90:c6:c1:e3:6f:9a:41:7d:44:2e:8a:72:c3:4b:e8:78: 2b:5d:b3:06:00:2a:07:11:59:c8:dc:68:b5:8d:54:46:3b:4d: e5:13:ec:b0 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUeGzH8O0uJ+TpNf01LUWZ63ileeUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTE1WhcNMjUwNzE0MDg1MDE1 WjAzMTEwLwYDVQQDEygzMzk3MjYxRjIyRTg2REE2RjZDQzcyNTg5QkRCQTY1NEQ1 MEYyNEJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAqXTLYT69+K CAufRw9SdtKgeyLNLUSY3VSX+BtscI3kCUAqT6hvUlb5T0tV3v+vlU9f5YT0sotF Jcuw/LwprtPm70RVcOb/TSUbgrFA0BBI/sE8Pgj74z98kErONrXVdhibIRvV/KuR hl0bzf78+maMNQ+080pdt8hixszX9hszftrhcIRS5efYrAeztNZKazYuKwEgLNgz 82hF1GTP9EU2+5IcUFY7c4CgqPBwKVm1b/uCvWvm7ZEyoDFG6ElwA7iPx7HOwT76 WHkliXZzFvN28lQGkMQ0wuosbrBsxb/Jm7E6+M7U7pzCRXt0RBHZeYbDT/ALWINL jE1EA0nI7QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDOXJh8i6G2m9sxyWJvbplTV DyS/MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQ2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM3MzAzNzMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g3wMA0GCSqGSIb3DQEBCwUAA4IBAQCz9Vv0LxnnfSaV5e2/aFrC zrXh9bT2t1jE09TppNoJ86SmJ9v+2X2SFOjANHeT1ZxYfORXDux9je2TiB1FFt2O v82tQpoiz5LgyJe54pVTWsLAl24jSOSBfTrjUhkrzuAhjla0xF/L7jlQHhR+4cRu SVw8MR5e5XloBlO6B2KiZYvJekwJ+//mHjUN6BUsHBpPmh9Nb6P1sfYI4qvTcNu7 nq4kilnwP7LfrMNCZJgxZGLUBk5VOf+3nHMdbw6NVdvWQMvG/TR4Un+5hI0iRZ99 qHIziIgIqLxop5DGweNvmkF9RC6KcsNL6HgrXbMGACoHEVnI3Gi1jVRGO03lE+yw -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org