$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa File: 323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa (raw, json) Hash identifier: Na0NHVNZSEx2JIERF2GMd9LMB8UjFnXfjHHScMTkdHg= Subject key identifier: E5:AF:E3:61:04:1E:B9:6F:4E:87:13:21:F9:13:E6:80:0F:92:A3:68 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 45CAC23795C3D4CFD59E787F92C67CF6C9DEECFF Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa Signing time: Mon 14 Aug 2023 07:53:28 +0000 ROA not before: Mon 14 Aug 2023 07:48:28 +0000 ROA not after: Mon 12 Aug 2024 07:53:28 +0000 asID: 149835 IP address blocks: 2602:feda:e60::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 00:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ca:c2:37:95:c3:d4:cf:d5:9e:78:7f:92:c6:7c:f6:c9:de:ec:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Aug 14 07:48:28 2023 GMT Not After : Aug 12 07:53:28 2024 GMT Subject: CN=E5AFE361041EB96F4E871321F913E6800F92A368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:43:ac:57:b9:8f:fb:07:17:90:14:66:20: 1c:b1:78:e2:7d:92:36:92:6e:1f:61:ce:0e:c4:77: 41:6a:f3:3b:c1:7f:f7:95:ee:f0:09:a4:5c:a0:8f: 21:dc:43:87:61:7f:6f:5e:d8:0e:de:e2:e9:ed:7a: bd:b4:b7:8f:2b:72:88:89:40:de:27:9b:45:72:65: c8:4f:bf:f8:12:74:39:33:56:49:97:bf:42:e4:6c: 85:80:00:35:0c:52:4b:f8:7d:8f:27:98:f1:26:ba: dc:75:55:ad:d0:ef:c7:19:b4:cb:74:be:e3:5c:a3: d4:d1:04:ef:eb:0a:5a:cf:a4:ef:69:55:6a:81:5d: 3f:8b:9b:65:2b:9f:70:2c:e7:7b:6f:e7:11:70:94: 5d:2e:d1:28:10:b6:6d:79:ff:e6:ec:c7:85:72:a0: 21:36:67:78:ab:c6:80:1b:65:3d:d7:85:a1:65:c0: 40:6c:50:88:3e:85:ed:c4:c7:ac:2c:06:02:cb:1d: 6f:e3:e8:2f:6f:9d:e7:dd:84:b4:4f:58:78:df:87: 84:c8:a4:9b:f5:5c:82:85:a5:2b:b1:70:95:97:55: b1:15:f6:52:67:98:5f:eb:2c:39:a9:f9:e7:32:23: d8:cd:71:de:b5:32:64:98:d3:06:90:8f:01:b4:21: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AF:E3:61:04:1E:B9:6F:4E:87:13:21:F9:13:E6:80:0F:92:A3:68 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e60::/44 Signature Algorithm: sha256WithRSAEncryption 0e:1c:e7:04:8c:46:a6:94:b4:e3:9e:b0:8e:4f:12:5b:e7:a1: 23:02:59:35:12:e4:1e:42:71:f7:10:8b:b4:5f:1c:70:55:2d: 93:77:18:3e:4e:e3:8e:c8:d5:93:19:86:b1:de:c2:ad:14:fd: fb:6a:f4:96:af:c0:b4:89:46:a2:37:29:01:b4:29:7b:e1:c8: dc:05:e6:ec:fa:7a:ff:9c:29:03:dd:44:a9:d2:10:e9:49:5c: 7f:d1:51:08:22:d2:bb:49:96:8f:d1:14:5c:70:c4:37:12:b6: fd:fe:5a:85:4d:ba:06:3e:c0:5a:6c:27:6b:d7:44:40:c5:02: cb:ca:2f:3f:a7:c5:7b:3b:3b:4d:a1:9e:7e:89:52:6c:9b:d1: ed:5f:84:23:45:94:e5:9d:ed:bc:6c:14:df:87:ff:47:8c:19: 76:25:2d:6e:e7:11:0c:7f:20:72:c5:76:33:1a:64:ed:0d:77: c5:3e:a6:b1:e2:1f:62:da:71:c6:00:31:b8:94:51:33:71:7b: f8:cd:72:cc:53:ff:10:3f:cd:99:21:16:87:55:14:33:c7:7f: 51:6c:c5:6f:a7:48:ed:83:67:79:5b:9c:87:39:ad:57:46:35: d5:3a:24:46:a0:6f:45:f5:ff:88:bb:a6:8a:b1:1f:13:e9:92: c6:a1:78:91 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIURcrCN5XD1M/Vnnh/ksZ89sne7P8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODI4WhcNMjQwODEyMDc1MzI4 WjAzMTEwLwYDVQQDEyhFNUFGRTM2MTA0MUVCOTZGNEU4NzEzMjFGOTEzRTY4MDBG OTJBMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vJDrFe5j/sH F5AUZiAcsXjifZI2km4fYc4OxHdBavM7wX/3le7wCaRcoI8h3EOHYX9vXtgO3uLp 7Xq9tLePK3KIiUDeJ5tFcmXIT7/4EnQ5M1ZJl79C5GyFgAA1DFJL+H2PJ5jxJrrc dVWt0O/HGbTLdL7jXKPU0QTv6wpaz6TvaVVqgV0/i5tlK59wLOd7b+cRcJRdLtEo ELZtef/m7MeFcqAhNmd4q8aAG2U914WhZcBAbFCIPoXtxMesLAYCyx1v4+gvb53n 3YS0T1h434eEyKSb9VyChaUrsXCVl1WxFfZSZ5hf6yw5qfnnMiPYzXHetTJkmNMG kI8BtCECgwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOWv42EEHrlvTocTIfkT5oAP kqNoMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM5MzgzMzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g5gMA0GCSqGSIb3DQEBCwUAA4IBAQAOHOcEjEamlLTjnrCOTxJb 56EjAlk1EuQeQnH3EIu0XxxwVS2Tdxg+TuOOyNWTGYax3sKtFP37avSWr8C0iUai NykBtCl74cjcBebs+nr/nCkD3USp0hDpSVx/0VEIItK7SZaP0RRccMQ3Erb9/lqF TboGPsBabCdr10RAxQLLyi8/p8V7OztNoZ5+iVJsm9HtX4QjRZTlne28bBTfh/9H jBl2JS1u5xEMfyByxXYzGmTtDXfFPqax4h9i2nHGADG4lFEzcXv4zXLMU/8QP82Z IRaHVRQzx39RbMVvp0jtg2d5W5yHOa1XRjXVOiRGoG9F9f+Iu6aKsR8T6ZLGoXiR -----END CERTIFICATE-----Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org