$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa File: 323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa (raw, json) Hash identifier: 5v0PnQnL7dfGOwcTVjVK1s13beVPQ2f4w1gBPUiKyII= Subject key identifier: D8:F4:A5:2D:F3:3A:B0:0F:1A:90:8E:48:65:3D:B2:23:1B:C5:CA:E7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 730EC081DD8DD81C2A09CC48F1F3EB159A1C0A60 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa Signing time: Mon 15 Jul 2024 08:50:12 +0000 ROA not before: Mon 15 Jul 2024 08:45:12 +0000 ROA not after: Mon 14 Jul 2025 08:50:12 +0000 asID: 7603 IP address blocks: 2602:feda:f210::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0e:c0:81:dd:8d:d8:1c:2a:09:cc:48:f1:f3:eb:15:9a:1c:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 15 08:45:12 2024 GMT Not After : Jul 14 08:50:12 2025 GMT Subject: CN=D8F4A52DF33AB00F1A908E48653DB2231BC5CAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:3b:35:c0:ec:98:9b:e0:f9:67:21:97:93: d4:78:eb:aa:1d:8e:ad:cf:ae:b5:44:c2:d2:64:51: 90:df:23:68:7c:e5:9b:38:c4:30:99:12:23:5c:eb: 3e:2f:ca:aa:86:93:c5:12:5b:52:06:29:f7:f8:e4: 06:63:29:c1:88:bd:69:0b:6b:67:88:77:31:17:f5: 3d:a5:db:76:67:0c:6c:b0:1e:bf:bd:60:de:3d:89: 73:8f:45:63:69:a6:6f:d5:e7:55:08:ad:06:16:22: 3a:fb:d4:f2:de:64:02:59:3c:aa:b6:3b:01:29:6a: a4:56:62:3d:ad:5f:e6:f7:69:b8:42:5d:19:d4:c0: de:23:8a:91:33:20:28:bf:bc:8b:e4:0a:51:c8:6d: bc:32:17:e9:f0:71:b2:d9:3e:be:d2:bd:76:f2:07: a1:98:d1:03:b4:77:d0:a2:08:23:50:bd:bb:3a:9c: d1:b9:09:ee:cf:e9:e5:75:0c:cc:44:3b:5e:36:ba: 21:74:79:4e:27:b7:b0:39:bb:08:b0:be:d4:81:c3: 49:44:7b:46:2b:46:27:94:e1:e5:78:fd:91:24:6b: c7:32:34:58:b8:c0:93:df:f7:9f:9d:b6:9e:84:8e: f2:c3:57:ab:8c:5e:4b:3e:e1:ea:d1:3a:aa:aa:01: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:A5:2D:F3:3A:B0:0F:1A:90:8E:48:65:3D:B2:23:1B:C5:CA:E7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f210::/44 Signature Algorithm: sha256WithRSAEncryption 0d:76:c2:c0:2f:e6:3b:d4:b8:86:f8:02:54:9c:20:c3:09:83: 01:b6:11:93:af:3d:ab:64:55:91:d0:c9:04:8d:15:ec:16:ea: 8d:51:11:93:06:5c:c5:77:21:72:10:84:21:64:93:2b:e6:61: bf:d8:ce:b0:86:01:61:31:e0:7e:94:56:b7:da:59:db:fa:b8: fd:18:68:07:53:e4:f0:af:0b:63:06:79:05:79:99:52:bd:0f: 5e:fc:22:5d:57:95:d4:53:c9:e2:7a:29:ff:be:3c:63:52:87: 7e:f1:a1:bf:19:90:1e:f6:59:e4:ec:ec:81:c3:ce:c9:09:81: d2:ce:08:d8:ad:b5:f9:bc:d1:1e:15:2f:33:96:f8:21:40:19: 9f:4e:0d:9f:08:10:5c:d2:26:74:54:6d:13:11:62:77:7f:fa: 2c:c3:5e:4f:91:89:ac:4d:72:01:1e:a9:da:e7:6d:9d:fe:41: 38:c8:c1:55:e7:e8:77:f3:2d:b5:0e:99:b3:97:65:ef:fd:99: 57:a5:d1:c7:68:7c:44:ed:32:d0:16:bd:58:4a:5b:ed:2f:f4: 13:27:ec:4e:41:8f:c1:e4:2f:05:d2:45:2b:50:42:53:be:66: 05:65:5c:df:c5:63:d0:ad:a7:e4:00:83:49:d3:72:16:9f:22: d0:75:b3:eb -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUcw7Agd2N2BwqCcxI8fPrFZocCmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEyWhcNMjUwNzE0MDg1MDEy WjAzMTEwLwYDVQQDEyhEOEY0QTUyREYzM0FCMDBGMUE5MDhFNDg2NTNEQjIyMzFC QzVDQUU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlA7NcDsmJvg +Wchl5PUeOuqHY6tz661RMLSZFGQ3yNofOWbOMQwmRIjXOs+L8qqhpPFEltSBin3 +OQGYynBiL1pC2tniHcxF/U9pdt2ZwxssB6/vWDePYlzj0VjaaZv1edVCK0GFiI6 +9Ty3mQCWTyqtjsBKWqkVmI9rV/m92m4Ql0Z1MDeI4qRMyAov7yL5ApRyG28Mhfp 8HGy2T6+0r128gehmNEDtHfQoggjUL27OpzRuQnuz+nldQzMRDteNrohdHlOJ7ew ObsIsL7UgcNJRHtGK0YnlOHleP2RJGvHMjRYuMCT3/efnbaehI7yw1erjF5LPuHq 0TqqqgHrkwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFNj0pS3zOrAPGpCOSGU9siMb xcrnMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 NjMyMzEzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM3MzYzMDMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJgL+2vIQMA0GCSqGSIb3DQEBCwUAA4IBAQANdsLAL+Y71LiG+AJUnCDDCYMB thGTrz2rZFWR0MkEjRXsFuqNURGTBlzFdyFyEIQhZJMr5mG/2M6whgFhMeB+lFa3 2lnb+rj9GGgHU+TwrwtjBnkFeZlSvQ9e/CJdV5XUU8niein/vjxjUod+8aG/GZAe 9lnk7OyBw87JCYHSzgjYrbX5vNEeFS8zlvghQBmfTg2fCBBc0iZ0VG0TEWJ3f/os w15PkYmsTXIBHqna522d/kE4yMFV5+h38y21Dpmzl2Xv/ZlXpdHHaHxE7TLQFr1Y SlvtL/QTJ+xOQY/B5C8F0kUrUEJTvmYFZVzfxWPQrafkAINJ03IWnyLQdbPr -----END CERTIFICATE-----Generated at Sun Feb 16 21:46:49 2025 by rpki-client