$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa File: 3134312e3139332e32312e302f32342d3234203d3e203338303233.roa (raw, json) Hash identifier: rlMadXXjqHm1nHhUayzM8WcupHEBsFAEmmANvMg+rVI= Subject key identifier: 87:46:AB:94:88:BC:83:33:7D:B7:0F:73:28:E3:B4:52:F7:A2:1E:CF Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5D9D92E69B385454E591484C902B87F90ABA6775 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa Signing time: Mon 24 Mar 2025 22:51:54 +0000 ROA not before: Mon 24 Mar 2025 22:46:54 +0000 ROA not after: Mon 23 Mar 2026 22:51:54 +0000 asID: 38023 IP address blocks: 141.193.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 13:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9d:92:e6:9b:38:54:54:e5:91:48:4c:90:2b:87:f9:0a:ba:67:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Mar 24 22:46:54 2025 GMT Not After : Mar 23 22:51:54 2026 GMT Subject: CN=8746AB9488BC83337DB70F7328E3B452F7A21ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:15:c9:81:8e:91:f2:1b:ef:ea:3b:90:d3: 42:a7:7a:20:72:37:5e:8f:61:6a:23:50:ab:10:3c: cc:6b:91:a3:56:a1:2d:29:48:f4:e0:8c:85:f3:40: 3a:b7:49:58:f0:4b:78:6c:85:d6:30:37:7f:25:df: e5:2e:a2:da:5b:50:ed:39:1a:3d:46:95:87:a6:45: 36:e2:64:ab:7d:73:dc:15:7c:a1:d2:bb:08:ff:01: 9e:92:30:74:6e:71:94:f6:5f:99:e2:5b:8d:67:21: 25:53:40:3f:92:5f:05:44:21:41:46:1e:c6:a0:ab: 77:50:b8:f3:81:29:3d:54:58:20:ce:49:85:51:79: fb:bf:b1:d7:f6:58:9c:b7:a8:ba:02:05:20:6a:76: ff:e0:5e:79:ee:8e:62:59:b0:1d:74:00:c5:c0:0f: 69:0b:16:2b:bf:74:35:75:ed:d9:f1:10:c5:aa:40: 75:68:7d:85:84:92:75:94:0e:5f:27:aa:98:a1:bf: 70:61:a5:b6:e2:6d:86:ca:0e:4b:e0:d6:b9:9b:fe: fe:73:94:d3:e3:7f:9d:43:a2:3b:af:69:4d:b8:0f: 0b:c0:fb:b7:57:0e:84:ee:ee:7e:79:1c:10:54:04: 09:1b:a9:5b:ee:0f:ed:5b:28:e3:7e:02:6e:5f:db: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:46:AB:94:88:BC:83:33:7D:B7:0F:73:28:E3:B4:52:F7:A2:1E:CF X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.193.21.0/24 Signature Algorithm: sha256WithRSAEncryption 78:9e:92:2f:ea:a9:99:55:33:51:1b:10:b9:65:af:bf:44:61: a0:1b:bc:6f:d8:79:16:b0:d3:06:7d:50:30:69:1a:77:80:27: 80:77:a8:84:43:70:92:23:d8:63:b2:58:71:64:58:27:19:11: 13:36:fe:d9:53:01:5b:d4:63:a2:0d:8f:cd:72:d2:24:87:36: b7:2e:b4:14:60:78:8e:5f:a1:0a:a0:55:82:28:05:42:f8:8a: 2e:b5:ba:2c:ba:e9:c5:2d:e1:60:00:c5:06:79:34:63:77:66: 5f:5f:12:8c:80:c4:29:fe:ff:f6:89:82:2c:04:0f:2e:b6:67: 56:b0:fa:4a:92:8c:79:cc:f7:83:6a:6e:24:cb:51:da:c7:27: 18:e8:98:7c:87:5d:83:0d:e2:aa:c1:20:8c:da:90:b5:e5:c4: 71:33:37:ea:7a:94:4f:ac:06:cd:d8:d1:b2:3d:3d:1e:e0:7d: b1:88:8c:bf:9b:50:3c:92:ec:c6:e1:98:74:77:73:aa:44:49: 32:4a:3f:10:1a:90:37:e5:ae:74:d4:6f:8d:ea:9e:09:ba:bc: 11:b2:64:c0:1d:74:ab:61:1c:78:6a:26:ff:09:5f:71:25:11: 1c:3f:85:97:20:a5:84:56:eb:f8:b4:96:9b:78:6e:19:4b:32: 7a:ef:57:d8 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXZ2S5ps4VFTlkUhMkCuH+Qq6Z3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwMzI0MjI0NjU0WhcNMjYwMzIzMjI1MTU0 WjAzMTEwLwYDVQQDEyg4NzQ2QUI5NDg4QkM4MzMzN0RCNzBGNzMyOEUzQjQ1MkY3 QTIxRUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMVyYGOkfIb 7+o7kNNCp3ogcjdej2FqI1CrEDzMa5GjVqEtKUj04IyF80A6t0lY8Et4bIXWMDd/ Jd/lLqLaW1DtORo9RpWHpkU24mSrfXPcFXyh0rsI/wGekjB0bnGU9l+Z4luNZyEl U0A/kl8FRCFBRh7GoKt3ULjzgSk9VFggzkmFUXn7v7HX9lict6i6AgUganb/4F55 7o5iWbAddADFwA9pCxYrv3Q1de3Z8RDFqkB1aH2FhJJ1lA5fJ6qYob9wYaW24m2G yg5L4Na5m/7+c5TT43+dQ6I7r2lNuA8LwPu3Vw6E7u5+eRwQVAQJG6lb7g/tWyjj fgJuX9sbCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIdGq5SIvIMzfbcPcyjjtFL3 oh7PMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzAzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEV MA0GCSqGSIb3DQEBCwUAA4IBAQB4npIv6qmZVTNRGxC5Za+/RGGgG7xv2HkWsNMG fVAwaRp3gCeAd6iEQ3CSI9hjslhxZFgnGRETNv7ZUwFb1GOiDY/NctIkhza3LrQU YHiOX6EKoFWCKAVC+IoutbosuunFLeFgAMUGeTRjd2ZfXxKMgMQp/v/2iYIsBA8u tmdWsPpKkox5zPeDam4ky1HaxycY6Jh8h12DDeKqwSCM2pC15cRxMzfqepRPrAbN 2NGyPT0e4H2xiIy/m1A8kuzG4Zh0d3OqREkySj8QGpA35a501G+N6p4JurwRsmTA HXSrYRx4aib/CV9xJREcP4WXIKWEVuv4tJabeG4ZSzJ671fY -----END CERTIFICATE-----Generated at Sun Apr 27 04:28:13 2025 by rpki-client