$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa File: 323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa (raw, json) Hash identifier: Q27gPnGrl9gCai89l2Pc3jN9uD+TN9/a0thYSTb/w2E= Subject key identifier: 5C:DB:5E:D7:3E:EA:03:D3:93:79:5F:A3:E6:45:7D:1D:DF:54:E6:BD Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3C1C7D454CF8A8FEE570B7FEFE46A5AE04344823 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa Signing time: Mon 16 Jun 2025 08:52:30 +0000 ROA not before: Mon 16 Jun 2025 08:47:30 +0000 ROA not after: Mon 15 Jun 2026 08:52:30 +0000 asID: 137256 IP address blocks: 2602:feda:3a8::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1c:7d:45:4c:f8:a8:fe:e5:70:b7:fe:fe:46:a5:ae:04:34:48:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:30 2025 GMT Not After : Jun 15 08:52:30 2026 GMT Subject: CN=5CDB5ED73EEA03D393795FA3E6457D1DDF54E6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:cc:5a:c2:30:2d:68:22:6b:c6:d9:7c:26: 92:57:d4:02:c1:b9:75:a1:5f:66:72:90:a6:0b:b7: 93:b4:54:7c:bc:c6:e3:f1:95:32:b1:fa:2f:15:82: 28:c8:04:f9:01:c5:fa:28:57:5a:c4:8b:40:2d:25: fb:10:13:9a:19:c8:a3:fb:f0:0c:80:13:74:66:43: 0b:16:12:15:ed:0c:5c:8e:7f:c1:6a:6c:5c:e8:66: 45:58:90:b7:39:f9:5f:28:9f:a7:0b:3c:29:c1:15: 11:d5:45:e9:43:f1:08:5b:f9:18:72:1a:ef:50:c4: 60:a0:28:44:31:b0:f9:e2:e8:46:4d:9f:33:95:44: 86:45:b2:d0:2f:e3:05:72:bd:ff:90:df:a1:4f:b7: dd:82:a1:d2:4e:2c:53:02:ab:7b:62:ac:28:32:b0: c4:de:4e:ed:9b:a0:25:30:f6:43:83:c2:97:ea:8b: b7:b0:13:fd:4f:c2:62:1d:cb:85:7f:65:8a:2e:8f: ef:81:b8:8c:14:47:81:65:67:bb:3e:91:69:55:e3: 47:fd:c4:03:b5:de:9a:14:c0:02:2e:2e:34:1e:9f: 38:3c:95:22:6f:0b:9d:8a:6e:4f:7a:4c:ff:26:dc: 76:1b:49:e7:6b:83:3b:24:40:07:3e:23:e3:c3:8a: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DB:5E:D7:3E:EA:03:D3:93:79:5F:A3:E6:45:7D:1D:DF:54:E6:BD X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a8::/45 Signature Algorithm: sha256WithRSAEncryption 63:8e:43:1a:41:c6:ba:2f:ab:a8:6c:c5:11:5d:42:5f:cb:ef: 05:8d:0f:9a:03:46:10:0a:a9:e2:4b:15:80:eb:3a:ef:b6:99: c3:f2:a6:e1:2b:dc:cf:1c:42:92:b2:95:7b:6d:2d:23:6c:e2: d4:fd:ed:7a:d2:b2:cb:4f:64:37:86:23:26:10:4f:8f:8f:f3: 6a:97:34:6c:21:6c:8f:15:e0:5f:75:c8:4c:0f:aa:58:e3:fe: 22:77:7d:dd:87:9e:8e:6a:e6:ad:ee:ea:5d:9c:7a:19:88:95: ea:03:26:4f:84:d9:d3:7d:d0:0d:90:70:70:84:03:a0:0f:13: 92:83:53:f8:73:d7:bf:c3:3d:f6:7a:aa:46:cc:07:8b:4e:d3: fb:b4:ea:b1:18:39:0a:28:e5:ae:d2:ea:f0:a2:83:55:af:88: 6b:07:50:f4:93:67:87:de:8c:e2:a9:b4:a6:88:f4:94:4a:60: 1a:85:66:b6:d0:d7:15:ce:1f:eb:7f:c3:67:df:5e:71:c6:73: 02:92:e5:85:81:bd:88:7f:c2:de:16:16:33:97:3f:20:6f:74: 48:50:a9:e1:b3:6e:4d:df:2a:2c:d5:69:91:f0:15:30:fd:c0: 4c:d4:22:06:21:6b:7a:07:2f:a5:2c:9e:30:40:d5:17:c7:ef: 67:4b:5b:2f -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUPBx9RUz4qP7lcLf+/kalrgQ0SCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw WjAzMTEwLwYDVQQDEyg1Q0RCNUVENzNFRUEwM0QzOTM3OTVGQTNFNjQ1N0QxRERG NTRFNkJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMrMWsIwLWgi a8bZfCaSV9QCwbl1oV9mcpCmC7eTtFR8vMbj8ZUysfovFYIoyAT5AcX6KFdaxItA LSX7EBOaGcij+/AMgBN0ZkMLFhIV7Qxcjn/Bamxc6GZFWJC3OflfKJ+nCzwpwRUR 1UXpQ/EIW/kYchrvUMRgoChEMbD54uhGTZ8zlUSGRbLQL+MFcr3/kN+hT7fdgqHS TixTAqt7YqwoMrDE3k7tm6AlMPZDg8KX6ou3sBP9T8JiHcuFf2WKLo/vgbiMFEeB ZWe7PpFpVeNH/cQDtd6aFMACLi40Hp84PJUibwudim5Pekz/Jtx2G0nna4M7JEAH PiPjw4rNkwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFzbXtc+6gPTk3lfo+ZFfR3f VOa9MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MTM4M2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzEzMzM3MzIzNTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2gOoMA0GCSqGSIb3DQEBCwUAA4IBAQBjjkMaQca6L6uobMURXUJf y+8FjQ+aA0YQCqniSxWA6zrvtpnD8qbhK9zPHEKSspV7bS0jbOLU/e160rLLT2Q3 hiMmEE+Pj/NqlzRsIWyPFeBfdchMD6pY4/4id33dh56Oauat7updnHoZiJXqAyZP hNnTfdANkHBwhAOgDxOSg1P4c9e/wz32eqpGzAeLTtP7tOqxGDkKKOWu0urwooNV r4hrB1D0k2eH3oziqbSmiPSUSmAahWa20NcVzh/rf8Nn315xxnMCkuWFgb2If8Le FhYzlz8gb3RIUKnhs25N3yos1WmR8BUw/cBM1CIGIWt6By+lLJ4wQNUXx+9nS1sv -----END CERTIFICATE-----Generated at Thu Jul 3 00:44:19 2025 by rpki-client