$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa File: 323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa (raw, json) Hash identifier: VW8LKuy2KR+dtvadn19igG6QqmqU+9mqJkcWibW1dcA= Subject key identifier: 6B:33:FC:D9:35:19:C7:AA:FF:18:1B:CC:33:A2:EA:EE:29:D2:42:F9 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 725BB08A59625DFB4901A3190353A5CB21657881 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 134575 IP address blocks: 2602:feda:3b0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5b:b0:8a:59:62:5d:fb:49:01:a3:19:03:53:a5:cb:21:65:78:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=6B33FCD93519C7AAFF181BCC33A2EAEE29D242F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:19:e8:e4:a6:92:84:d2:a3:6a:84:60:7e: ac:9c:ac:09:2a:09:bb:88:70:4b:71:04:e5:44:46: f1:81:7d:45:91:d4:8a:a7:18:ca:de:ad:b6:0a:58: 8e:06:bb:38:1f:cb:be:f4:e3:36:13:16:68:ed:3f: a8:46:ff:fa:58:75:90:49:4b:30:94:78:07:4b:bc: cf:ff:97:f5:6d:ae:9f:15:f3:91:0c:f7:97:87:c4: d7:22:39:bb:ce:64:2b:ec:19:3f:e3:19:70:6d:fd: f8:29:16:08:3a:40:e9:39:df:1f:b9:6e:98:61:4f: 70:cb:5c:06:ff:a6:a0:75:d3:b9:c2:ea:0c:93:83: 6d:fb:93:56:19:31:31:d9:3c:23:d9:f5:d4:87:3b: 02:29:86:36:1b:8f:35:06:31:20:09:64:ab:00:e6: 60:98:3e:39:82:2c:56:ed:52:2b:b6:93:00:5d:ee: e9:5a:59:9d:c1:26:eb:ab:bd:94:11:23:1a:37:ab: 61:f2:9d:9d:3d:53:56:6c:56:be:1c:5b:dc:d7:18: 89:fa:63:a2:ea:a3:7d:78:f1:97:46:da:21:c5:df: b8:5f:05:ba:86:b2:28:25:ca:d9:13:c7:e8:da:fd: 4b:ae:d8:e5:0b:b2:fd:19:af:23:58:40:92:ec:ca: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:33:FC:D9:35:19:C7:AA:FF:18:1B:CC:33:A2:EA:EE:29:D2:42:F9 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3b0::/44 Signature Algorithm: sha256WithRSAEncryption 22:5a:1d:21:05:87:60:0e:a1:a7:12:84:0b:12:95:d2:ee:f6: c0:64:3d:25:7c:cd:48:d1:0a:32:46:24:b3:46:b1:48:2d:1b: d4:f6:69:d9:43:f8:90:47:76:8b:ad:9e:a2:b5:53:e3:50:0d: 06:ec:dd:5e:22:f9:d6:af:0f:75:79:97:55:2f:f7:d6:f1:c9: fd:07:7d:b7:79:c5:fe:83:36:81:4c:d1:68:ff:8f:a9:64:86: da:e1:f6:71:a1:9e:59:d9:3d:90:80:23:04:a9:b9:93:4b:93: b5:62:04:3b:db:63:5b:3e:c2:49:c6:c1:44:81:46:e9:f8:2a: b6:9f:a4:ed:f6:29:9d:1a:b6:07:f6:24:20:ac:ce:ed:c4:8a: c4:83:a0:1e:03:15:fa:25:b1:40:41:72:23:3c:71:f3:94:ee: ed:73:b8:e4:4d:27:fe:1b:f5:a1:4d:40:f3:76:cc:b3:87:d4: 5b:d0:a4:a1:b9:51:d2:a8:59:83:9e:51:5c:55:52:c1:6d:f6: 44:4d:98:f5:30:94:3f:74:2d:75:cc:65:d1:47:60:6d:b1:57: 8d:6e:c8:a1:96:63:d2:a4:22:cb:93:22:d6:ad:07:83:42:a1: 1b:2f:91:ac:e7:88:a9:b2:c3:8f:53:de:02:e1:fc:d2:15:2c: 33:fc:86:a3 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUcluwilliXftJAaMZA1OlyyFleIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEyg2QjMzRkNEOTM1MTlDN0FBRkYxODFCQ0MzM0EyRUFFRTI5 RDI0MkY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMUZ6OSmkoTS o2qEYH6snKwJKgm7iHBLcQTlREbxgX1FkdSKpxjK3q22CliOBrs4H8u+9OM2ExZo 7T+oRv/6WHWQSUswlHgHS7zP/5f1ba6fFfORDPeXh8TXIjm7zmQr7Bk/4xlwbf34 KRYIOkDpOd8fuW6YYU9wy1wG/6agddO5wuoMk4Nt+5NWGTEx2Twj2fXUhzsCKYY2 G481BjEgCWSrAOZgmD45gixW7VIrtpMAXe7pWlmdwSbrq72UESMaN6th8p2dPVNW bFa+HFvc1xiJ+mOi6qN9ePGXRtohxd+4XwW6hrIoJcrZE8fo2v1LrtjlC7L9Ga8j WECS7Mq4jwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGsz/Nk1Gceq/xgbzDOi6u4p 0kL5MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM0MzUzNzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gOwMA0GCSqGSIb3DQEBCwUAA4IBAQAiWh0hBYdgDqGnEoQLEpXS 7vbAZD0lfM1I0QoyRiSzRrFILRvU9mnZQ/iQR3aLrZ6itVPjUA0G7N1eIvnWrw91 eZdVL/fW8cn9B323ecX+gzaBTNFo/4+pZIba4fZxoZ5Z2T2QgCMEqbmTS5O1YgQ7 22NbPsJJxsFEgUbp+Cq2n6Tt9imdGrYH9iQgrM7txIrEg6AeAxX6JbFAQXIjPHHz lO7tc7jkTSf+G/WhTUDzdsyzh9Rb0KShuVHSqFmDnlFcVVLBbfZETZj1MJQ/dC11 zGXRR2BtsVeNbsihlmPSpCLLkyLWrQeDQqEbL5Gs54ipssOPU94C4fzSFSwz/Iaj -----END CERTIFICATE-----Generated at Tue Jul 1 04:00:00 2025 by rpki-client