$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa File: 323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa (raw, json) Hash identifier: UBGi3Ww8G1NzOnYk/11bGlF6aE3hsMZsw1zUcLtTjh8= Subject key identifier: AE:E3:9C:50:FB:91:F9:B3:71:78:B3:C2:DD:9D:7A:C1:87:C0:51:FE Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7C5762073590FABCEE21616A7FF37CC589A2843C Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa Signing time: Mon 16 Jun 2025 08:52:22 +0000 ROA not before: Mon 16 Jun 2025 08:47:22 +0000 ROA not after: Mon 15 Jun 2026 08:52:22 +0000 asID: 207268 IP address blocks: 2602:feda:3c8::/46 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:57:62:07:35:90:fa:bc:ee:21:61:6a:7f:f3:7c:c5:89:a2:84:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:22 2025 GMT Not After : Jun 15 08:52:22 2026 GMT Subject: CN=AEE39C50FB91F9B37178B3C2DD9D7AC187C051FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:90:77:58:03:a3:47:3b:f5:ca:b8:ad:e7: 81:61:6f:e1:8b:0d:d6:ac:97:ae:a8:72:15:7b:84: df:50:d5:54:ba:5f:cb:7c:46:17:34:1e:01:7d:1a: 96:28:cc:1c:81:8a:08:fe:86:88:3e:6b:bb:52:fb: b2:dc:61:0f:ed:d4:97:7b:66:66:2d:03:2a:98:b3: 76:8e:03:75:73:b0:e8:48:4a:a7:32:a6:7b:a6:38: ae:a8:ee:21:fd:d3:c2:90:07:e5:ed:60:33:df:e3: db:82:0b:10:f5:b7:9c:d8:b3:b0:d4:4e:cf:0a:e8: a8:6b:bf:bc:9f:05:9d:34:cd:a7:e9:54:81:2a:a7: c7:3f:ff:8b:c9:a0:d6:37:87:57:1b:ec:4b:15:38: 5c:a0:ce:19:84:bd:8f:b9:99:b1:26:a4:09:51:b0: e9:c8:81:3d:80:f0:6e:ab:69:72:ca:64:c0:ba:5d: c2:93:23:56:af:c3:d3:59:fd:d1:a1:9f:95:75:c7: d9:59:be:52:ab:02:44:90:87:95:10:f2:6b:2c:aa: 4b:f4:bc:fe:b4:1b:c8:bc:93:e5:be:02:4d:e8:46: d9:88:01:f3:91:02:d9:74:53:5d:53:53:7a:6d:52: c1:75:f1:6e:2f:10:89:eb:44:51:b3:66:ea:4c:ef: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E3:9C:50:FB:91:F9:B3:71:78:B3:C2:DD:9D:7A:C1:87:C0:51:FE X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3c8::/46 Signature Algorithm: sha256WithRSAEncryption 7f:1e:d9:e9:c3:6e:71:f3:ac:aa:83:03:0c:ba:17:21:f7:23: 8b:5d:a9:69:27:7f:79:2d:c4:d7:fb:61:ec:74:0d:39:fc:a7: fb:90:59:7b:89:4b:9e:f7:d2:3d:b9:38:f0:76:d7:75:ca:a6: e9:f0:51:62:e1:22:d3:ed:72:4b:26:28:9f:81:16:76:ec:e0: bd:a1:37:30:4f:d4:85:04:af:2a:bf:4e:74:b0:85:20:84:da: e7:da:bd:d9:27:2e:44:a5:5e:de:e2:84:db:64:b2:ac:8b:ec: 48:79:e2:71:36:fa:ba:d3:a2:5d:ea:e1:68:14:ee:81:b3:76: 5d:e0:96:30:7e:b6:d9:e7:31:1e:e9:d8:3d:7b:32:a9:56:bd: fd:39:6b:55:ae:bb:11:5e:f7:27:e1:99:f0:72:08:dd:0b:ea: a2:28:2a:70:81:5f:69:78:9b:f4:dc:9c:c5:93:71:44:6a:85: ab:cc:c4:60:ad:a7:13:0b:9d:95:9e:2d:3c:8e:12:87:e5:b4: 53:13:64:9f:0a:0d:34:62:db:59:cb:de:c5:c6:13:9a:f0:fb: 0f:d3:e1:aa:12:66:fa:53:52:b0:a4:ac:47:b4:47:14:5a:63: 64:90:bb:fb:2d:49:c2:89:8b:5c:79:ad:ba:d4:e7:84:0a:c2: f8:d9:19:52 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfFdiBzWQ+rzuIWFqf/N8xYmihDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIyWhcNMjYwNjE1MDg1MjIy WjAzMTEwLwYDVQQDEyhBRUUzOUM1MEZCOTFGOUIzNzE3OEIzQzJERDlEN0FDMTg3 QzA1MUZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygGQd1gDo0c7 9cq4reeBYW/hiw3WrJeuqHIVe4TfUNVUul/LfEYXNB4BfRqWKMwcgYoI/oaIPmu7 Uvuy3GEP7dSXe2ZmLQMqmLN2jgN1c7DoSEqnMqZ7pjiuqO4h/dPCkAfl7WAz3+Pb ggsQ9bec2LOw1E7PCuioa7+8nwWdNM2n6VSBKqfHP/+LyaDWN4dXG+xLFThcoM4Z hL2PuZmxJqQJUbDpyIE9gPBuq2lyymTAul3CkyNWr8PTWf3RoZ+VdcfZWb5SqwJE kIeVEPJrLKpL9Lz+tBvIvJPlvgJN6EbZiAHzkQLZdFNdU1N6bVLBdfFuLxCJ60RR s2bqTO/dnQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK7jnFD7kfmzcXizwt2desGH wFH+MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MzM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIzMDM3MzIzNjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcCJgL+2gPIMA0GCSqGSIb3DQEBCwUAA4IBAQB/Htnpw25x86yqgwMMuhch 9yOLXalpJ395LcTX+2HsdA05/Kf7kFl7iUue99I9uTjwdtd1yqbp8FFi4SLT7XJL JiifgRZ27OC9oTcwT9SFBK8qv050sIUghNrn2r3ZJy5EpV7e4oTbZLKsi+xIeeJx Nvq606Jd6uFoFO6Bs3Zd4JYwfrbZ5zEe6dg9ezKpVr39OWtVrrsRXvcn4Znwcgjd C+qiKCpwgV9peJv03JzFk3FEaoWrzMRgracTC52Vni08jhKH5bRTE2SfCg00YttZ y97FxhOa8PsP0+GqEmb6U1KwpKxHtEcUWmNkkLv7LUnCiYtcea261OeECsL42RlS -----END CERTIFICATE-----Generated at Thu Jul 3 00:43:20 2025 by rpki-client