$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa File: 323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa (raw, json) Hash identifier: yXh18qy+x72TRSFw/qCif/sUt1N4iAGAoASW+bnqymE= Subject key identifier: 02:DA:20:4C:82:0B:08:41:10:19:BC:6F:3B:76:AF:3D:FA:FB:1A:6E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5A6D68D4262C3AE8373C128AC6EFB60433A557E1 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa Signing time: Mon 16 Jun 2025 08:52:25 +0000 ROA not before: Mon 16 Jun 2025 08:47:25 +0000 ROA not after: Mon 15 Jun 2026 08:52:25 +0000 asID: 213361 IP address blocks: 2602:feda:3d0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6d:68:d4:26:2c:3a:e8:37:3c:12:8a:c6:ef:b6:04:33:a5:57:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:25 2025 GMT Not After : Jun 15 08:52:25 2026 GMT Subject: CN=02DA204C820B08411019BC6F3B76AF3DFAFB1A6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:c7:91:ee:58:46:99:cb:28:66:a0:ab:bc: b2:36:59:cc:e6:63:52:d9:c1:b9:f7:44:ba:61:e2: 14:a4:66:38:97:cf:f0:9d:4d:66:0a:b7:4c:f7:ab: 83:43:62:8b:60:4b:59:19:d9:3a:59:c5:0a:0a:bb: 6c:72:c6:19:68:22:df:c0:23:72:4d:88:12:81:62: 9d:ca:94:94:19:b2:47:95:37:f8:1f:42:42:ce:de: 1d:bd:f3:bf:bd:ae:a7:f7:5c:ac:ea:e0:a2:7c:60: 9f:6b:b7:fa:0c:c8:1e:e4:30:94:42:e1:a6:2b:e4: a6:e3:96:a8:f8:49:df:c3:0a:03:80:69:87:2b:83: bd:f7:9c:42:5a:6c:fc:64:f9:a4:a3:ea:79:d3:03: fa:cb:5f:3f:9c:dc:31:7d:dd:35:9d:8a:33:03:1d: b7:db:1b:c5:23:b7:ec:ce:51:7f:07:fc:73:d5:11: e5:9e:33:9e:63:40:d1:2c:59:0c:77:40:cf:46:d1: 72:73:74:d4:0d:05:d1:82:ab:b7:7e:ba:5f:a5:b8: ff:67:c1:d0:ba:18:85:0a:27:31:84:3c:1c:ab:ef: 45:f6:f9:61:06:39:50:54:4a:37:64:f9:b3:7d:a7: 7b:57:fc:87:d8:0f:96:07:52:c1:92:6c:fa:da:3c: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:20:4C:82:0B:08:41:10:19:BC:6F:3B:76:AF:3D:FA:FB:1A:6E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3d0::/44 Signature Algorithm: sha256WithRSAEncryption 55:31:b5:6f:f4:d6:d4:48:98:75:53:ea:72:52:19:ee:39:c9: 16:13:b9:e3:5b:d9:50:d7:90:ed:65:f7:8d:ea:6e:d3:d6:b2: a4:9e:13:e9:c7:ec:48:5c:19:79:47:46:e8:71:2c:cd:cc:89: 5d:54:b5:66:01:32:91:6c:5c:ce:0d:43:62:55:e2:4b:a5:86: f9:f1:04:55:ec:f6:17:e3:fb:41:28:a8:58:82:ca:69:6b:f7: 00:94:e8:66:34:b7:37:64:97:fb:f9:b8:77:15:9a:67:c2:73: e9:ce:c2:56:a9:6d:86:f0:ae:00:57:a7:60:2f:ff:4d:c0:a2: 69:58:22:f8:44:8c:6a:25:db:ea:63:c6:08:8e:e7:4f:8b:d9: 61:d8:df:bd:7f:8b:38:32:d5:10:43:54:94:fd:09:28:e2:61: b8:58:f9:02:ac:40:86:1f:b5:5d:58:a5:6f:fe:7f:97:af:32: 74:e6:c9:61:17:fe:ef:ec:08:49:9e:aa:b7:90:40:d4:6c:10: 92:be:d5:6c:51:fe:f4:60:34:0e:d6:a0:71:88:c8:25:8a:bb: 79:ee:79:af:62:bb:df:d3:81:3d:82:cd:8a:5b:fe:de:42:8e: 80:64:a0:be:35:89:86:1d:ca:3a:84:dd:97:a0:0e:14:34:56: 4f:71:93:e8 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUWm1o1CYsOug3PBKKxu+2BDOlV+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI1WhcNMjYwNjE1MDg1MjI1 WjAzMTEwLwYDVQQDEygwMkRBMjA0QzgyMEIwODQxMTAxOUJDNkYzQjc2QUYzREZB RkIxQTZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC3Hke5YRpnL KGagq7yyNlnM5mNS2cG590S6YeIUpGY4l8/wnU1mCrdM96uDQ2KLYEtZGdk6WcUK CrtscsYZaCLfwCNyTYgSgWKdypSUGbJHlTf4H0JCzt4dvfO/va6n91ys6uCifGCf a7f6DMge5DCUQuGmK+Sm45ao+EnfwwoDgGmHK4O995xCWmz8ZPmko+p50wP6y18/ nNwxfd01nYozAx232xvFI7fszlF/B/xz1RHlnjOeY0DRLFkMd0DPRtFyc3TUDQXR gqu3frpfpbj/Z8HQuhiFCicxhDwcq+9F9vlhBjlQVEo3ZPmzfad7V/yH2A+WB1LB kmz62jyekwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFALaIEyCCwhBEBm8bzt2rz36 +xpuMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMzMzMzNjMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gPQMA0GCSqGSIb3DQEBCwUAA4IBAQBVMbVv9NbUSJh1U+pyUhnu OckWE7njW9lQ15DtZfeN6m7T1rKknhPpx+xIXBl5R0bocSzNzIldVLVmATKRbFzO DUNiVeJLpYb58QRV7PYX4/tBKKhYgsppa/cAlOhmNLc3ZJf7+bh3FZpnwnPpzsJW qW2G8K4AV6dgL/9NwKJpWCL4RIxqJdvqY8YIjudPi9lh2N+9f4s4MtUQQ1SU/Qko 4mG4WPkCrECGH7VdWKVv/n+XrzJ05slhF/7v7AhJnqq3kEDUbBCSvtVsUf70YDQO 1qBxiMglirt57nmvYrvf04E9gs2KW/7eQo6AZKC+NYmGHco6hN2XoA4UNFZPcZPo -----END CERTIFICATE-----Generated at Tue Jul 1 05:41:54 2025 by rpki-client