$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: pVqSOqaeSVYuY3HR1i+1axIw7EzBgvrRvO7e1wGW+Ys= Subject key identifier: 3A:F4:84:6E:B3:B2:7B:D2:29:3B:DB:C4:3B:98:0F:D4:FE:EC:30:15 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 23FA26126BDD344550699AF1AF486E6A698655DE Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:32 +0000 ROA not before: Mon 16 Jun 2025 08:47:32 +0000 ROA not after: Mon 15 Jun 2026 08:52:32 +0000 asID: 46997 IP address blocks: 2602:feda:4::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fa:26:12:6b:dd:34:45:50:69:9a:f1:af:48:6e:6a:69:86:55:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:32 2025 GMT Not After : Jun 15 08:52:32 2026 GMT Subject: CN=3AF4846EB3B27BD2293BDBC43B980FD4FEEC3015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:92:bd:d5:13:0e:5b:08:88:da:8f:fa:1f: d7:ab:68:0f:55:c1:3c:23:94:95:32:03:8d:8e:da: 8d:4e:64:15:96:90:5c:74:c3:82:41:1d:38:c9:55: 38:eb:f1:22:c2:bc:82:4f:ed:6c:20:8a:b8:ef:2d: 68:1e:9a:f1:de:c0:78:c0:8f:eb:a6:d8:77:cd:9b: db:00:a6:8a:93:f5:da:15:ba:f8:d1:12:e7:1a:38: 12:d8:68:4e:03:e8:9c:30:85:1e:ad:99:8d:dd:f7: 08:4b:50:eb:f9:5b:fe:34:04:ac:ea:b2:b1:bf:82: 6c:d1:f3:df:63:db:22:3b:0a:2d:3c:d8:9e:c3:22: a5:e8:21:d6:48:ea:f9:79:49:91:05:70:62:b6:1e: f4:cd:d4:3b:75:0c:fb:30:04:29:d9:e7:b6:3b:01: 86:81:97:b0:9d:2d:81:ea:58:d4:eb:a0:30:1f:9c: c2:d0:ef:29:98:d9:98:79:47:76:01:e6:86:55:d3: 48:1d:bd:fb:8a:a9:c3:b0:ea:f5:cd:e8:ba:32:23: 84:c5:40:23:d8:4f:7e:44:9c:bb:dd:84:f3:57:3c: 63:f3:46:5c:f4:59:3f:5a:81:9c:a9:c7:f3:c1:fd: ea:9a:38:89:4f:a4:f8:84:d7:24:30:4d:b1:6d:ec: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F4:84:6E:B3:B2:7B:D2:29:3B:DB:C4:3B:98:0F:D4:FE:EC:30:15 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:4::/48 Signature Algorithm: sha256WithRSAEncryption 54:7c:66:15:49:15:74:35:bd:66:94:d0:d6:f2:b0:02:79:e8: 12:0b:03:0d:6d:97:d3:36:83:da:69:ec:73:de:da:83:2c:03: 47:7a:c1:8b:4c:8f:cc:60:30:0e:fa:f1:17:c1:35:82:47:14: b4:29:e2:00:45:07:c2:70:26:4b:de:dd:c5:d6:88:9e:8c:6a: 3b:f6:05:bf:1a:99:ab:02:e4:a0:da:6e:c0:a3:8e:96:7a:a5: 99:5c:ad:b1:22:a3:0b:65:ef:de:16:a0:9e:46:dd:69:b3:2d: 20:e7:a8:58:40:14:7d:8c:ef:b7:d6:3e:88:f4:84:85:12:9f: cb:47:ad:4a:fd:58:5c:e5:aa:d7:32:bb:99:69:51:4b:25:4c: 20:69:ab:d7:4d:1d:5f:a1:b6:00:f9:ce:c0:cd:7c:25:35:a8: d2:f1:fb:28:fa:40:e9:a7:8d:7f:e4:88:0d:a2:96:b6:ec:1e: c1:6c:34:49:5f:0d:68:18:bd:26:85:44:d7:f8:d6:4c:d4:e9: 84:93:57:33:86:ea:4b:35:cd:8a:f1:94:ec:51:41:f5:73:0c: 03:7b:33:7f:da:25:99:48:16:3a:42:6f:d0:20:46:61:1d:72: 40:96:25:35:b9:05:8b:07:f9:bb:1a:4a:bd:05:9f:32:bb:ab: 06:ba:bd:50 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUI/omEmvdNEVQaZrxr0huammGVd4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMyWhcNMjYwNjE1MDg1MjMy WjAzMTEwLwYDVQQDEygzQUY0ODQ2RUIzQjI3QkQyMjkzQkRCQzQzQjk4MEZENEZF RUMzMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQqSvdUTDlsI iNqP+h/Xq2gPVcE8I5SVMgONjtqNTmQVlpBcdMOCQR04yVU46/EiwryCT+1sIIq4 7y1oHprx3sB4wI/rpth3zZvbAKaKk/XaFbr40RLnGjgS2GhOA+icMIUerZmN3fcI S1Dr+Vv+NASs6rKxv4Js0fPfY9siOwotPNiewyKl6CHWSOr5eUmRBXBith70zdQ7 dQz7MAQp2ee2OwGGgZewnS2B6ljU66AwH5zC0O8pmNmYeUd2AeaGVdNIHb37iqnD sOr1zei6MiOExUAj2E9+RJy73YTzVzxj80Zc9Fk/WoGcqcfzwf3qmjiJT6T4hNck ME2xbeyTdwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFDr0hG6zsnvSKTvbxDuYD9T+ 7DAVMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm Av7aAAQwDQYJKoZIhvcNAQELBQADggEBAFR8ZhVJFXQ1vWaU0NbysAJ56BILAw1t l9M2g9pp7HPe2oMsA0d6wYtMj8xgMA768RfBNYJHFLQp4gBFB8JwJkve3cXWiJ6M ajv2Bb8amasC5KDabsCjjpZ6pZlcrbEiowtl794WoJ5G3WmzLSDnqFhAFH2M77fW Poj0hIUSn8tHrUr9WFzlqtcyu5lpUUslTCBpq9dNHV+htgD5zsDNfCU1qNLx+yj6 QOmnjX/kiA2ilrbsHsFsNElfDWgYvSaFRNf41kzU6YSTVzOG6ks1zYrxlOxRQfVz DAN7M3/aJZlIFjpCb9AgRmEdckCWJTW5BYsH+bsaSr0FnzK7qwa6vVA= -----END CERTIFICATE-----Generated at Mon Jun 30 01:20:52 2025 by rpki-client