$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: O/7CX/lE2wH2PqPf//1bzNSRhP3JW3amBl/iq7dqCgU= Subject key identifier: D5:87:AB:BB:25:2D:F8:7A:91:B9:10:A1:EA:6E:09:5B:F3:A4:87:D7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 456BED6A79BE843CC5BB4BA6247681ED5860C5BD Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 46997 IP address blocks: 2602:feda::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6b:ed:6a:79:be:84:3c:c5:bb:4b:a6:24:76:81:ed:58:60:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=D587ABBB252DF87A91B910A1EA6E095BF3A487D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1d:9b:c4:3c:6c:e4:5b:1f:10:da:22:38:af: 5f:4e:20:3e:ef:53:1d:6e:09:a0:38:8d:da:90:97: 34:63:2e:43:86:b3:f3:6a:6a:b7:cf:f3:b1:69:f2: 3d:b7:01:b1:ce:ff:12:c0:25:4d:5a:2d:7d:31:e6: f6:04:26:4e:bb:b3:fe:9d:55:6d:a1:8e:43:8a:24: 18:73:f9:6c:2b:44:d3:1a:ef:41:4b:9e:e5:34:11: 8e:2c:73:6e:f2:60:09:bf:62:d3:d3:1e:ad:22:9c: 95:e9:b8:b3:7b:14:70:6d:5d:22:5c:f2:00:68:d0: 5a:7e:39:40:bb:90:46:72:ae:b9:fd:de:19:fc:fe: 13:95:31:b7:66:3c:c1:da:f0:7b:ff:ef:cb:1f:45: 34:fe:dd:20:60:b8:07:3b:d3:a0:ba:9b:77:e2:4d: bb:36:de:b8:1f:41:ff:43:ed:e5:7e:c7:96:c5:28: 17:36:c6:6d:52:32:2b:56:ce:d9:d6:d7:3d:26:1e: 18:f8:fc:e8:ca:d5:da:ae:f9:b5:e1:6f:21:d3:b5: 82:d0:2d:2f:69:8f:f5:b4:55:6d:84:dd:0d:50:4d: d2:18:51:ea:74:f7:84:fc:b7:5b:e0:d8:1c:33:c5: 9c:67:cb:2c:05:b9:ed:cc:8c:b5:45:ef:09:a6:00: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:AB:BB:25:2D:F8:7A:91:B9:10:A1:EA:6E:09:5B:F3:A4:87:D7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda::/48 Signature Algorithm: sha256WithRSAEncryption c5:78:d0:19:d1:bd:94:6f:d7:6c:2b:d5:e5:f1:8a:c5:35:2a: d3:1b:bd:03:e5:57:6e:a0:ac:1f:a5:f1:68:08:66:f4:cf:a0: d2:60:79:67:20:c5:45:81:f9:b1:3a:4b:fc:3a:08:b0:8f:04: 35:e5:a7:03:de:3f:b6:1b:5a:a6:76:04:3f:4b:d5:c8:3f:0b: 6e:14:91:af:f3:5a:02:07:e1:c1:a9:89:ff:68:69:84:cd:a1: 5a:fc:c9:b6:3c:23:71:d0:36:a6:a4:9f:46:6d:ed:7d:02:e9: 75:76:22:1b:1f:06:36:e2:b6:08:63:75:a8:de:4f:8b:99:73: 05:6e:ed:44:51:27:1a:b5:80:66:21:0b:de:b8:b0:e8:1e:36: aa:b0:55:f3:93:28:64:05:9a:83:16:db:90:3d:75:cd:82:8d: 56:60:da:41:0e:85:3b:7f:b5:cc:26:e1:b2:f3:24:20:70:d3: a4:5d:23:5b:7f:46:fa:fc:13:76:4d:ba:69:04:30:36:6f:52: f1:0e:9b:ab:ba:dd:bc:94:56:86:b7:de:85:fd:00:03:b6:13: 93:dd:6a:62:e9:0f:4a:27:67:b9:81:f4:6a:c0:5f:ab:80:05: 64:35:c6:d2:0a:80:cc:15:7f:2b:0f:6b:22:c7:bd:2b:79:39: 10:8c:19:84 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIURWvtanm+hDzFu0umJHaB7Vhgxb0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEyhENTg3QUJCQjI1MkRGODdBOTFCOTEwQTFFQTZFMDk1QkYz QTQ4N0Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B2bxDxs5Fsf ENoiOK9fTiA+71MdbgmgOI3akJc0Yy5DhrPzamq3z/OxafI9twGxzv8SwCVNWi19 Meb2BCZOu7P+nVVtoY5DiiQYc/lsK0TTGu9BS57lNBGOLHNu8mAJv2LT0x6tIpyV 6bizexRwbV0iXPIAaNBafjlAu5BGcq65/d4Z/P4TlTG3ZjzB2vB7/+/LH0U0/t0g YLgHO9Ogupt34k27Nt64H0H/Q+3lfseWxSgXNsZtUjIrVs7Z1tc9Jh4Y+PzoytXa rvm14W8h07WC0C0vaY/1tFVthN0NUE3SGFHqdPeE/Ldb4NgcM8WcZ8ssBbntzIy1 Re8JpgCbHQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFNWHq7slLfh6kbkQoepuCVvz pIfXMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/toA ADANBgkqhkiG9w0BAQsFAAOCAQEAxXjQGdG9lG/XbCvV5fGKxTUq0xu9A+VXbqCs H6XxaAhm9M+g0mB5ZyDFRYH5sTpL/DoIsI8ENeWnA94/thtapnYEP0vVyD8LbhSR r/NaAgfhwamJ/2hphM2hWvzJtjwjcdA2pqSfRm3tfQLpdXYiGx8GNuK2CGN1qN5P i5lzBW7tRFEnGrWAZiEL3riw6B42qrBV85MoZAWagxbbkD11zYKNVmDaQQ6FO3+1 zCbhsvMkIHDTpF0jW39G+vwTdk26aQQwNm9S8Q6bq7rdvJRWhrfehf0AA7YTk91q YukPSidnuYH0asBfq4AFZDXG0gqAzBV/Kw9rIse9K3k5EIwZhA== -----END CERTIFICATE-----Generated at Mon Jun 30 01:27:13 2025 by rpki-client