$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa File: 323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa (raw, json) Hash identifier: AO1Tw/yV/0yr0mBMnCCFTDFwgpWm8y4ujWBwklCwLy4= Subject key identifier: 1C:99:C2:0E:89:D8:B0:43:46:2A:87:04:FD:39:0F:2B:13:42:5F:7D Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3897CED6C13C31A3EB8390B0BDF5AFA0D3CE492C Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa Signing time: Mon 16 Jun 2025 08:52:26 +0000 ROA not before: Mon 16 Jun 2025 08:47:26 +0000 ROA not after: Mon 15 Jun 2026 08:52:26 +0000 asID: 138181 IP address blocks: 2602:feda:ae2::/47 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:97:ce:d6:c1:3c:31:a3:eb:83:90:b0:bd:f5:af:a0:d3:ce:49:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:26 2025 GMT Not After : Jun 15 08:52:26 2026 GMT Subject: CN=1C99C20E89D8B043462A8704FD390F2B13425F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:66:bc:0d:56:e1:71:ac:ed:45:fd:4b:c0: 53:26:b0:68:7b:95:65:3e:6b:b1:a8:00:39:d7:dc: e4:47:32:9e:a1:6e:30:bf:24:cf:86:7d:f0:b3:a7: f7:95:40:b9:8e:7d:e6:b6:7a:87:66:1f:9e:9e:bc: 14:da:0f:ae:23:48:72:e5:f0:23:0e:20:b5:c9:c6: 4b:e9:7c:05:4c:ea:c5:0d:e1:ff:dc:0d:66:7d:e8: 40:db:7f:a2:ac:7f:4b:b2:b1:a6:43:17:11:77:56: 84:aa:be:66:81:32:e4:1e:89:7b:ce:0d:6a:13:c7: 17:b0:ec:9f:8c:59:ef:8e:bc:bb:0c:ab:3c:af:cb: 17:47:cf:fe:39:14:8f:38:19:37:21:3f:1e:c8:83: e6:2c:bd:45:af:1e:bd:eb:b3:00:54:f0:67:d6:14: 6e:be:fe:e1:67:33:72:aa:39:e0:83:f4:cb:4c:33: b5:16:5f:01:97:c6:66:6b:76:cb:34:53:5e:26:dd: c6:0e:f0:b8:62:fb:1c:d3:a7:81:b1:5a:ba:aa:19: f3:41:0a:c3:d4:06:d0:84:28:13:95:3a:53:14:61: e0:ce:fd:2c:f7:c2:b7:c8:04:01:df:17:87:45:51: d5:b9:ea:54:37:53:d2:e3:e8:2c:69:59:e9:7c:e1: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:99:C2:0E:89:D8:B0:43:46:2A:87:04:FD:39:0F:2B:13:42:5F:7D X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae2::/47 Signature Algorithm: sha256WithRSAEncryption 40:94:50:5a:18:ed:2e:3e:6c:3e:df:6e:ba:9d:28:77:65:15: 16:05:64:3d:90:5a:6a:f9:ac:7e:05:e8:82:04:48:c4:9c:10: 9d:0a:37:3c:92:3f:32:5e:25:a1:2f:2b:03:38:7d:87:81:85: cf:85:66:20:4e:b4:5f:a4:5a:41:b4:d1:97:fe:b9:fb:6f:8e: 10:53:67:a7:f0:46:62:09:1d:12:d2:48:6b:5c:61:9c:0c:83: 7c:94:13:40:c3:45:c3:a8:ea:1d:b6:f9:6e:59:85:0e:43:df: 2f:80:11:7e:15:4e:4a:f5:26:c2:cf:71:b9:1e:53:18:d3:f8: 37:c6:56:08:f8:eb:ed:a9:06:d3:aa:ca:b0:c9:96:fe:e1:ae: 5d:ce:53:cd:87:af:71:8e:fa:16:79:09:d2:af:80:d1:38:15: 6d:4e:6d:00:aa:40:0d:c8:6c:79:59:26:ce:0f:e3:6f:63:5e: 54:c5:85:1d:f5:6d:97:06:b1:96:da:c3:95:4a:c1:7b:78:17: b6:bf:de:fe:9b:74:4b:37:5f:5e:2f:e9:8f:5e:ea:2c:53:a5: 46:b7:c3:d2:4f:6f:cf:68:c6:3c:a1:fb:8a:6e:1b:62:1d:e6: 6d:41:75:a6:34:d1:5a:96:4e:91:65:31:c3:c2:1b:1b:26:cd: e2:c5:5f:27 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUOJfO1sE8MaPrg5CwvfWvoNPOSSwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI2WhcNMjYwNjE1MDg1MjI2 WjAzMTEwLwYDVQQDEygxQzk5QzIwRTg5RDhCMDQzNDYyQTg3MDRGRDM5MEYyQjEz NDI1RjdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLVmvA1W4XGs 7UX9S8BTJrBoe5VlPmuxqAA519zkRzKeoW4wvyTPhn3ws6f3lUC5jn3mtnqHZh+e nrwU2g+uI0hy5fAjDiC1ycZL6XwFTOrFDeH/3A1mfehA23+irH9LsrGmQxcRd1aE qr5mgTLkHol7zg1qE8cXsOyfjFnvjry7DKs8r8sXR8/+ORSPOBk3IT8eyIPmLL1F rx6967MAVPBn1hRuvv7hZzNyqjngg/TLTDO1Fl8Bl8Zma3bLNFNeJt3GDvC4Yvsc 06eBsVq6qhnzQQrD1AbQhCgTlTpTFGHgzv0s98K3yAQB3xeHRVHVuepUN1PS4+gs aVnpfOHBUQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFByZwg6J2LBDRiqHBP05DysT Ql99MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NTMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzMzM4MzEzODMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcBJgL+2griMA0GCSqGSIb3DQEBCwUAA4IBAQBAlFBaGO0uPmw+3266nSh3 ZRUWBWQ9kFpq+ax+BeiCBEjEnBCdCjc8kj8yXiWhLysDOH2HgYXPhWYgTrRfpFpB tNGX/rn7b44QU2en8EZiCR0S0khrXGGcDIN8lBNAw0XDqOodtvluWYUOQ98vgBF+ FU5K9SbCz3G5HlMY0/g3xlYI+OvtqQbTqsqwyZb+4a5dzlPNh69xjvoWeQnSr4DR OBVtTm0AqkANyGx5WSbOD+NvY15UxYUd9W2XBrGW2sOVSsF7eBe2v97+m3RLN19e L+mPXuosU6VGt8PST2/PaMY8ofuKbhtiHeZtQXWmNNFalk6RZTHDwhsbJs3ixV8n -----END CERTIFICATE-----Generated at Mon Jun 30 18:26:06 2025 by rpki-client