$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa File: 323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa (raw, json) Hash identifier: ZYhi1AXIfKD8MTy0p+MxZifoUzlT4QMS0wc3yyOQwGI= Subject key identifier: 49:2A:C2:2A:88:81:57:82:7E:C4:AD:0D:81:B3:91:74:87:EE:CF:B1 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 61AE6800854B1D3845B14355CFA35ACDB864AFED Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 41255 IP address blocks: 2602:feda:ae4::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ae:68:00:85:4b:1d:38:45:b1:43:55:cf:a3:5a:cd:b8:64:af:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=492AC22A888157827EC4AD0D81B3917487EECFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:f2:72:70:8b:b3:89:c5:5b:01:6c:11:92: cb:d6:ea:a8:a3:23:97:a4:73:4b:97:16:c6:69:b3: f5:b9:07:e5:01:90:3a:71:4c:40:66:01:03:6b:a9: d1:8c:ca:cf:32:14:e0:6b:b6:e1:d6:be:d4:a7:e6: 94:b7:9a:1a:f0:fa:b5:e5:ca:18:89:d6:14:0e:63: 16:4e:01:51:cf:01:0e:bf:98:3d:41:0e:ae:73:c2: db:96:0c:bf:8c:c0:de:82:17:3b:77:bc:69:84:cc: d8:ee:4b:9c:9b:d4:28:1d:74:cb:40:ca:3f:44:c9: 2b:39:b1:0a:e0:32:01:f6:68:4c:09:a7:c8:62:ce: 61:47:65:d1:4d:44:1e:ee:6e:ff:18:25:df:65:76: ae:8b:e3:fa:40:fa:80:58:62:5c:00:3a:f0:b3:6c: ff:95:65:7f:49:f5:10:7d:56:2d:b7:52:09:13:67: 3b:6a:c1:4d:45:b4:1a:97:c1:05:f2:ef:c5:6d:e3: fb:b8:33:3b:e7:a6:c4:38:03:e9:28:96:a4:0a:06: f1:c2:7f:37:b6:12:21:f6:f8:08:34:ee:6a:d3:60: 6b:a7:ca:4c:c1:e1:35:a5:49:a3:37:01:bf:16:51: c6:83:b6:7c:22:eb:94:63:11:fe:67:f4:eb:ad:8c: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2A:C2:2A:88:81:57:82:7E:C4:AD:0D:81:B3:91:74:87:EE:CF:B1 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae4::/48 Signature Algorithm: sha256WithRSAEncryption 2d:dc:0b:31:c7:37:30:cc:49:05:d3:d6:47:fd:7d:a0:4d:53: cc:d2:b4:ce:28:c5:42:0b:ff:ac:49:6b:d4:43:af:1b:c6:02: 2d:1e:3f:3e:ff:1b:22:82:87:f7:03:f5:19:83:81:9e:5b:96: 29:79:6a:d5:1e:68:ca:04:49:e6:50:4c:e8:cc:da:fd:5f:8b: 19:13:f3:fc:25:23:16:8e:12:c8:ac:b4:e9:5f:d4:5a:30:75: 4c:49:e3:92:aa:78:d4:be:9d:8f:f6:d6:bf:08:b8:c2:68:37: 2b:8e:8f:6e:04:7f:3e:6a:fb:31:0c:73:e4:a8:ff:09:ad:47: 0c:c5:e9:4e:a1:35:16:6f:7f:f6:5c:42:b2:20:8a:40:40:a1: 42:95:f4:30:56:96:e9:ff:d5:12:73:c3:05:85:2f:79:c6:a7: 35:0a:90:19:1d:9e:fd:e4:a6:70:ee:dd:55:42:03:2b:dd:ce: 4a:8d:da:a1:89:78:53:14:48:50:18:21:9e:bc:2f:9b:34:40: 53:36:15:5a:1f:57:f3:06:63:17:8d:bc:d4:f6:13:55:02:69: a4:78:ba:40:31:cd:92:9b:36:cc:d4:a9:cf:60:3e:5b:e5:ba: 9f:87:8f:bc:08:94:0f:35:d8:8c:d7:3a:e9:a3:51:ff:b2:76: c0:0b:d2:5d -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUYa5oAIVLHThFsUNVz6Nazbhkr+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyg0OTJBQzIyQTg4ODE1NzgyN0VDNEFEMEQ4MUIzOTE3NDg3 RUVDRkIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRXycnCLs4nF WwFsEZLL1uqooyOXpHNLlxbGabP1uQflAZA6cUxAZgEDa6nRjMrPMhTga7bh1r7U p+aUt5oa8Pq15coYidYUDmMWTgFRzwEOv5g9QQ6uc8Lblgy/jMDeghc7d7xphMzY 7kucm9QoHXTLQMo/RMkrObEK4DIB9mhMCafIYs5hR2XRTUQe7m7/GCXfZXaui+P6 QPqAWGJcADrws2z/lWV/SfUQfVYtt1IJE2c7asFNRbQal8EF8u/FbeP7uDM756bE OAPpKJakCgbxwn83thIh9vgINO5q02Brp8pMweE1pUmjNwG/FlHGg7Z8IuuUYxH+ Z/TrrYzZTQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFEkqwiqIgVeCfsStDYGzkXSH 7s+xMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTY1MzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMxMzIzNTM1LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2grkMA0GCSqGSIb3DQEBCwUAA4IBAQAt3AsxxzcwzEkF09ZH/X2gTVPM 0rTOKMVCC/+sSWvUQ68bxgItHj8+/xsigof3A/UZg4GeW5YpeWrVHmjKBEnmUEzo zNr9X4sZE/P8JSMWjhLIrLTpX9RaMHVMSeOSqnjUvp2P9ta/CLjCaDcrjo9uBH8+ avsxDHPkqP8JrUcMxelOoTUWb3/2XEKyIIpAQKFClfQwVpbp/9USc8MFhS95xqc1 CpAZHZ795KZw7t1VQgMr3c5KjdqhiXhTFEhQGCGevC+bNEBTNhVaH1fzBmMXjbzU 9hNVAmmkeLpAMc2SmzbM1KnPYD5b5bqfh4+8CJQPNdiM1zrpo1H/snbAC9Jd -----END CERTIFICATE-----Generated at Mon Jun 30 05:15:57 2025 by rpki-client