$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa File: 323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa (raw, json) Hash identifier: BN0ZHHoq8DCS0BCZsYC3mTPazbf0WvyzAWlJp/7qRyo= Subject key identifier: A2:D3:7F:F9:8C:CE:BE:9F:F3:24:3C:D3:85:CD:F1:5D:E6:AF:BB:E2 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5BD3A4D28A9991DFC552F3AA70CCC72F9429EC44 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa Signing time: Mon 16 Jun 2025 08:52:30 +0000 ROA not before: Mon 16 Jun 2025 08:47:30 +0000 ROA not after: Mon 15 Jun 2026 08:52:30 +0000 asID: 38008 IP address blocks: 2602:feda:ae5::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 13:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d3:a4:d2:8a:99:91:df:c5:52:f3:aa:70:cc:c7:2f:94:29:ec:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:30 2025 GMT Not After : Jun 15 08:52:30 2026 GMT Subject: CN=A2D37FF98CCEBE9FF3243CD385CDF15DE6AFBBE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:27:80:52:f2:5f:24:3c:cc:89:6b:34:78: 9b:21:f9:16:5d:2d:b4:2d:8b:a7:1b:43:b8:06:cb: 65:54:92:46:8a:30:c8:48:08:a6:ba:bd:f4:4c:11: bc:3f:fb:a4:36:2a:da:e5:1b:f1:7c:0d:06:69:cd: 47:ec:99:16:01:ab:6e:c3:b7:b2:8f:05:76:f7:dc: 95:fb:05:42:de:e1:12:ed:ca:17:e1:29:1b:df:4e: e1:d3:ed:e0:2e:46:f2:a9:b2:4a:62:1f:04:9c:80: a5:f5:ef:02:db:c4:a5:e2:49:f3:4e:a2:2a:5a:a0: e1:d6:9f:ed:d9:5d:75:09:e1:29:a2:b4:b9:76:9f: bb:c6:fe:cc:5e:15:96:02:33:e3:3a:4b:bf:b5:a3: f9:3e:cd:b2:ec:8b:92:5e:79:09:3b:39:79:4e:c8: af:07:58:b9:4f:50:54:65:5c:e3:38:7a:57:ef:9c: f7:d5:d5:4d:5d:d9:43:13:e9:46:d9:53:a6:94:7e: f3:27:42:4e:c4:75:49:f8:8c:35:81:10:ff:d9:67: 57:f3:9b:58:0d:67:7f:58:d4:57:c7:ef:35:46:83: 0a:6d:79:a0:eb:9d:0f:19:89:49:31:0f:a8:a0:54: aa:76:5c:92:84:7b:4a:6d:68:5d:f8:92:c4:65:fe: 89:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D3:7F:F9:8C:CE:BE:9F:F3:24:3C:D3:85:CD:F1:5D:E6:AF:BB:E2 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae5::/48 Signature Algorithm: sha256WithRSAEncryption 4a:3b:f2:61:91:21:91:71:8b:82:83:48:22:19:27:0e:ce:a5: 54:e5:20:01:35:1b:d4:13:7f:9b:ea:be:f3:b2:42:6f:62:ae: ff:6c:8a:3f:17:5e:54:da:4e:11:62:dc:af:81:5f:76:fd:9d: 82:94:d1:d7:f4:d3:12:36:99:49:d7:71:9e:b8:17:28:f8:a6: e3:aa:12:87:9b:59:da:46:6f:fe:79:23:a2:ce:3a:33:d4:cb: 29:b3:0d:17:ba:88:64:05:cd:9b:79:ec:03:2e:7c:fc:3c:61: 99:55:98:91:d4:96:0d:79:21:e3:6e:77:53:1f:4e:4f:fc:7c: 0b:35:6b:ad:ed:8e:6e:2a:fe:60:36:5d:bf:2b:f0:bd:27:d7: 32:2a:e1:08:90:a5:6e:43:f3:ae:4d:45:48:cb:29:86:ef:d0: f0:48:a2:b9:49:09:18:1b:c0:52:26:7d:b3:eb:61:fd:c0:79: c4:c8:44:64:d4:43:0a:d2:d9:a7:a1:ed:d4:22:27:8d:8d:0c: 53:7e:36:ba:d9:8b:8c:a5:9d:8b:7b:6e:20:43:80:26:10:19: 38:f1:e3:3d:c9:d0:30:60:81:58:92:84:b0:92:42:72:90:bc: 5c:9e:9a:1e:35:60:7f:44:11:33:f9:be:09:e1:ce:5b:ee:62: 11:ba:f5:bc -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUW9Ok0oqZkd/FUvOqcMzHL5Qp7EQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw WjAzMTEwLwYDVQQDEyhBMkQzN0ZGOThDQ0VCRTlGRjMyNDNDRDM4NUNERjE1REU2 QUZCQkUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcMngFLyXyQ8 zIlrNHibIfkWXS20LYunG0O4BstlVJJGijDISAimur30TBG8P/ukNira5RvxfA0G ac1H7JkWAatuw7eyjwV299yV+wVC3uES7coX4Skb307h0+3gLkbyqbJKYh8EnICl 9e8C28Sl4knzTqIqWqDh1p/t2V11CeEporS5dp+7xv7MXhWWAjPjOku/taP5Ps2y 7IuSXnkJOzl5TsivB1i5T1BUZVzjOHpX75z31dVNXdlDE+lG2VOmlH7zJ0JOxHVJ +Iw1gRD/2WdX85tYDWd/WNRXx+81RoMKbXmg650PGYlJMQ+ooFSqdlyShHtKbWhd +JLEZf6JaQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFKLTf/mMzr6f8yQ804XN8V3m r7viMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTY1MzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzAzMDM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2grlMA0GCSqGSIb3DQEBCwUAA4IBAQBKO/JhkSGRcYuCg0giGScOzqVU 5SABNRvUE3+b6r7zskJvYq7/bIo/F15U2k4RYtyvgV92/Z2ClNHX9NMSNplJ13Ge uBco+KbjqhKHm1naRm/+eSOizjoz1Mspsw0XuohkBc2beewDLnz8PGGZVZiR1JYN eSHjbndTH05P/HwLNWut7Y5uKv5gNl2/K/C9J9cyKuEIkKVuQ/OuTUVIyymG79Dw SKK5SQkYG8BSJn2z62H9wHnEyERk1EMK0tmnoe3UIieNjQxTfja62YuMpZ2Le24g Q4AmEBk48eM9ydAwYIFYkoSwkkJykLxcnpoeNWB/RBEz+b4J4c5b7mIRuvW8 -----END CERTIFICATE-----Generated at Wed Jul 2 00:45:13 2025 by rpki-client