$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa File: 323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa (raw, json) Hash identifier: 7jdXCiFGfZB4f+fGV87ZB47RjknOp8BzZP39rwRNUPc= Subject key identifier: 58:45:BA:07:93:92:BD:03:55:8B:8E:F8:5E:17:CD:9F:04:52:81:B3 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2703218537CEE6CC734A7D3FF0C1129F2F57790A Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa Signing time: Mon 16 Jun 2025 08:52:32 +0000 ROA not before: Mon 16 Jun 2025 08:47:32 +0000 ROA not after: Mon 15 Jun 2026 08:52:32 +0000 asID: 140727 IP address blocks: 2602:feda:afa::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:03:21:85:37:ce:e6:cc:73:4a:7d:3f:f0:c1:12:9f:2f:57:79:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:32 2025 GMT Not After : Jun 15 08:52:32 2026 GMT Subject: CN=5845BA079392BD03558B8EF85E17CD9F045281B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:d0:e7:22:1f:2b:21:8a:92:4d:1a:59:ea: 3b:8d:82:77:a9:bf:7b:65:30:7e:ec:5b:81:37:39: 4a:e2:f5:52:e9:29:26:7a:b0:59:0b:75:a0:9f:e9: 45:fc:1e:a5:dc:5d:b3:5d:f4:0e:87:4a:70:99:bb: cc:c5:48:39:7e:ef:13:22:9b:26:50:05:55:53:b3: 6f:7e:a7:47:11:91:39:b6:13:9f:44:98:b9:25:c5: e1:91:17:a2:ea:4b:9b:a0:d3:17:5c:3b:f0:96:44: 01:7a:a5:49:57:f8:38:a0:cb:76:b4:ba:98:bd:ba: cc:59:9c:94:3d:ee:87:64:6a:69:f4:41:73:73:92: c7:a6:57:c8:62:2d:e5:0e:5d:cb:53:35:c9:af:0d: f0:5f:e8:a9:42:48:fe:14:f8:77:b8:d8:1a:23:16: 2a:0f:37:89:81:41:4a:1a:b7:bb:50:0c:96:c0:51: 70:0c:d4:6a:46:bb:0f:1a:a7:99:91:97:78:f1:6a: 56:ca:f4:50:22:87:3b:b9:96:68:8a:6f:bb:20:75: 48:76:ea:68:71:ca:fe:e0:fa:29:8c:28:62:0f:c7: b8:e5:d3:0b:d9:e4:0b:3b:64:27:0a:0e:97:28:0a: 22:f6:21:a6:9f:77:5e:07:6f:0e:cb:29:ca:2c:f0: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:45:BA:07:93:92:BD:03:55:8B:8E:F8:5E:17:CD:9F:04:52:81:B3 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:afa::/48 Signature Algorithm: sha256WithRSAEncryption c3:51:c8:0d:d1:2d:f3:64:a1:33:c2:46:bc:ef:90:da:b5:c3: 3f:a2:a3:a1:56:8d:c2:be:0b:8a:84:83:f1:5d:82:52:19:bc: 59:32:d2:09:c0:20:bf:36:1f:d4:7f:49:70:04:07:28:60:ae: 41:9c:6a:86:fa:cd:99:c9:8c:a9:94:9e:d1:29:80:2f:d7:ec: 57:cb:37:1c:04:bb:9c:65:1d:04:01:c8:42:4f:88:a9:6c:9c: 7b:9e:58:5b:02:e1:75:65:1d:48:2f:67:5d:86:bd:27:b5:dd: fa:ea:14:2f:24:ba:87:70:8a:19:c0:75:63:ef:f4:d5:3d:cb: 28:eb:cc:f9:e0:c2:d8:09:82:65:7a:06:73:aa:8e:25:87:9e: d8:ac:ac:92:d3:13:24:b4:ac:a1:c8:07:52:5b:1f:d9:9c:07: 8c:39:16:19:5e:e5:9c:c4:c6:a8:3c:9e:a3:b6:bc:a8:e1:eb: 28:80:6d:4f:41:24:27:79:fa:d7:fa:e7:44:e4:92:de:97:bf: a8:f2:c4:86:22:3f:70:5d:7f:8b:f6:00:17:cd:98:1b:f9:b9: b1:84:b0:78:28:70:c4:07:d2:04:30:13:37:95:6a:11:8a:61: b8:5b:63:32:f6:61:a4:29:2b:91:e1:70:6b:53:c4:21:12:01: 1a:df:7b:0f -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUJwMhhTfO5sxzSn0/8MESny9XeQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMyWhcNMjYwNjE1MDg1MjMy WjAzMTEwLwYDVQQDEyg1ODQ1QkEwNzkzOTJCRDAzNTU4QjhFRjg1RTE3Q0Q5RjA0 NTI4MUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K/Q5yIfKyGK kk0aWeo7jYJ3qb97ZTB+7FuBNzlK4vVS6SkmerBZC3Wgn+lF/B6l3F2zXfQOh0pw mbvMxUg5fu8TIpsmUAVVU7NvfqdHEZE5thOfRJi5JcXhkRei6kuboNMXXDvwlkQB eqVJV/g4oMt2tLqYvbrMWZyUPe6HZGpp9EFzc5LHplfIYi3lDl3LUzXJrw3wX+ip Qkj+FPh3uNgaIxYqDzeJgUFKGre7UAyWwFFwDNRqRrsPGqeZkZd48WpWyvRQIoc7 uZZoim+7IHVIdupoccr+4PopjChiD8e45dML2eQLO2QnCg6XKAoi9iGmn3deB28O yynKLPCKKQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFhFugeTkr0DVYuO+F4XzZ8E UoGzMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NjYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzczMjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gr6MA0GCSqGSIb3DQEBCwUAA4IBAQDDUcgN0S3zZKEzwka875Da tcM/oqOhVo3CvguKhIPxXYJSGbxZMtIJwCC/Nh/Uf0lwBAcoYK5BnGqG+s2ZyYyp lJ7RKYAv1+xXyzccBLucZR0EAchCT4ipbJx7nlhbAuF1ZR1IL2ddhr0ntd366hQv JLqHcIoZwHVj7/TVPcso68z54MLYCYJlegZzqo4lh57YrKyS0xMktKyhyAdSWx/Z nAeMORYZXuWcxMaoPJ6jtryo4esogG1PQSQnefrX+udE5JLel7+o8sSGIj9wXX+L 9gAXzZgb+bmxhLB4KHDEB9IEMBM3lWoRimG4W2My9mGkKSuR4XBrU8QhEgEa33sP -----END CERTIFICATE-----Generated at Thu Jul 3 00:42:26 2025 by rpki-client