$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa File: 323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa (raw, json) Hash identifier: bQi7BsDHrNJ8vFAuNQgZzY3kMDfhcZX0Q9zuRAzHaFI= Subject key identifier: BA:11:F5:C4:0A:A6:A2:8F:60:EB:3E:D2:0D:7F:95:B3:36:F6:41:92 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1665A07F8AE0E9D4D44EB0CBA4367A4DA23AA5B3 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa Signing time: Mon 16 Jun 2025 08:52:30 +0000 ROA not before: Mon 16 Jun 2025 08:47:30 +0000 ROA not after: Mon 15 Jun 2026 08:52:30 +0000 asID: 200334 IP address blocks: 2602:feda:b8c::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:65:a0:7f:8a:e0:e9:d4:d4:4e:b0:cb:a4:36:7a:4d:a2:3a:a5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:30 2025 GMT Not After : Jun 15 08:52:30 2026 GMT Subject: CN=BA11F5C40AA6A28F60EB3ED20D7F95B336F64192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:eb:1b:7c:08:2b:3e:cc:a0:f4:55:d9:b6: 57:28:6e:03:7a:fc:7c:40:ac:ee:ba:c3:5a:95:8f: ca:fb:9e:3b:e9:3f:e0:ed:e6:dc:76:45:1b:2f:83: 4f:c2:94:c4:45:a1:73:e0:44:13:8b:ed:d2:64:95: 21:af:16:01:32:e0:72:df:e7:7b:7b:cf:a8:cb:c9: bb:01:df:8b:c1:83:20:ed:5a:ee:da:48:91:a4:2d: 28:78:24:2b:33:93:69:88:3e:26:f0:73:f0:cb:1f: 90:3b:16:af:ad:f1:2c:20:32:a9:d4:7c:91:2e:7b: 33:bb:8e:0f:3c:d6:09:2f:ca:e2:f8:18:c1:68:99: 57:3d:c7:fc:66:39:88:81:93:65:e8:3d:ae:75:df: 0a:d5:fa:ce:3d:b2:54:b0:9a:f3:7d:d1:d4:b9:6e: 38:b6:a3:f4:cb:27:6e:8f:20:d6:dc:37:3b:4d:0c: b9:37:eb:37:2d:ad:43:85:5b:40:a6:b3:f3:be:ae: fd:43:77:6a:6d:a4:a7:71:ac:a4:54:3a:da:1f:d5: 4a:c4:81:2c:f2:7f:32:0d:ab:06:c0:8f:87:28:5d: b2:af:cd:5a:f0:44:6c:28:d1:7a:c8:82:c3:7e:e2: 7d:87:6c:2c:00:99:3b:b6:a8:f1:94:6a:da:4a:5b: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:F5:C4:0A:A6:A2:8F:60:EB:3E:D2:0D:7F:95:B3:36:F6:41:92 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b8c::/48 Signature Algorithm: sha256WithRSAEncryption 15:c7:a2:10:a0:53:58:80:ac:06:60:8b:ef:b3:05:eb:a7:6a: 54:b0:27:c5:e1:8e:5c:0b:07:96:ed:e8:48:30:77:48:4c:c5: a3:68:d3:7f:2f:e2:20:17:d8:5f:2b:39:8c:08:c8:a7:b1:91: 69:4b:7c:f3:5f:c4:6a:22:fa:07:0f:cc:7e:7b:01:4d:f1:5a: 07:37:8e:bb:21:2d:2a:b1:e4:bd:eb:07:98:8c:38:fa:9c:d1: 96:f3:3c:1e:7a:34:d3:18:58:a0:a7:a3:a6:dd:06:e7:e1:cb: 48:25:9e:11:ed:ce:01:18:d9:70:13:d7:53:74:56:e3:a1:a2: 7f:ad:bf:72:ef:31:da:47:b0:12:3f:55:65:f0:51:8a:45:cc: 9d:34:26:80:97:0b:52:5f:66:95:13:69:08:63:42:50:a6:c4: 0b:4c:07:dd:55:69:30:13:bc:d4:58:84:c5:d9:b6:58:77:44: 66:99:33:41:f8:90:1d:0e:00:60:73:47:a3:83:a7:59:84:34: 36:dd:82:e1:1e:5b:49:59:37:a4:7c:b6:c2:7b:c7:be:7f:71: 1f:cc:0f:ff:ea:2e:62:97:62:f3:42:83:b7:87:ad:04:f4:68: f6:fa:6b:75:0d:a4:73:10:87:59:84:65:33:6e:7d:86:5b:4d: 47:03:29:88 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUFmWgf4rg6dTUTrDLpDZ6TaI6pbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw WjAzMTEwLwYDVQQDEyhCQTExRjVDNDBBQTZBMjhGNjBFQjNFRDIwRDdGOTVCMzM2 RjY0MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozrrG3wIKz7M oPRV2bZXKG4Devx8QKzuusNalY/K+5476T/g7ebcdkUbL4NPwpTERaFz4EQTi+3S ZJUhrxYBMuBy3+d7e8+oy8m7Ad+LwYMg7Vru2kiRpC0oeCQrM5NpiD4m8HPwyx+Q OxavrfEsIDKp1HyRLnszu44PPNYJL8ri+BjBaJlXPcf8ZjmIgZNl6D2udd8K1frO PbJUsJrzfdHUuW44tqP0yydujyDW3Dc7TQy5N+s3La1DhVtAprPzvq79Q3dqbaSn caykVDraH9VKxIEs8n8yDasGwI+HKF2yr81a8ERsKNF6yILDfuJ9h2wsAJk7tqjx lGraSltnRwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLoR9cQKpqKPYOs+0g1/lbM2 9kGSMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzMzMzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2guMMA0GCSqGSIb3DQEBCwUAA4IBAQAVx6IQoFNYgKwGYIvvswXr p2pUsCfF4Y5cCweW7ehIMHdITMWjaNN/L+IgF9hfKzmMCMinsZFpS3zzX8RqIvoH D8x+ewFN8VoHN467IS0qseS96weYjDj6nNGW8zweejTTGFigp6Om3Qbn4ctIJZ4R 7c4BGNlwE9dTdFbjoaJ/rb9y7zHaR7ASP1Vl8FGKRcydNCaAlwtSX2aVE2kIY0JQ psQLTAfdVWkwE7zUWITF2bZYd0RmmTNB+JAdDgBgc0ejg6dZhDQ23YLhHltJWTek fLbCe8e+f3EfzA//6i5il2LzQoO3h60E9Gj2+mt1DaRzEIdZhGUzbn2GW01HAymI -----END CERTIFICATE-----Generated at Mon Jun 30 22:29:33 2025 by rpki-client