$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa File: 323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa (raw, json) Hash identifier: +sOFmhC5CLiSqei4eepycDse48Bgq49op1G1ssgtM5E= Subject key identifier: AF:E0:7E:CB:B8:1D:2C:CC:55:3E:D3:21:30:88:37:EC:19:4C:09:55 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5396DA08B9F59455AB14AC3933CF1B47B1ED7071 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa Signing time: Mon 16 Jun 2025 08:52:31 +0000 ROA not before: Mon 16 Jun 2025 08:47:31 +0000 ROA not after: Mon 15 Jun 2026 08:52:31 +0000 asID: 200334 IP address blocks: 2602:feda:b8d::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:96:da:08:b9:f5:94:55:ab:14:ac:39:33:cf:1b:47:b1:ed:70:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:31 2025 GMT Not After : Jun 15 08:52:31 2026 GMT Subject: CN=AFE07ECBB81D2CCC553ED321308837EC194C0955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:ab:ee:b4:17:25:5b:95:7b:fa:cd:7c:b9: 31:7c:24:59:b4:9a:e1:39:66:eb:03:a5:41:aa:66: a8:af:64:27:ce:93:8d:ab:75:e3:77:89:c7:75:cf: 5b:81:84:cb:88:51:01:19:31:54:14:a4:d3:34:9e: bb:8d:a8:47:83:6b:9a:70:b3:51:24:f7:eb:c6:e8: 8c:07:e7:7b:dd:e3:96:fe:d0:37:96:a6:d5:3d:5d: 29:16:ce:ea:bb:82:bf:83:d1:83:76:ab:43:76:ac: 58:d8:96:5d:b6:cb:f9:4e:3b:f3:3e:5f:3a:f6:1e: 78:7d:ae:fc:f8:89:60:96:aa:d1:de:e8:da:e3:af: cd:d0:56:5b:8b:04:d3:86:55:06:13:d5:22:77:67: 8c:c5:e0:89:9b:3d:be:ba:39:77:13:24:7f:74:b3: 74:95:71:fe:7c:f9:e4:90:9e:95:99:08:fc:8d:a3: 5c:e6:97:b5:5d:27:ba:b9:16:e2:01:02:c5:d2:86: 7d:1c:78:ea:c3:b7:bf:11:af:41:f3:9b:d2:20:51: 3d:45:92:0e:4d:7d:a1:d1:4a:f9:85:fe:f7:ea:ca: 31:d8:c1:85:94:e6:5f:bf:d0:30:2b:35:82:77:61: 3b:6e:22:82:82:31:cc:30:9f:fd:10:8f:ec:6c:5c: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:7E:CB:B8:1D:2C:CC:55:3E:D3:21:30:88:37:EC:19:4C:09:55 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b8d::/48 Signature Algorithm: sha256WithRSAEncryption 42:ba:b8:56:25:2e:9d:78:9d:3f:4c:b5:1c:c6:27:61:d1:12: 96:38:94:bf:fb:8f:3f:8c:18:dd:b4:ed:f2:80:3b:e9:7a:96: 3d:06:ce:12:85:b4:4f:b2:d8:5f:6e:36:f9:1c:16:4d:fe:53: 0f:10:d5:cf:5d:d5:50:ca:92:f7:0a:e2:83:0a:c3:e9:c9:fa: 7d:b2:8d:1f:35:2b:e4:d5:8b:8f:32:d6:ea:38:d1:d0:e2:47: 64:07:8d:f2:05:d3:09:68:97:2a:f2:fe:e7:76:db:c0:19:8b: 0d:66:e0:fd:47:aa:53:8d:72:72:91:c4:40:8a:7d:0b:0b:37: fb:83:01:a1:ba:37:c2:47:2f:2b:46:97:13:39:f5:d1:95:b7: 2d:e3:93:ca:30:00:87:9c:d8:bd:b4:fd:df:6d:ba:96:41:b6: 20:35:12:d1:7d:3f:b4:0a:c9:87:c8:82:b1:43:dd:8e:bc:0e: 0e:52:b5:79:48:60:a6:4d:9f:71:3e:db:50:33:1c:d9:55:6c: b4:42:72:67:f4:69:40:c3:c5:26:df:f8:f6:ae:b9:f0:24:41: 8c:dd:88:68:9f:24:cf:9a:90:4c:60:8c:9e:89:be:2a:5c:75: ad:90:3a:73:46:a0:df:b6:5b:eb:7d:e9:61:2c:c3:91:56:02: 1c:40:5a:ed -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUU5baCLn1lFWrFKw5M88bR7HtcHEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMxWhcNMjYwNjE1MDg1MjMx WjAzMTEwLwYDVQQDEyhBRkUwN0VDQkI4MUQyQ0NDNTUzRUQzMjEzMDg4MzdFQzE5 NEMwOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnmr7rQXJVuV e/rNfLkxfCRZtJrhOWbrA6VBqmaor2QnzpONq3Xjd4nHdc9bgYTLiFEBGTFUFKTT NJ67jahHg2uacLNRJPfrxuiMB+d73eOW/tA3lqbVPV0pFs7qu4K/g9GDdqtDdqxY 2JZdtsv5TjvzPl869h54fa78+IlglqrR3uja46/N0FZbiwTThlUGE9Uid2eMxeCJ mz2+ujl3EyR/dLN0lXH+fPnkkJ6VmQj8jaNc5pe1XSe6uRbiAQLF0oZ9HHjqw7e/ Ea9B85vSIFE9RZIOTX2h0Ur5hf736sox2MGFlOZfv9AwKzWCd2E7biKCgjHMMJ/9 EI/sbFxbCQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK/gfsu4HSzMVT7TITCIN+wZ TAlVMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzMzMzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2guNMA0GCSqGSIb3DQEBCwUAA4IBAQBCurhWJS6deJ0/TLUcxidh 0RKWOJS/+48/jBjdtO3ygDvpepY9Bs4ShbRPsthfbjb5HBZN/lMPENXPXdVQypL3 CuKDCsPpyfp9so0fNSvk1YuPMtbqONHQ4kdkB43yBdMJaJcq8v7ndtvAGYsNZuD9 R6pTjXJykcRAin0LCzf7gwGhujfCRy8rRpcTOfXRlbct45PKMACHnNi9tP3fbbqW QbYgNRLRfT+0CsmHyIKxQ92OvA4OUrV5SGCmTZ9xPttQMxzZVWy0QnJn9GlAw8Um 3/j2rrnwJEGM3YhonyTPmpBMYIyeib4qXHWtkDpzRqDftlvrfelhLMORVgIcQFrt -----END CERTIFICATE-----Generated at Mon Jun 30 22:33:57 2025 by rpki-client