$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa File: 323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa (raw, json) Hash identifier: FQ6ORQy8HQ7nToTZho6Kmvrx4MmP0aJkcbSf0ec2U/Y= Subject key identifier: 3D:03:00:CA:0D:A9:83:27:A3:C5:CB:8C:15:6F:DE:7D:BA:CC:31:B0 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2553E6166B85E5319937AD058F84576D42ECEEB3 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa Signing time: Mon 16 Jun 2025 08:52:25 +0000 ROA not before: Mon 16 Jun 2025 08:47:25 +0000 ROA not after: Mon 15 Jun 2026 08:52:25 +0000 asID: 205923 IP address blocks: 2602:feda:b8f::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:53:e6:16:6b:85:e5:31:99:37:ad:05:8f:84:57:6d:42:ec:ee:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:25 2025 GMT Not After : Jun 15 08:52:25 2026 GMT Subject: CN=3D0300CA0DA98327A3C5CB8C156FDE7DBACC31B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:c8:e4:3e:32:7c:d5:59:c4:d9:47:4c:40: 9e:41:67:f4:e3:bb:5f:e5:b8:bd:57:61:ec:72:ac: 73:fd:37:51:5b:03:48:35:99:be:38:1f:af:72:97: d6:c8:4a:53:ad:ff:c9:b0:bd:e1:47:3d:68:62:98: ad:b6:59:27:e9:9b:32:1d:ae:f6:7c:72:ec:aa:5a: fe:af:28:89:4b:c1:4e:47:37:a9:35:68:56:76:39: 2e:6d:c5:31:7f:80:09:3c:6a:74:0d:a8:43:80:f7: 08:b7:93:1f:35:ca:83:75:82:c7:6f:15:fa:f5:d9: 4a:cd:9c:9a:4c:3c:77:ec:7c:fa:17:af:b7:c3:68: 51:7c:20:ab:83:cd:7b:bb:00:c8:3b:29:c2:08:bd: 40:a1:36:c4:f7:bd:fe:75:cb:02:b1:9f:c8:b2:13: 16:f3:84:1f:15:3b:a8:75:c5:3a:19:ba:8f:52:70: b2:75:64:4e:3a:38:ea:92:e1:be:a4:5a:fb:29:15: f9:5d:27:ec:48:0b:b1:6c:ec:d3:40:64:07:70:f4: 89:57:5e:3f:a1:db:14:00:94:ce:72:d8:7f:bb:0e: b5:8c:bb:be:e6:f0:04:03:de:6b:f3:ea:5c:73:ea: d0:39:c5:96:02:dd:23:50:b3:48:c2:62:d5:60:5e: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:00:CA:0D:A9:83:27:A3:C5:CB:8C:15:6F:DE:7D:BA:CC:31:B0 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b8f::/48 Signature Algorithm: sha256WithRSAEncryption 35:32:3f:47:cc:5b:12:71:9b:2a:22:1d:2a:6a:d1:84:54:06: 77:13:d7:21:44:97:fa:41:3c:b2:f5:e9:11:5a:3e:79:7d:cb: 28:df:c2:6e:0e:ec:fa:e2:b0:f0:6e:30:fe:06:ea:e8:33:eb: bd:6f:41:a6:97:5e:d2:79:02:d7:de:10:a5:51:39:6e:ba:2c: 7b:ee:64:63:4a:cf:29:91:e2:4a:b5:6a:c5:ed:3b:1f:5b:11: 62:48:6a:a5:1f:26:33:86:38:f0:61:48:24:c2:d2:39:0c:45: 48:54:df:37:78:75:b0:c1:d6:87:13:f4:a8:ad:b7:73:3a:ee: 2b:5c:24:75:79:43:8e:94:48:70:70:b7:88:49:f1:7f:46:5c: e2:e7:a8:8a:46:f1:86:71:9d:c9:ff:31:d7:96:16:8f:90:5e: e9:2d:a3:4c:e8:c1:42:4c:a4:b6:ea:32:02:8d:34:99:98:86: f5:8b:30:e5:ed:99:07:10:ac:31:1a:4f:ac:3b:e1:da:59:d7: a6:d4:65:e2:18:84:23:91:e0:60:2e:9b:48:69:89:4e:d8:6e: 0f:c6:4c:bc:11:a6:7d:f3:6f:8b:4d:a6:05:a7:5d:fa:ff:43: 3a:c6:b1:9c:58:4b:ae:f9:5e:b7:ab:6e:c0:6b:29:d0:af:a3: c4:71:41:46 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUJVPmFmuF5TGZN60Fj4RXbULs7rMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI1WhcNMjYwNjE1MDg1MjI1 WjAzMTEwLwYDVQQDEygzRDAzMDBDQTBEQTk4MzI3QTNDNUNCOEMxNTZGREU3REJB Q0MzMUIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFLI5D4yfNVZ xNlHTECeQWf047tf5bi9V2Hscqxz/TdRWwNINZm+OB+vcpfWyEpTrf/JsL3hRz1o Ypittlkn6ZsyHa72fHLsqlr+ryiJS8FORzepNWhWdjkubcUxf4AJPGp0DahDgPcI t5MfNcqDdYLHbxX69dlKzZyaTDx37Hz6F6+3w2hRfCCrg817uwDIOynCCL1AoTbE 973+dcsCsZ/IshMW84QfFTuodcU6GbqPUnCydWROOjjqkuG+pFr7KRX5XSfsSAux bOzTQGQHcPSJV14/odsUAJTOcth/uw61jLu+5vAEA95r8+pcc+rQOcWWAt0jULNI wmLVYF7NGQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFD0DAMoNqYMno8XLjBVv3n26 zDGwMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM1MzkzMjMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2guPMA0GCSqGSIb3DQEBCwUAA4IBAQA1Mj9HzFsScZsqIh0qatGE VAZ3E9chRJf6QTyy9ekRWj55fcso38JuDuz64rDwbjD+BuroM+u9b0Gml17SeQLX 3hClUTluuix77mRjSs8pkeJKtWrF7TsfWxFiSGqlHyYzhjjwYUgkwtI5DEVIVN83 eHWwwdaHE/SorbdzOu4rXCR1eUOOlEhwcLeISfF/Rlzi56iKRvGGcZ3J/zHXlhaP kF7pLaNM6MFCTKS26jICjTSZmIb1izDl7ZkHEKwxGk+sO+HaWdem1GXiGIQjkeBg LptIaYlO2G4Pxky8EaZ982+LTaYFp136/0M6xrGcWEuu+V63q27AaynQr6PEcUFG -----END CERTIFICATE-----Generated at Sun Jun 29 20:03:39 2025 by rpki-client