$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa File: 323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa (raw, json) Hash identifier: 5CgIyEITlmN1aMtSmeeTLRCGH5QqGWOx8oN+94AAt7o= Subject key identifier: C1:2A:5C:91:8E:1F:AA:70:A8:4B:49:CD:E1:F9:C5:F3:02:D9:BD:EF Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 503394CE8EE1A69CF1E284851445E0D092B131E3 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 7721 IP address blocks: 2602:feda:be0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:33:94:ce:8e:e1:a6:9c:f1:e2:84:85:14:45:e0:d0:92:b1:31:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=C12A5C918E1FAA70A84B49CDE1F9C5F302D9BDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:54:da:62:9f:ba:90:29:97:35:09:b5:2a: 5d:cb:aa:16:40:0d:3b:d5:c7:5c:ab:87:d1:06:7a: 6c:54:3a:2e:bb:16:a9:0b:58:5e:75:9f:95:5f:ae: 31:88:18:b1:68:05:6b:c4:2c:49:15:3d:44:11:11: 83:29:3f:b0:65:e5:6b:a5:49:f7:d0:05:5a:07:4f: fc:08:71:9d:ed:bd:87:16:63:03:12:9b:25:43:7b: 20:6c:1d:f9:72:86:76:bd:cb:ef:33:c9:2b:e9:97: ca:d8:6f:c9:3f:d8:f8:ac:63:05:23:9d:06:65:81: bb:c0:5c:a4:d4:e1:e8:45:1a:2d:62:eb:c5:53:e8: a6:0b:85:1c:69:d8:a0:6c:72:ce:a4:9a:9e:c9:f3: 08:c0:e9:0c:58:9b:96:39:0f:61:71:d4:11:2f:71: 7a:1c:c5:ed:7b:ab:c3:0e:f6:34:66:8f:89:04:f3: 06:96:8c:ae:59:9a:29:ef:a2:f8:52:a1:13:18:65: f0:98:17:3d:1a:94:be:9f:19:35:2b:fb:64:12:3f: e1:89:91:32:c2:76:ef:45:8f:99:c8:89:43:40:1e: 94:e0:80:e4:b8:5a:ae:5c:0f:e5:0e:15:41:39:54: a8:cd:3c:fc:94:03:c6:81:ec:9a:72:f7:50:8c:d3: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:5C:91:8E:1F:AA:70:A8:4B:49:CD:E1:F9:C5:F3:02:D9:BD:EF X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:be0::/44 Signature Algorithm: sha256WithRSAEncryption 55:42:f1:db:47:7f:e5:bf:a0:dd:1d:3e:47:d7:2f:80:b3:06: 61:1d:2d:36:61:89:c6:e9:8e:27:1d:3b:bd:7c:3a:b7:17:7f: f2:b0:29:98:2c:70:7e:37:94:d3:2c:8b:05:c4:20:c3:d2:e3: 59:ac:3d:17:53:f1:f0:37:b4:13:fd:54:ee:5c:18:b7:a6:c4: f1:0d:d3:db:e6:27:bd:7d:35:d0:14:c8:28:5a:8f:c9:64:49: 08:0a:a5:d0:bf:7b:9b:bf:63:32:89:7c:a5:33:92:97:50:0d: 1c:cc:2c:d3:5d:ac:24:a1:fd:89:3b:3f:c0:74:a8:a3:63:af: 8c:f7:d6:78:25:76:6d:ba:1d:75:05:ed:32:a5:e5:3a:cc:3e: 4d:f5:0a:e6:2b:2d:f2:43:5a:56:1e:e6:bf:87:d7:16:29:cb: c2:15:c1:41:f1:ec:ab:f9:18:da:43:c4:69:40:74:59:01:4f: b6:6d:ae:33:c4:92:d8:eb:2c:48:74:2c:27:5c:4d:41:40:5c: f7:14:89:c4:48:e5:83:0c:5f:64:de:90:ee:89:78:d6:73:90: 06:9d:36:6b:24:81:4c:18:64:da:e8:92:7c:fd:6c:ce:f9:8a: 36:31:ae:20:d3:96:dd:02:90:26:50:60:42:ff:10:a9:e9:d2: 30:2c:8a:b9 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUUDOUzo7hppzx4oSFFEXg0JKxMeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyhDMTJBNUM5MThFMUZBQTcwQTg0QjQ5Q0RFMUY5QzVGMzAy RDlCREVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr9U2mKfupAp lzUJtSpdy6oWQA071cdcq4fRBnpsVDouuxapC1hedZ+VX64xiBixaAVrxCxJFT1E ERGDKT+wZeVrpUn30AVaB0/8CHGd7b2HFmMDEpslQ3sgbB35coZ2vcvvM8kr6ZfK 2G/JP9j4rGMFI50GZYG7wFyk1OHoRRotYuvFU+imC4UcadigbHLOpJqeyfMIwOkM WJuWOQ9hcdQRL3F6HMXte6vDDvY0Zo+JBPMGloyuWZop76L4UqETGGXwmBc9GpS+ nxk1K/tkEj/hiZEywnbvRY+ZyIlDQB6U4IDkuFquXA/lDhVBOVSozTz8lAPGgeya cvdQjNOx0QIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFMEqXJGOH6pwqEtJzeH5xfMC 2b3vMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MjY1MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNzM3MzIzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH BCYC/toL4DANBgkqhkiG9w0BAQsFAAOCAQEAVULx20d/5b+g3R0+R9cvgLMGYR0t NmGJxumOJx07vXw6txd/8rApmCxwfjeU0yyLBcQgw9LjWaw9F1Px8De0E/1U7lwY t6bE8Q3T2+YnvX010BTIKFqPyWRJCAql0L97m79jMol8pTOSl1ANHMws012sJKH9 iTs/wHSoo2OvjPfWeCV2bboddQXtMqXlOsw+TfUK5ist8kNaVh7mv4fXFinLwhXB QfHsq/kY2kPEaUB0WQFPtm2uM8SS2OssSHQsJ1xNQUBc9xSJxEjlgwxfZN6Q7ol4 1nOQBp02aySBTBhk2uiSfP1szvmKNjGuINOW3QKQJlBgQv8QqenSMCyKuQ== -----END CERTIFICATE-----Generated at Mon Jun 30 09:04:29 2025 by rpki-client