$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa File: 323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa (raw, json) Hash identifier: dTZjjksjtL6s5wwdYiNQMxcpjbfX6tHoQ0b5nrIiHsU= Subject key identifier: 3F:44:FA:23:F8:4A:D9:DB:BD:7B:E9:E2:D2:65:64:63:C7:02:7F:B4 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1E427C084029D8C0C48F47A5F3BA87073C247EDC Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa Signing time: Mon 16 Jun 2025 08:52:21 +0000 ROA not before: Mon 16 Jun 2025 08:47:21 +0000 ROA not after: Mon 15 Jun 2026 08:52:21 +0000 asID: 212359 IP address blocks: 2602:feda:c10::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:42:7c:08:40:29:d8:c0:c4:8f:47:a5:f3:ba:87:07:3c:24:7e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:21 2025 GMT Not After : Jun 15 08:52:21 2026 GMT Subject: CN=3F44FA23F84AD9DBBD7BE9E2D2656463C7027FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:15:f7:6b:cf:1e:61:67:b0:c3:58:ee:eb: 11:a0:da:25:f7:fe:c7:2e:1b:0b:ef:0d:56:d8:33: 58:ce:39:70:3f:68:b7:90:11:14:f5:be:57:c6:c4: 9b:8a:cd:df:17:3c:40:a7:06:a0:9c:d5:a3:ec:e3: 7e:2e:6b:e0:dd:bd:0d:a1:1f:c2:9b:18:16:92:2e: e8:15:56:b4:9e:fa:11:2d:83:54:04:00:66:7a:55: 1a:95:0d:31:e9:6b:a3:90:d8:a8:b8:d4:7a:1d:44: d2:48:4b:e7:4f:9d:9f:24:43:d1:c1:fb:b1:10:da: e3:c1:75:f3:bc:58:97:17:3d:9a:3b:18:58:b1:78: d1:b7:36:72:a4:a8:2f:44:31:8c:7c:af:51:2e:93: 80:01:ab:31:7e:72:c5:85:d1:2c:08:c7:f8:cc:46: 8d:d2:d3:52:eb:71:95:3c:ef:c7:af:6b:71:c6:d9: 8b:16:7a:e7:45:e6:d9:34:5c:6a:f5:6e:6b:a2:4e: 0a:02:23:85:a0:0d:84:79:80:de:e6:fa:b5:73:e2: 10:12:ba:e9:49:4d:33:27:eb:dd:e4:29:88:25:fd: f5:6c:94:80:c5:fb:6f:ef:db:dd:0e:14:cb:75:52: dd:47:39:70:fa:20:a5:0f:8d:75:ff:fa:da:b6:37: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:44:FA:23:F8:4A:D9:DB:BD:7B:E9:E2:D2:65:64:63:C7:02:7F:B4 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c10::/44 Signature Algorithm: sha256WithRSAEncryption 17:62:6c:f1:ee:e6:88:e8:a4:14:7d:d4:8b:05:26:ca:ac:3d: d3:7c:0c:dd:93:d0:e5:95:04:a2:4f:f1:47:3d:6b:ba:c5:40: 29:ee:7c:23:37:b7:75:07:e4:17:99:20:93:63:49:bf:83:90: 67:52:2b:f2:ae:cb:d1:aa:bc:d6:61:6f:79:fc:9e:f7:d7:ef: 9d:a3:37:fb:08:9a:4a:fe:0d:16:d3:91:41:11:b2:4b:1e:f3: 93:be:85:54:54:d3:2c:6a:24:c8:2a:b1:61:fd:f3:80:a2:72: 93:32:26:e1:02:ab:a9:d9:70:a8:31:c2:9d:d3:dd:a8:35:7e: 12:8f:d2:27:07:35:20:be:08:a9:4a:04:eb:31:fe:8b:ea:92: db:46:13:97:28:2c:32:7a:78:f7:5a:70:7a:8e:63:e8:78:fa: f6:e4:50:e6:f0:2a:46:eb:5e:20:13:61:b5:07:3c:2d:e3:2b: 90:5d:ec:28:03:f1:16:e6:ad:49:3b:e0:6b:33:1e:bd:a0:cf: 4c:3b:25:da:9b:b3:12:56:f6:b9:ea:42:6a:80:03:29:59:bd: 84:4b:36:ee:8c:d0:9c:77:8a:f2:d3:80:f6:a3:70:d0:12:ea: 1b:96:62:f5:18:df:4e:57:fb:41:cc:49:d1:1f:d4:f2:74:43: 6a:bc:51:63 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUHkJ8CEAp2MDEj0el87qHBzwkftwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIxWhcNMjYwNjE1MDg1MjIx WjAzMTEwLwYDVQQDEygzRjQ0RkEyM0Y4NEFEOURCQkQ3QkU5RTJEMjY1NjQ2M0M3 MDI3RkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE8V92vPHmFn sMNY7usRoNol9/7HLhsL7w1W2DNYzjlwP2i3kBEU9b5XxsSbis3fFzxApwagnNWj 7ON+Lmvg3b0NoR/CmxgWki7oFVa0nvoRLYNUBABmelUalQ0x6WujkNiouNR6HUTS SEvnT52fJEPRwfuxENrjwXXzvFiXFz2aOxhYsXjRtzZypKgvRDGMfK9RLpOAAasx fnLFhdEsCMf4zEaN0tNS63GVPO/Hr2txxtmLFnrnRebZNFxq9W5rok4KAiOFoA2E eYDe5vq1c+IQErrpSU0zJ+vd5CmIJf31bJSAxftv79vdDhTLdVLdRzlw+iClD411 //ratjd4/wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFD9E+iP4StnbvXvp4tJlZGPH An+0MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzMzNTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gwQMA0GCSqGSIb3DQEBCwUAA4IBAQAXYmzx7uaI6KQUfdSLBSbK rD3TfAzdk9DllQSiT/FHPWu6xUAp7nwjN7d1B+QXmSCTY0m/g5BnUivyrsvRqrzW YW95/J731++dozf7CJpK/g0W05FBEbJLHvOTvoVUVNMsaiTIKrFh/fOAonKTMibh Aqup2XCoMcKd092oNX4Sj9InBzUgvgipSgTrMf6L6pLbRhOXKCwyenj3WnB6jmPo ePr25FDm8CpG614gE2G1Bzwt4yuQXewoA/EW5q1JO+BrMx69oM9MOyXam7MSVva5 6kJqgAMpWb2ESzbujNCcd4ry04D2o3DQEuoblmL1GN9OV/tBzEnRH9TydENqvFFj -----END CERTIFICATE-----Generated at Mon Jun 30 00:23:38 2025 by rpki-client