$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa File: 323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa (raw, json) Hash identifier: zeFT0UjEAkCu8fms2oF9fcVg7mnS5mhql+F2bH7ggck= Subject key identifier: 0C:CC:11:82:86:8D:88:D1:2A:C3:6A:9C:C5:11:65:4C:F5:1D:A0:CE Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 149AE2121254D5DD7C6875B97B52942E062FB294 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa Signing time: Mon 16 Jun 2025 08:52:29 +0000 ROA not before: Mon 16 Jun 2025 08:47:29 +0000 ROA not after: Mon 15 Jun 2026 08:52:29 +0000 asID: 209294 IP address blocks: 2602:feda:c30::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 13:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9a:e2:12:12:54:d5:dd:7c:68:75:b9:7b:52:94:2e:06:2f:b2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:29 2025 GMT Not After : Jun 15 08:52:29 2026 GMT Subject: CN=0CCC1182868D88D12AC36A9CC511654CF51DA0CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:b4:3f:b0:1d:42:54:74:0d:cd:79:34:ac: e8:98:7e:1b:6a:71:1f:34:de:d9:4b:8e:88:5f:aa: 6e:ea:c3:ad:83:35:b5:d6:bf:ff:ca:d0:fb:e0:ba: d9:7a:47:5c:f3:7e:c9:8a:15:5e:bc:83:34:1f:e9: 02:59:71:74:f6:9d:ae:ef:b9:0c:4f:36:a3:4b:d5: fb:dc:18:03:f2:d9:10:a5:d4:76:16:1a:af:4a:27: 9b:26:97:7f:6e:fe:c3:07:c7:73:b5:f7:ef:5b:2a: ed:82:7e:7b:48:bb:8c:7f:0e:a9:c9:3a:c0:f3:88: 6c:58:90:80:77:49:cf:a2:f4:e9:cf:d8:22:a3:22: e9:8c:51:6c:39:0c:a4:26:96:55:30:53:24:6b:9f: 4f:86:d3:6e:53:47:52:f0:2f:d6:aa:87:91:fa:74: cd:9e:77:fa:bf:d5:2d:82:4f:2c:76:a1:e0:2c:bb: a1:3d:c1:5e:66:ee:b3:31:81:1d:1b:96:e5:e0:c4: e4:d2:d4:6e:83:16:a6:e5:fe:38:55:d3:fc:92:8b: 78:36:b8:e4:e9:71:52:bc:4b:ac:0e:d0:2a:04:32: 85:16:e2:d3:ff:e4:46:94:9e:73:33:df:05:43:b9: a9:3b:04:de:dd:e2:0e:c4:cc:6f:e1:51:5c:b4:32: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CC:11:82:86:8D:88:D1:2A:C3:6A:9C:C5:11:65:4C:F5:1D:A0:CE X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c30::/44 Signature Algorithm: sha256WithRSAEncryption 92:bd:64:17:8c:69:52:df:a3:c9:cb:16:1b:10:94:3f:ad:4d: c8:6d:bc:86:f4:6a:b5:e6:cc:9b:92:ba:d8:97:8d:58:21:f8: 55:a9:d5:a3:6b:7a:07:41:bf:a3:5d:81:b5:82:bf:c6:8d:fe: af:a0:bc:50:c0:4a:c1:63:7a:93:b9:39:e2:60:24:12:49:82: 61:2d:24:da:d6:fe:ff:f0:ae:3c:07:67:da:f5:57:77:49:00: 8b:d2:fb:d5:26:35:b3:1e:35:98:01:a9:f6:1c:c6:7a:3d:a0: 5d:05:9b:c5:0e:59:37:3a:b0:5d:d4:27:95:ff:38:6f:1a:be: 20:41:cc:27:2e:c5:b3:07:ab:37:a5:f7:dc:3e:20:54:f3:6d: 0d:4a:7a:ed:1a:e7:af:b8:60:1d:a2:8e:07:ac:8d:ce:25:b0: ed:b9:31:3a:9c:0b:e4:ac:fe:5e:d7:98:3c:af:95:df:96:0b: 0d:8a:43:b6:aa:80:15:42:39:55:9a:da:b0:f1:4e:b6:db:cb: 40:ab:d4:d8:2c:8d:4b:5e:56:2b:7f:8e:e0:d5:cd:67:b3:e1: 66:5d:99:a7:58:a5:8e:48:e9:01:6f:b7:7c:62:f0:6f:00:76: 98:bc:84:ca:c7:92:5f:ef:59:5d:73:05:73:82:3d:52:bb:d6: a1:6f:08:c9 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUFJriEhJU1d18aHW5e1KULgYvspQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI5WhcNMjYwNjE1MDg1MjI5 WjAzMTEwLwYDVQQDEygwQ0NDMTE4Mjg2OEQ4OEQxMkFDMzZBOUNDNTExNjU0Q0Y1 MURBMENFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u60P7AdQlR0 Dc15NKzomH4banEfNN7ZS46IX6pu6sOtgzW11r//ytD74LrZekdc837JihVevIM0 H+kCWXF09p2u77kMTzajS9X73BgD8tkQpdR2FhqvSiebJpd/bv7DB8dztffvWyrt gn57SLuMfw6pyTrA84hsWJCAd0nPovTpz9gioyLpjFFsOQykJpZVMFMka59PhtNu U0dS8C/WqoeR+nTNnnf6v9Utgk8sdqHgLLuhPcFeZu6zMYEdG5bl4MTk0tRugxam 5f44VdP8kot4Nrjk6XFSvEusDtAqBDKFFuLT/+RGlJ5zM98FQ7mpOwTe3eIOxMxv 4VFctDJVQQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAzMEYKGjYjRKsNqnMURZUz1 HaDOMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM5MzIzOTM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gwwMA0GCSqGSIb3DQEBCwUAA4IBAQCSvWQXjGlS36PJyxYbEJQ/ rU3IbbyG9Gq15sybkrrYl41YIfhVqdWja3oHQb+jXYG1gr/Gjf6voLxQwErBY3qT uTniYCQSSYJhLSTa1v7/8K48B2fa9Vd3SQCL0vvVJjWzHjWYAan2HMZ6PaBdBZvF Dlk3OrBd1CeV/zhvGr4gQcwnLsWzB6s3pffcPiBU820NSnrtGuevuGAdoo4HrI3O JbDtuTE6nAvkrP5e15g8r5XflgsNikO2qoAVQjlVmtqw8U6228tAq9TYLI1LXlYr f47g1c1ns+FmXZmnWKWOSOkBb7d8YvBvAHaYvITKx5Jf71ldcwVzgj1Su9ahbwjJ -----END CERTIFICATE-----Generated at Tue Jul 1 20:49:52 2025 by rpki-client