$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa File: 323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa (raw, json) Hash identifier: ld9fp5OTbg/dLdTk+yi6PB8Jf01JvCYYQEYu2LjqiFs= Subject key identifier: CA:F5:12:FD:76:AB:48:32:C9:D8:75:E0:80:8B:C8:64:E4:8F:AA:BE Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 192CB0F1BFACF11EC17E02DFB385DA68B00523C6 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa Signing time: Mon 16 Jun 2025 08:52:24 +0000 ROA not before: Mon 16 Jun 2025 08:47:24 +0000 ROA not after: Mon 15 Jun 2026 08:52:24 +0000 asID: 212580 IP address blocks: 2602:feda:c40::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2c:b0:f1:bf:ac:f1:1e:c1:7e:02:df:b3:85:da:68:b0:05:23:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:24 2025 GMT Not After : Jun 15 08:52:24 2026 GMT Subject: CN=CAF512FD76AB4832C9D875E0808BC864E48FAABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:3e:a6:6d:dd:42:e7:1e:6c:0c:24:fb:39: d7:eb:d8:fb:b9:74:20:8d:4d:17:2a:17:63:a4:36: 09:c3:be:7b:83:e3:88:22:df:65:c4:2b:97:3a:93: b8:43:b5:87:80:be:33:f1:b1:da:08:41:46:2c:a0: 62:0b:83:75:4e:92:4f:f8:d5:9d:60:b8:3a:15:12: 7c:32:b5:1f:e0:57:35:03:a5:d7:a0:26:c5:b6:56: c5:57:0c:3b:e6:c9:8b:17:27:80:e0:4e:33:d2:68: 5c:7d:7c:e1:b4:98:db:78:85:d0:a5:7b:ea:82:c1: 3d:8d:24:49:ef:af:7c:10:03:53:42:08:29:24:b8: 05:b9:13:77:ef:d0:c2:99:d4:dd:88:65:06:52:d3: 33:41:2b:65:ff:42:49:01:36:5b:f8:b3:e1:12:99: 56:d0:29:cd:80:89:b8:16:cf:53:da:6d:5e:fd:f6: 32:a6:e0:75:85:bf:f6:3a:e6:f8:64:3b:6e:22:fb: 18:f6:14:53:26:20:00:4c:13:35:34:d1:da:5e:da: 71:5e:d1:f3:58:0e:b6:87:42:0d:2d:cd:84:d7:ce: 80:e5:a7:4b:8e:a9:dc:e0:72:2c:a8:47:ab:06:f5: c8:71:8b:86:36:61:d4:a7:d7:a7:f2:c5:4f:cd:68: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F5:12:FD:76:AB:48:32:C9:D8:75:E0:80:8B:C8:64:E4:8F:AA:BE X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c40::/44 Signature Algorithm: sha256WithRSAEncryption 01:6c:9f:3f:00:61:c8:71:21:97:60:bc:8f:ea:16:f0:0d:09: ec:46:95:8a:15:bc:81:05:d5:41:e7:66:b7:29:65:62:3d:d6: 4f:72:f5:fa:66:54:83:6c:67:eb:b1:45:5d:c6:64:e2:1e:5a: c5:39:31:1d:ba:07:08:7a:60:ba:3f:3b:96:f0:eb:c0:74:57: 10:96:bb:23:b0:f0:7e:ed:e1:1c:19:73:3d:49:9f:3f:a3:09: c9:67:29:9e:2e:77:99:85:cd:ed:1d:ac:24:4e:2f:31:b1:b8: 2a:30:b9:fb:f0:5b:ca:9c:21:2f:91:ba:93:0f:34:74:7a:8a: 01:3f:bc:d6:9d:8a:ad:3a:fd:9f:92:3f:2f:61:5b:10:e6:a3: d7:25:fa:5c:e3:14:84:ab:8e:20:92:ca:ce:c9:67:5a:1c:48: 29:5f:a0:0f:23:20:3f:27:2b:5d:4e:64:cb:5c:fe:c5:e6:f5: 01:be:c8:80:2f:be:6d:6c:4e:8e:b8:1a:b5:04:70:85:f8:ef: 7e:07:27:64:42:81:49:ba:3e:39:ca:36:71:c5:db:44:32:74: 2b:e2:cf:ed:2c:88:73:04:44:8c:19:ea:9c:d3:e1:9f:71:f8: 68:fd:32:a1:fe:a1:a8:b5:97:26:d5:8a:cc:53:2f:a2:7a:b3: 2b:49:99:aa -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUGSyw8b+s8R7BfgLfs4XaaLAFI8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI0WhcNMjYwNjE1MDg1MjI0 WjAzMTEwLwYDVQQDEyhDQUY1MTJGRDc2QUI0ODMyQzlEODc1RTA4MDhCQzg2NEU0 OEZBQUJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE0+pm3dQuce bAwk+znX69j7uXQgjU0XKhdjpDYJw757g+OIIt9lxCuXOpO4Q7WHgL4z8bHaCEFG LKBiC4N1TpJP+NWdYLg6FRJ8MrUf4Fc1A6XXoCbFtlbFVww75smLFyeA4E4z0mhc fXzhtJjbeIXQpXvqgsE9jSRJ7698EANTQggpJLgFuRN379DCmdTdiGUGUtMzQStl /0JJATZb+LPhEplW0CnNgIm4Fs9T2m1e/fYypuB1hb/2Oub4ZDtuIvsY9hRTJiAA TBM1NNHaXtpxXtHzWA62h0INLc2E186A5adLjqnc4HIsqEerBvXIcYuGNmHUp9en 8sVPzWg5qwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMr1Ev12q0gyydh14ICLyGTk j6q+MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzUzODMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxAMA0GCSqGSIb3DQEBCwUAA4IBAQABbJ8/AGHIcSGXYLyP6hbw DQnsRpWKFbyBBdVB52a3KWViPdZPcvX6ZlSDbGfrsUVdxmTiHlrFOTEdugcIemC6 PzuW8OvAdFcQlrsjsPB+7eEcGXM9SZ8/ownJZymeLneZhc3tHawkTi8xsbgqMLn7 8FvKnCEvkbqTDzR0eooBP7zWnYqtOv2fkj8vYVsQ5qPXJfpc4xSEq44gksrOyWda HEgpX6APIyA/JytdTmTLXP7F5vUBvsiAL75tbE6OuBq1BHCF+O9+BydkQoFJuj45 yjZxxdtEMnQr4s/tLIhzBESMGeqc0+Gfcfho/TKh/qGotZcm1YrMUy+ierMrSZmq -----END CERTIFICATE-----Generated at Thu Jul 3 00:46:55 2025 by rpki-client