$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa File: 323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa (raw, json) Hash identifier: VG2XKw6no3JkrbGAXAKKOQXnvjNhk4iJPJWY7pMMTFk= Subject key identifier: C4:DC:9F:1B:F6:F9:09:4B:EA:DF:A2:93:EF:8F:7C:DE:91:CD:B4:C7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7B079B23F3A391A94A8CADEDCAD2FCDBEFDD1DAF Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 212279 IP address blocks: 2602:feda:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:07:9b:23:f3:a3:91:a9:4a:8c:ad:ed:ca:d2:fc:db:ef:dd:1d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=C4DC9F1BF6F9094BEADFA293EF8F7CDE91CDB4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:f9:09:5c:20:81:82:06:a1:c9:fa:cb:02: 66:fb:77:8d:e8:6d:c1:3a:01:83:ff:43:a4:f4:23: fd:49:e5:2e:2f:f6:db:f8:e9:26:2b:53:48:c2:54: 88:6e:54:7f:c3:f0:78:33:f7:da:81:8a:51:79:eb: ad:5a:dd:8c:b7:22:55:c3:37:dd:b1:0a:20:67:8b: 10:c7:52:66:22:df:fd:a7:71:65:f9:c1:d5:29:0b: 48:e1:a7:01:42:8c:1a:b4:a6:7b:87:21:53:ab:f1: 34:1d:8c:38:c6:cb:ea:01:39:65:28:a8:eb:b8:36: 06:11:fc:17:cf:f4:cd:fc:14:5b:66:24:4e:61:8d: 73:d6:43:cb:a0:73:67:06:c3:18:b4:b1:e2:29:b6: ac:5d:37:a8:73:88:17:d6:d4:c4:8d:58:f9:ee:65: c1:8a:39:e0:25:83:28:92:2c:92:02:99:f7:56:e6: 0b:a3:8b:1f:1a:b5:83:1d:41:7d:96:01:9c:71:67: c0:8a:8a:b6:78:dc:2a:d2:2e:21:82:48:e1:7c:4b: 6a:53:cf:cd:c5:28:25:ae:46:3d:66:1c:6a:06:d4: 83:57:05:20:f2:0c:09:97:fd:2b:79:27:10:27:46: f4:fb:03:fe:4e:f4:29:94:bb:37:fd:a9:d1:4a:35: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DC:9F:1B:F6:F9:09:4B:EA:DF:A2:93:EF:8F:7C:DE:91:CD:B4:C7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c50::/44 Signature Algorithm: sha256WithRSAEncryption c3:4d:c4:d9:24:9e:8d:78:a3:69:3e:42:6d:52:a1:5f:a7:94: b0:77:0a:ce:2e:03:b3:b2:39:f0:0f:18:f9:cf:12:58:7e:31: 33:ac:41:68:7c:4e:6d:6c:9a:be:ac:f7:df:2d:34:4e:b0:1b: c8:bc:13:9d:8e:ec:61:08:70:a4:96:08:76:94:b5:99:ee:a0: 06:09:51:f9:b8:a3:1d:8e:de:b2:3e:35:de:86:28:d2:d7:86: 6f:85:11:4f:43:cc:33:cd:31:e2:44:c0:d3:d3:c7:f7:f4:cf: 17:3c:65:19:6b:7a:dd:2e:a5:d6:91:d6:46:d3:02:f4:47:8d: 84:d8:35:b2:78:65:8b:7b:5a:9d:88:04:c7:8e:4a:99:3c:fa: 04:2e:f2:b7:55:8e:99:f2:41:0e:cc:09:32:9f:4d:95:f0:3d: 7e:a9:7a:f4:d8:67:d8:53:b2:10:de:d0:9e:e4:07:6f:b7:00: 31:c7:84:f7:3c:43:d8:3e:e4:2e:96:3b:b8:37:f2:b1:ec:45: 16:00:41:3b:7a:64:07:a6:11:04:6e:85:84:87:15:23:da:71: 6a:51:ce:ce:84:61:60:d7:69:91:b7:d5:b5:15:e2:68:75:39: b9:35:e0:79:80:1e:b8:d2:41:fc:d3:b0:79:10:81:68:4c:52: 6d:31:60:c5 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUewebI/OjkalKjK3tytL82+/dHa8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyhDNERDOUYxQkY2RjkwOTRCRUFERkEyOTNFRjhGN0NERTkx Q0RCNEM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcv5CVwggYIG ocn6ywJm+3eN6G3BOgGD/0Ok9CP9SeUuL/bb+OkmK1NIwlSIblR/w/B4M/fagYpR eeutWt2MtyJVwzfdsQogZ4sQx1JmIt/9p3Fl+cHVKQtI4acBQowatKZ7hyFTq/E0 HYw4xsvqATllKKjruDYGEfwXz/TN/BRbZiROYY1z1kPLoHNnBsMYtLHiKbasXTeo c4gX1tTEjVj57mXBijngJYMokiySApn3VuYLo4sfGrWDHUF9lgGccWfAioq2eNwq 0i4hgkjhfEtqU8/NxSglrkY9ZhxqBtSDVwUg8gwJl/0reScQJ0b0+wP+TvQplLs3 /anRSjUppwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMTcnxv2+QlL6t+ik++PfN6R zbTHMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzIzNzM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxQMA0GCSqGSIb3DQEBCwUAA4IBAQDDTcTZJJ6NeKNpPkJtUqFf p5SwdwrOLgOzsjnwDxj5zxJYfjEzrEFofE5tbJq+rPffLTROsBvIvBOdjuxhCHCk lgh2lLWZ7qAGCVH5uKMdjt6yPjXehijS14ZvhRFPQ8wzzTHiRMDT08f39M8XPGUZ a3rdLqXWkdZG0wL0R42E2DWyeGWLe1qdiATHjkqZPPoELvK3VY6Z8kEOzAkyn02V 8D1+qXr02GfYU7IQ3tCe5AdvtwAxx4T3PEPYPuQulju4N/Kx7EUWAEE7emQHphEE boWEhxUj2nFqUc7OhGFg12mRt9W1FeJodTm5NeB5gB640kH807B5EIFoTFJtMWDF -----END CERTIFICATE-----Generated at Mon Jun 30 03:29:20 2025 by rpki-client