$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa File: 323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa (raw, json) Hash identifier: tKYKb6mee5D+PNAW6NoOqNxPcNCC9agzZyOhxMIgOK0= Subject key identifier: 36:41:4A:DC:51:74:14:51:61:8A:EC:2D:50:A3:0C:DF:48:34:E8:5A Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 66F2847086D55812EFBF4193D4263E60947CD037 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa Signing time: Mon 16 Jun 2025 08:52:32 +0000 ROA not before: Mon 16 Jun 2025 08:47:32 +0000 ROA not after: Mon 15 Jun 2026 08:52:32 +0000 asID: 142641 IP address blocks: 2602:feda:de0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f2:84:70:86:d5:58:12:ef:bf:41:93:d4:26:3e:60:94:7c:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:32 2025 GMT Not After : Jun 15 08:52:32 2026 GMT Subject: CN=36414ADC51741451618AEC2D50A30CDF4834E85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:e7:31:0e:62:b7:63:30:04:84:4e:72:a7: 24:f8:a0:0b:66:a1:04:d2:96:37:47:37:bb:93:0c: 7e:3d:d2:45:72:ee:0f:14:40:e6:f1:e2:19:9c:a5: 62:fe:c7:60:89:d4:2c:51:41:61:01:b6:cf:7f:90: ef:07:b5:45:18:3f:ba:12:31:03:2e:cf:96:45:f2: e2:39:2a:da:c9:1e:58:34:31:da:85:03:5b:8f:d5: 21:d9:05:fd:97:2a:40:74:50:21:5d:06:ef:57:92: f2:bf:3e:4d:81:30:a6:57:95:2b:92:16:ae:61:8a: 17:bf:65:f8:0b:fc:2a:ab:ac:07:d2:4d:a9:d4:73: f3:fd:4b:c4:d6:5c:32:11:1f:2f:79:57:4d:49:62: 81:22:7b:42:47:2a:ea:2c:72:c6:47:8d:71:56:60: 1e:35:a2:9c:be:f7:c4:25:90:b5:cb:e9:ec:f3:1e: 75:d0:ed:06:93:50:69:d7:4b:75:68:7b:24:b4:e7: 5f:b1:67:5f:8f:fb:01:17:5e:df:4d:16:06:cf:05: 62:68:cc:5a:f7:1a:dd:b2:82:0e:b3:70:3c:d6:af: 7c:6d:64:ba:8f:22:98:86:8f:c2:cb:40:0a:18:2e: 73:0f:02:93:85:db:4a:55:ff:9f:fa:48:6e:ac:50: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:4A:DC:51:74:14:51:61:8A:EC:2D:50:A3:0C:DF:48:34:E8:5A X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:de0::/44 Signature Algorithm: sha256WithRSAEncryption 81:11:e7:f8:ca:69:11:c5:03:03:db:b4:53:fd:5b:d4:b7:d8: ba:e8:f7:fc:4e:a1:20:15:9d:f2:ba:fe:64:7d:86:70:47:2d: 36:ed:e3:2e:32:51:44:6f:ea:3c:d9:08:b1:06:10:ca:0d:ee: 59:1a:84:17:89:ed:d3:16:0f:87:03:ab:4c:4b:81:8b:4a:61: 74:d2:dd:a1:46:12:3e:7f:4a:e5:93:ff:67:a4:af:91:ec:ea: a1:4c:0f:73:23:a9:3b:24:66:c0:72:62:e0:a0:ff:64:94:0b: af:61:6a:1d:e0:a7:13:6d:3e:73:c0:00:3e:48:b5:05:08:e4: 16:1f:68:60:64:ad:48:f9:ca:59:52:ab:cb:e5:f7:a8:90:00: 24:e5:70:90:d3:ed:3a:24:8c:8f:1f:ba:e2:7c:b2:53:e7:98: fb:54:41:19:1a:cc:1a:e9:bf:55:0f:62:53:24:81:54:a6:f3: 01:f0:7b:f3:1b:37:81:18:88:99:8f:82:43:5d:39:5a:bb:aa: 82:3d:a1:b1:f6:5b:64:44:93:4e:73:6b:6e:06:d6:aa:0a:13: 79:4a:27:18:ef:fa:49:e4:94:cf:83:fb:48:72:a9:36:48:5a: 57:6b:da:ac:e8:93:1e:60:28:7c:a5:dc:db:52:fb:55:d2:4b: 98:de:4e:e0 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUZvKEcIbVWBLvv0GT1CY+YJR80DcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMyWhcNMjYwNjE1MDg1MjMy WjAzMTEwLwYDVQQDEygzNjQxNEFEQzUxNzQxNDUxNjE4QUVDMkQ1MEEzMENERjQ4 MzRFODVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwHnMQ5it2Mw BIROcqck+KALZqEE0pY3Rze7kwx+PdJFcu4PFEDm8eIZnKVi/sdgidQsUUFhAbbP f5DvB7VFGD+6EjEDLs+WRfLiOSrayR5YNDHahQNbj9Uh2QX9lypAdFAhXQbvV5Ly vz5NgTCmV5UrkhauYYoXv2X4C/wqq6wH0k2p1HPz/UvE1lwyER8veVdNSWKBIntC RyrqLHLGR41xVmAeNaKcvvfEJZC1y+ns8x510O0Gk1Bp10t1aHsktOdfsWdfj/sB F17fTRYGzwViaMxa9xrdsoIOs3A81q98bWS6jyKYho/Cy0AKGC5zDwKThdtKVf+f +khurFAfXQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDZBStxRdBRRYYrsLVCjDN9I NOhaMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQ2NTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzYzNDMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g3gMA0GCSqGSIb3DQEBCwUAA4IBAQCBEef4ymkRxQMD27RT/VvU t9i66Pf8TqEgFZ3yuv5kfYZwRy027eMuMlFEb+o82QixBhDKDe5ZGoQXie3TFg+H A6tMS4GLSmF00t2hRhI+f0rlk/9npK+R7OqhTA9zI6k7JGbAcmLgoP9klAuvYWod 4KcTbT5zwAA+SLUFCOQWH2hgZK1I+cpZUqvL5feokAAk5XCQ0+06JIyPH7rifLJT 55j7VEEZGswa6b9VD2JTJIFUpvMB8HvzGzeBGIiZj4JDXTlau6qCPaGx9ltkRJNO c2tuBtaqChN5SicY7/pJ5JTPg/tIcqk2SFpXa9qs6JMeYCh8pdzbUvtV0kuY3k7g -----END CERTIFICATE-----Generated at Tue Jul 1 02:33:59 2025 by rpki-client