$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa File: 323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa (raw, json) Hash identifier: Ym2G82/zFdHY2XOi0Mu0hb7qjFHdKn0NtHKs39kWESU= Subject key identifier: 1E:90:32:A1:20:49:92:98:7C:F0:06:9D:DA:F9:45:3A:22:19:4E:27 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 702A04D1CA5F03DD9C178923B939D24D6BBB4C7D Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa Signing time: Mon 16 Jun 2025 08:52:30 +0000 ROA not before: Mon 16 Jun 2025 08:47:30 +0000 ROA not after: Mon 15 Jun 2026 08:52:30 +0000 asID: 205058 IP address blocks: 2602:feda:f3::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2a:04:d1:ca:5f:03:dd:9c:17:89:23:b9:39:d2:4d:6b:bb:4c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:30 2025 GMT Not After : Jun 15 08:52:30 2026 GMT Subject: CN=1E9032A1204992987CF0069DDAF9453A22194E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:f1:72:d6:a3:2e:3e:c5:d7:4a:63:87:d4: 15:03:8e:72:21:b0:73:2b:64:8a:b5:f1:7d:0a:10: 81:5e:33:77:3b:24:fe:be:be:4b:75:9c:b2:d4:02: 66:e4:84:1f:7e:87:2e:cb:fb:85:00:29:2c:22:ea: b0:d5:5d:a9:cf:4b:89:a3:78:2d:c2:fa:41:fd:5a: e4:8a:86:18:5b:76:77:48:2f:66:0f:34:9e:58:d9: 67:cc:df:b1:fd:c6:67:d6:ed:d7:fe:47:ed:c0:72: cb:ca:36:e5:40:ed:44:25:1b:ee:d2:ff:ac:2c:1a: 20:f6:38:f0:8f:8a:e8:be:d6:ae:0c:15:bb:ef:2c: f4:1e:e1:1a:db:f4:66:c9:94:a2:45:a6:ae:88:23: 26:4c:6b:87:2a:4e:cf:1b:68:81:13:c9:34:ed:79: a2:30:c7:41:d9:d9:91:0b:04:33:f9:30:d8:17:73: e4:99:b2:f7:60:96:b5:8c:6f:f9:df:6b:1f:32:c5: 95:7c:7c:02:82:3f:87:ec:11:5c:ee:98:39:66:03: 3d:39:7b:10:40:48:43:8f:db:3f:5c:07:54:d2:71: fd:87:00:e6:a9:6a:04:7d:dc:28:6d:f5:e7:d9:b3: ec:0a:3c:d6:a2:17:9c:21:6e:8a:f0:bb:b7:11:a7: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:90:32:A1:20:49:92:98:7C:F0:06:9D:DA:F9:45:3A:22:19:4E:27 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f3::/48 Signature Algorithm: sha256WithRSAEncryption b1:85:9a:c8:a1:99:73:8a:c7:75:1a:03:23:e3:50:f2:55:95: b6:72:79:3d:e5:30:d7:2e:25:36:13:9d:76:b3:fa:bf:a6:d6: 39:8b:42:05:cd:e3:c6:d4:83:c9:18:ad:ac:f6:fe:ef:1b:73: f8:94:f4:16:83:0c:65:4b:40:eb:5d:71:96:4a:20:32:34:5f: 65:a8:d1:85:72:4d:8e:21:b9:98:01:59:04:89:8c:df:99:40: 73:87:76:d6:e8:d0:42:86:7c:a1:c4:ab:7a:2f:03:1d:eb:f3: dc:20:3c:c4:e1:b2:ac:aa:4c:9a:59:ab:68:dc:f2:86:4d:5d: d6:67:90:b9:3f:d0:f6:ae:7d:26:e3:6c:0a:ce:0c:f8:37:f0: 7a:cb:b4:9e:29:24:0a:17:1d:9d:26:79:4d:59:42:94:c9:5b: 6a:8c:09:94:29:0a:ae:17:e1:39:0a:45:e4:58:8f:84:bd:63: 7c:27:13:34:ef:70:f2:be:a2:04:89:f2:e8:89:51:3e:ae:3e: 23:56:8b:72:b8:5a:68:25:85:2d:4f:16:df:d5:7e:ba:5c:d0: ce:64:10:4f:8b:5e:ad:93:21:0b:15:d7:15:2e:46:d6:2f:7e: a6:82:00:7f:ed:36:d7:7a:ef:de:c9:95:d0:71:d3:7f:d4:00: 49:ab:a0:a2 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUcCoE0cpfA92cF4kjuTnSTWu7TH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw WjAzMTEwLwYDVQQDEygxRTkwMzJBMTIwNDk5Mjk4N0NGMDA2OUREQUY5NDUzQTIy MTk0RTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMDxctajLj7F 10pjh9QVA45yIbBzK2SKtfF9ChCBXjN3OyT+vr5LdZyy1AJm5IQffocuy/uFACks Iuqw1V2pz0uJo3gtwvpB/VrkioYYW3Z3SC9mDzSeWNlnzN+x/cZn1u3X/kftwHLL yjblQO1EJRvu0v+sLBog9jjwj4rovtauDBW77yz0HuEa2/RmyZSiRaauiCMmTGuH Kk7PG2iBE8k07XmiMMdB2dmRCwQz+TDYF3PkmbL3YJa1jG/532sfMsWVfHwCgj+H 7BFc7pg5ZgM9OXsQQEhDj9s/XAdU0nH9hwDmqWoEfdwobfXn2bPsCjzWohecIW6K 8Lu3EacWzwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFB6QMqEgSZKYfPAGndr5RToi GU4nMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 NjMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM1MzAzNTM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2gDzMA0GCSqGSIb3DQEBCwUAA4IBAQCxhZrIoZlzisd1GgMj41DyVZW2 cnk95TDXLiU2E512s/q/ptY5i0IFzePG1IPJGK2s9v7vG3P4lPQWgwxlS0DrXXGW SiAyNF9lqNGFck2OIbmYAVkEiYzfmUBzh3bW6NBChnyhxKt6LwMd6/PcIDzE4bKs qkyaWato3PKGTV3WZ5C5P9D2rn0m42wKzgz4N/B6y7SeKSQKFx2dJnlNWUKUyVtq jAmUKQquF+E5CkXkWI+EvWN8JxM073DyvqIEifLoiVE+rj4jVotyuFpoJYUtTxbf 1X66XNDOZBBPi16tkyELFdcVLkbWL36mggB/7TbXeu/eyZXQcdN/1ABJq6Ci -----END CERTIFICATE-----Generated at Mon Jun 30 15:45:19 2025 by rpki-client