$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa File: 323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa (raw, json) Hash identifier: nWyQmvKU/OrsEkv4qm1AQ51Iczbw52A2KxN+E3Uip/8= Subject key identifier: FB:D2:8E:5A:EE:72:DC:8E:EF:6F:FD:6C:4D:F0:50:D8:A4:E2:B5:03 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3B00A17C1BAB01E0EF1AB9538354DB3C69ABA1DC Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa Signing time: Thu 12 Jun 2025 11:52:21 +0000 ROA not before: Thu 12 Jun 2025 11:47:21 +0000 ROA not after: Thu 11 Jun 2026 11:52:21 +0000 asID: 205058 IP address blocks: 2602:feda:f8::/47 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:00:a1:7c:1b:ab:01:e0:ef:1a:b9:53:83:54:db:3c:69:ab:a1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 12 11:47:21 2025 GMT Not After : Jun 11 11:52:21 2026 GMT Subject: CN=FBD28E5AEE72DC8EEF6FFD6C4DF050D8A4E2B503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:58:af:a9:b8:f2:b7:54:5a:eb:01:91:d7: a4:7e:c6:bb:51:b2:8a:71:3a:ef:40:04:70:47:44: b8:c6:1b:28:92:99:f3:cd:84:72:9f:e7:55:f5:6b: f9:60:b6:37:5f:c2:5a:f1:22:9f:b1:72:47:94:bc: d9:3c:a3:90:e6:ba:13:bb:8d:02:8c:9a:2f:6a:18: 5a:f4:fc:32:51:aa:42:b6:83:17:1f:41:b4:77:17: 12:f2:73:d9:54:fe:e5:f6:cf:05:38:4c:be:79:7e: 1b:f4:dd:10:ab:5c:b3:e2:23:31:67:9b:5b:de:65: 06:2b:66:d2:a9:92:32:ac:be:d0:56:5e:c6:0a:1f: 01:6d:d1:69:f2:6b:bf:9e:ce:fb:0b:f8:63:40:2a: cb:6a:51:c9:3b:b7:9f:ea:68:83:64:29:e1:8e:60: c5:5c:ac:46:4f:59:c1:b9:ec:f1:de:92:0c:a0:45: b2:1d:31:e3:40:38:eb:f4:02:81:d0:8c:ee:f9:af: 67:ce:80:c7:c7:6e:ed:0e:2f:85:3f:47:d4:55:d8: ea:9b:34:93:6c:bf:bd:51:14:ff:14:30:c4:82:26: 0e:6d:32:a3:ed:4a:47:c3:84:a0:5c:dc:89:13:20: 7e:d3:0b:e0:27:0b:a6:36:14:09:a3:98:c4:10:d8: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:8E:5A:EE:72:DC:8E:EF:6F:FD:6C:4D:F0:50:D8:A4:E2:B5:03 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f8::/47 Signature Algorithm: sha256WithRSAEncryption 2c:b1:de:ce:be:d3:09:fb:b1:82:97:3c:24:44:d1:f6:6b:c0: d3:e4:69:9d:9c:12:cb:0e:ba:2b:11:64:3e:e1:af:54:32:9b: 17:1d:f0:67:76:21:f7:37:cf:bc:b1:c7:55:41:f6:6e:37:66: 04:f1:4d:05:ff:4d:02:2a:71:7a:e3:28:a2:2e:e9:6c:be:f1: 0d:09:8a:db:8b:bb:71:4a:c9:17:71:2f:d7:8f:92:c5:63:6f: 10:13:5b:8c:24:4c:16:04:e3:c8:8c:4f:b8:8b:21:aa:86:f4: d3:45:bf:a5:77:5b:1d:a8:90:e0:e7:de:b3:80:67:c6:ce:b1: 58:35:9c:7c:c7:ce:be:9f:52:f1:b7:3e:a3:88:b6:62:27:ec: 3b:a5:6d:9e:bf:86:f6:dc:33:bd:96:b9:e0:11:88:16:61:e7: 46:ca:3d:42:1f:da:6a:b9:52:bf:16:02:f1:7e:08:3d:e4:f5: df:af:28:4a:e1:14:bc:57:d1:f8:7f:88:58:e6:72:1c:ab:3b: 31:46:84:24:9a:55:ca:07:38:36:9e:4a:22:2c:6a:3a:1d:b9: 3c:02:7b:5f:04:3e:13:1b:28:9b:82:cf:eb:05:65:6b:ce:3f: 83:12:f3:11:53:3e:0d:ff:a6:88:3c:80:3b:87:3c:12:b8:d7: d1:1a:11:03 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUOwChfBurAeDvGrlTg1TbPGmrodwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjEyMTE0NzIxWhcNMjYwNjExMTE1MjIx WjAzMTEwLwYDVQQDEyhGQkQyOEU1QUVFNzJEQzhFRUY2RkZENkM0REYwNTBEOEE0 RTJCNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9FYr6m48rdU WusBkdekfsa7UbKKcTrvQARwR0S4xhsokpnzzYRyn+dV9Wv5YLY3X8Ja8SKfsXJH lLzZPKOQ5roTu40CjJovahha9PwyUapCtoMXH0G0dxcS8nPZVP7l9s8FOEy+eX4b 9N0Qq1yz4iMxZ5tb3mUGK2bSqZIyrL7QVl7GCh8BbdFp8mu/ns77C/hjQCrLalHJ O7ef6miDZCnhjmDFXKxGT1nBuezx3pIMoEWyHTHjQDjr9AKB0Izu+a9nzoDHx27t Di+FP0fUVdjqmzSTbL+9URT/FDDEgiYObTKj7UpHw4SgXNyJEyB+0wvgJwumNhQJ o5jEENjvcQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFPvSjlructyO72/9bE3wUNik 4rUDMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 NjM4M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzMDM1MzAzNTM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcBJgL+2gD4MA0GCSqGSIb3DQEBCwUAA4IBAQAssd7OvtMJ+7GClzwkRNH2a8DT 5GmdnBLLDrorEWQ+4a9UMpsXHfBndiH3N8+8scdVQfZuN2YE8U0F/00CKnF64yii LulsvvENCYrbi7txSskXcS/Xj5LFY28QE1uMJEwWBOPIjE+4iyGqhvTTRb+ld1sd qJDg596zgGfGzrFYNZx8x86+n1Lxtz6jiLZiJ+w7pW2ev4b23DO9lrngEYgWYedG yj1CH9pquVK/FgLxfgg95PXfryhK4RS8V9H4f4hY5nIcqzsxRoQkmlXKBzg2nkoi LGo6Hbk8AntfBD4TGyibgs/rBWVrzj+DEvMRUz4N/6aIPIA7hzwSuNfRGhED -----END CERTIFICATE-----Generated at Mon Jun 30 17:45:35 2025 by rpki-client