$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa File: 3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa (raw, json) Hash identifier: s/yfNpL+8AuMdoKASxZ/U/3gKzoI7rQLSQxsvz93Sr8= Subject key identifier: FC:E5:49:23:F3:79:87:47:84:03:6D:B6:FE:80:05:F8:BD:D6:27:0D Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 47F0EC4122AC336B5679D3E3DE5420F7ECC20A48 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa Signing time: Mon 16 Jun 2025 08:52:27 +0000 ROA not before: Mon 16 Jun 2025 08:47:27 +0000 ROA not after: Mon 15 Jun 2026 08:52:27 +0000 asID: 396982 IP address blocks: 134.195.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 00:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f0:ec:41:22:ac:33:6b:56:79:d3:e3:de:54:20:f7:ec:c2:0a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:27 2025 GMT Not After : Jun 15 08:52:27 2026 GMT Subject: CN=FCE54923F379874784036DB6FE8005F8BDD6270D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:d2:25:69:9b:91:a3:48:1d:2f:ff:7a:0d: 5b:9d:36:48:ca:d6:bd:e5:ad:74:dc:35:4d:76:77: c7:4a:9f:f9:35:b6:85:87:7a:73:53:f9:d7:a9:dd: e7:01:89:6e:73:aa:e1:af:c2:dd:84:76:1c:9f:5b: d4:18:c2:48:e5:b5:fa:67:32:ba:84:fd:0e:31:5b: 2e:65:bc:e6:53:8d:83:d7:de:44:18:91:3d:5e:ce: be:3a:2f:fd:4f:0b:60:8e:18:9a:be:43:0e:55:84: c9:21:dd:33:6f:77:ee:23:fb:00:d7:67:df:33:3b: 74:a1:c2:b4:02:af:15:a1:b1:67:38:af:f1:68:25: ae:98:5b:31:36:58:e1:a6:c9:8e:9d:4a:8d:b5:e8: 5b:fb:7d:b3:69:43:20:73:e8:97:e9:ce:be:b3:f5: b3:8a:11:cb:5f:7e:8e:f3:d0:6d:78:20:0f:d3:cc: c2:5f:80:ea:a8:28:34:24:34:02:a5:74:84:15:94: 09:b7:7a:1c:f2:32:1b:dd:0f:c1:b4:62:93:d5:d7: 98:82:0a:14:6e:1b:a7:67:06:97:b4:42:20:e1:22: e4:e1:9c:d9:5d:0d:80:07:07:32:d3:0a:12:c1:f9: 47:17:fe:a2:16:c1:45:38:8a:08:23:ba:c8:04:e0: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E5:49:23:F3:79:87:47:84:03:6D:B6:FE:80:05:F8:BD:D6:27:0D X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption 48:81:50:40:ee:9b:11:e0:7e:e4:3b:5c:5b:84:43:8e:a3:d0: f8:a3:40:e2:6f:78:5a:e8:f5:06:a0:28:6b:2f:5f:f3:af:f3: 1c:b6:f2:1e:ff:91:54:70:33:e8:f2:20:72:d4:14:b6:0e:69: 41:69:dd:4c:ad:27:79:3a:d7:7a:b7:47:8b:30:f4:1d:b9:01: bb:ae:44:c5:e3:c0:c9:45:66:1e:b0:a2:bc:8c:eb:41:d8:87: c4:dd:7c:9f:ee:e1:3d:e3:7b:00:6f:30:09:8d:68:d3:c1:ce: ce:18:c9:90:5b:a2:7c:a5:7d:27:76:f9:b1:53:46:f9:62:9c: 95:ee:c7:ab:2b:70:07:93:10:f4:88:87:39:9a:f2:18:2d:5f: 6f:91:e5:91:57:85:e0:ce:8c:45:cc:94:6a:b2:fa:88:b5:d9: fc:c6:9f:8e:58:b1:a6:57:2c:a8:fd:58:ed:a0:c8:a6:82:22: 01:dd:ff:22:81:c0:95:22:e7:bf:10:fc:03:ce:95:3c:77:b4: b4:a5:e3:19:83:94:f6:91:8f:56:7d:5d:2b:95:65:9d:3c:fc: 1d:dc:82:89:25:f9:be:43:29:86:9b:7f:97:b0:cc:bd:22:11: 95:e7:47:54:8c:88:82:c8:50:ac:81:7a:63:ed:0c:8a:30:e7: e9:31:fe:2a -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUR/DsQSKsM2tWedPj3lQg9+zCCkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI3WhcNMjYwNjE1MDg1MjI3 WjAzMTEwLwYDVQQDEyhGQ0U1NDkyM0YzNzk4NzQ3ODQwMzZEQjZGRTgwMDVGOEJE RDYyNzBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvvSJWmbkaNI HS//eg1bnTZIyta95a103DVNdnfHSp/5NbaFh3pzU/nXqd3nAYluc6rhr8LdhHYc n1vUGMJI5bX6ZzK6hP0OMVsuZbzmU42D195EGJE9Xs6+Oi/9TwtgjhiavkMOVYTJ Id0zb3fuI/sA12ffMzt0ocK0Aq8VobFnOK/xaCWumFsxNljhpsmOnUqNtehb+32z aUMgc+iX6c6+s/WzihHLX36O89BteCAP08zCX4DqqCg0JDQCpXSEFZQJt3oc8jIb 3Q/BtGKT1deYggoUbhunZwaXtEIg4SLk4ZzZXQ2ABwcy0woSwflHF/6iFsFFOIoI I7rIBODMFQIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFPzlSSPzeYdHhANttv6ABfi9 1icNMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzMzM0MmUzMTM5MzUyZTMxMzAz MDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzkzNjM5MzgzMi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AYbDZDANBgkqhkiG9w0BAQsFAAOCAQEASIFQQO6bEeB+5DtcW4RDjqPQ+KNA4m94 Wuj1BqAoay9f86/zHLbyHv+RVHAz6PIgctQUtg5pQWndTK0neTrXerdHizD0HbkB u65ExePAyUVmHrCivIzrQdiHxN18n+7hPeN7AG8wCY1o08HOzhjJkFuifKV9J3b5 sVNG+WKcle7HqytwB5MQ9IiHOZryGC1fb5HlkVeF4M6MRcyUarL6iLXZ/Mafjlix plcsqP1Y7aDIpoIiAd3/IoHAlSLnvxD8A86VPHe0tKXjGYOU9pGPVn1dK5VlnTz8 HdyCiSX5vkMphpt/l7DMvSIRledHVIyIgshQrIF6Y+0MijDn6TH+Kg== -----END CERTIFICATE-----Generated at Thu Jun 19 11:40:27 2025 by rpki-client