$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203338303038.roa File: 32332e3234372e3133362e302f32322d3234203d3e203338303038.roa (raw, json) Hash identifier: xzndeBqpDgS36D7w39ovGuB/ZhHiWLnbjpWAceAPSVo= Subject key identifier: 09:ED:8E:98:93:6A:7D:B1:C9:C3:17:9C:42:C7:8F:2A:2A:1B:90:B3 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5B383EC3BD94F6366C8317FC33BFB697674B0D21 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203338303038.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 38008 IP address blocks: 23.247.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:38:3e:c3:bd:94:f6:36:6c:83:17:fc:33:bf:b6:97:67:4b:0d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=09ED8E98936A7DB1C9C3179C42C78F2A2A1B90B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:1e:a6:9d:8b:7e:05:ce:ea:45:b4:90:75: b8:76:65:e6:05:aa:1b:fc:39:18:f7:a8:15:3d:01: 96:74:a9:1d:89:8d:b5:c1:c0:bb:72:46:d2:88:04: 52:ff:0a:20:97:56:85:00:77:18:04:86:f5:ea:5f: 7e:97:cf:59:a8:bb:a8:91:8e:e8:33:2b:2e:45:5b: 76:ee:2f:3b:fa:04:88:77:70:a2:89:0b:a5:e9:df: 64:8e:8a:af:3a:7d:03:67:cf:26:4e:44:8c:80:ca: 06:42:e1:93:98:84:4a:7f:77:c4:22:e2:2a:25:38: f1:28:96:62:be:f1:37:2b:6d:67:8b:92:16:a2:cb: 75:04:26:0f:08:8f:5e:09:f4:37:60:ab:94:16:ca: 1b:11:b4:6d:20:67:f2:14:a6:40:23:2a:d0:c2:4e: 34:bc:2d:ed:46:67:a7:03:3f:9a:c4:80:1b:74:0b: e3:33:fb:cc:60:e7:f1:78:74:46:dc:57:f0:81:3b: 3e:b4:54:99:2d:8a:ec:85:cc:21:c8:26:c8:67:42: 40:d5:5c:12:3d:08:ca:51:67:f8:e0:40:8e:e0:f4: 91:71:73:42:67:69:cf:c8:e7:4d:34:bd:0f:48:05: 6a:cd:99:9f:f0:96:d7:aa:cc:39:46:9f:b4:45:18: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:8E:98:93:6A:7D:B1:C9:C3:17:9C:42:C7:8F:2A:2A:1B:90:B3 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203338303038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.247.136.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:a0:e1:0d:07:28:94:b3:63:e3:df:d0:1e:30:a1:23:c8:ec: c5:a2:a2:b5:7c:b9:a0:40:ce:8b:d4:63:9a:2c:47:e5:4b:9b: dd:32:60:b9:08:d1:aa:7e:4e:f4:1f:f9:23:8a:62:52:c0:dc: ee:84:c9:15:e9:8f:07:03:59:8f:9d:c9:22:c8:f1:5a:93:58: 78:d8:ea:1b:9e:ed:0d:d6:de:6c:8e:b9:fb:54:65:86:87:df: 9b:8c:d1:43:e9:b1:da:67:1d:03:1f:10:c2:f3:26:ed:ee:58: af:8c:32:d5:c2:9b:b7:7d:50:9f:5b:14:48:d4:be:b2:15:72: d7:37:88:f7:82:9b:ea:93:62:54:26:9f:11:9a:93:be:c2:1c: 5a:62:37:c7:e3:5d:1f:1f:ff:32:c7:1a:7c:98:e6:a4:71:a0: a8:fe:33:ca:44:57:60:a3:eb:d9:08:0c:3c:9e:e0:35:34:9e: 2a:26:b9:bc:85:b9:4e:03:63:ec:b5:14:69:6a:28:49:dd:fc: 43:be:c7:a6:66:d2:17:af:f9:f5:8f:78:fa:6f:30:f1:88:68: 4b:60:14:6b:0d:b1:ea:28:27:eb:09:de:56:cc:a0:1d:07:10: 12:10:4e:4c:23:c5:4c:96:e3:cf:53:bc:8b:1c:31:3b:71:21: 34:5b:c6:e1 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUWzg+w72U9jZsgxf8M7+2l2dLDSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEygwOUVEOEU5ODkzNkE3REIxQzlDMzE3OUM0MkM3OEYyQTJB MUI5MEIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LAepp2LfgXO 6kW0kHW4dmXmBaob/DkY96gVPQGWdKkdiY21wcC7ckbSiARS/wogl1aFAHcYBIb1 6l9+l89ZqLuokY7oMysuRVt27i87+gSId3CiiQul6d9kjoqvOn0DZ88mTkSMgMoG QuGTmIRKf3fEIuIqJTjxKJZivvE3K21ni5IWost1BCYPCI9eCfQ3YKuUFsobEbRt IGfyFKZAIyrQwk40vC3tRmenAz+axIAbdAvjM/vMYOfxeHRG3FfwgTs+tFSZLYrs hcwhyCbIZ0JA1VwSPQjKUWf44ECO4PSRcXNCZ2nPyOdNNL0PSAVqzZmf8JbXqsw5 Rp+0RRigMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAntjpiTan2xycMXnELHjyoq G5CzMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzMzJlMzIzNDM3MmUzMTMzMzYy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM4MzAzMDM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eI MA0GCSqGSIb3DQEBCwUAA4IBAQBaoOENByiUs2Pj39AeMKEjyOzFoqK1fLmgQM6L 1GOaLEflS5vdMmC5CNGqfk70H/kjimJSwNzuhMkV6Y8HA1mPnckiyPFak1h42Oob nu0N1t5sjrn7VGWGh9+bjNFD6bHaZx0DHxDC8ybt7livjDLVwpu3fVCfWxRI1L6y FXLXN4j3gpvqk2JUJp8RmpO+whxaYjfH410fH/8yxxp8mOakcaCo/jPKRFdgo+vZ CAw8nuA1NJ4qJrm8hblOA2PstRRpaihJ3fxDvsemZtIXr/n1j3j6bzDxiGhLYBRr DbHqKCfrCd5WzKAdBxASEE5MI8VMluPPU7yLHDE7cSE0W8bh -----END CERTIFICATE-----Generated at Fri Jun 20 07:50:24 2025 by rpki-client