$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa File: 323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa (raw, json) Hash identifier: LtRQBfh+83GuFrFHteZP4VXzzjuvsqjNqBJJTYyBw6Y= Subject key identifier: D8:EB:90:EE:27:2F:F8:BD:05:B7:18:5C:FE:10:A3:11:22:56:6C:05 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 4E0279B4A49F0BD1D4BA31FEFE71013EB344FC26 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa Signing time: Mon 16 Jun 2025 08:52:29 +0000 ROA not before: Mon 16 Jun 2025 08:47:29 +0000 ROA not after: Mon 15 Jun 2026 08:52:29 +0000 asID: 35251 IP address blocks: 2602:feda:180::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:02:79:b4:a4:9f:0b:d1:d4:ba:31:fe:fe:71:01:3e:b3:44:fc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:29 2025 GMT Not After : Jun 15 08:52:29 2026 GMT Subject: CN=D8EB90EE272FF8BD05B7185CFE10A31122566C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:79:d9:eb:70:4d:96:5c:9f:07:11:67:ef: 53:b4:b8:e8:47:62:d9:6e:6b:e5:00:d9:71:1a:3b: 17:91:ed:11:91:8e:38:15:d5:62:ab:cd:40:76:7e: 35:14:f7:0e:a2:ef:0f:4a:6c:b8:be:6a:e5:0e:cc: 48:2c:5b:a6:c2:4f:cc:31:38:9b:4d:8a:56:3a:6f: dd:62:61:03:be:b7:f9:90:af:54:d9:bb:cf:c7:7f: 0b:86:0f:27:2b:28:37:56:b4:b4:fa:e2:61:c4:2e: 9b:e1:d8:82:2d:51:7b:3f:5a:45:96:01:d0:8c:5e: ef:6c:5a:fe:fa:81:96:43:63:e9:9c:6f:6e:07:5b: e6:81:13:be:8b:e8:73:8c:27:46:57:f3:e0:42:cd: fa:97:6b:dc:c7:ed:51:37:48:bd:7f:bd:f0:2e:3f: fe:1a:e8:d5:17:f7:f5:b0:85:70:4d:ff:ec:2d:b3: a5:4f:90:96:5a:a9:5a:32:a9:92:67:db:65:1a:02: 39:65:20:86:c1:51:1a:fd:25:1c:79:44:a2:dc:6c: 66:25:75:1d:79:34:1e:38:9f:b6:9e:eb:c4:10:bb: a0:57:df:39:0b:7d:1c:ab:0b:1e:95:97:42:10:6d: a8:50:eb:04:87:85:42:8b:d4:6b:d5:9e:4b:67:62: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EB:90:EE:27:2F:F8:BD:05:B7:18:5C:FE:10:A3:11:22:56:6C:05 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:180::/48 Signature Algorithm: sha256WithRSAEncryption 34:a4:b9:15:36:ad:9b:94:ce:50:e6:a1:92:e7:50:2d:76:96: 4f:33:c0:b6:83:42:19:6e:ea:07:05:8e:37:3f:ed:4e:3c:d5: 1c:6d:7c:ce:de:76:9a:2f:1d:42:9e:78:25:40:0d:79:9d:47: 78:25:67:5d:c2:be:77:8f:0e:39:af:62:ad:43:c5:40:a8:8a: 5a:eb:8f:d4:77:eb:ac:44:72:e5:41:ac:e1:16:12:16:2b:64: 1e:c6:8a:0f:64:f3:88:a0:86:81:36:6a:61:e9:04:18:bc:09: 1e:9a:02:36:e3:f2:04:74:32:8f:8b:c3:79:c8:32:6e:2e:1d: 60:3f:16:48:f5:2b:d2:f9:fb:10:e0:51:1b:7f:ff:53:a5:1f: d2:4d:2d:75:5b:cf:a8:9a:f7:3a:6e:e1:11:d2:8c:c5:2d:9f: 7b:67:73:d8:73:16:0c:f4:09:12:c3:d3:31:bb:4b:ad:f6:45: f9:ed:3a:40:89:57:7f:89:57:67:d3:34:1d:11:a5:68:60:c2: 63:81:54:07:d4:31:5a:0d:c2:58:4d:bb:d2:8e:eb:9a:be:50: c4:2d:8f:f6:94:50:ba:13:87:f4:54:e8:16:7a:18:a4:fd:d2: 53:96:b8:5d:2b:e2:39:3c:5b:17:32:d6:ae:f7:b7:22:7d:0d: ac:8c:93:93 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUTgJ5tKSfC9HUujH+/nEBPrNE/CYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI5WhcNMjYwNjE1MDg1MjI5 WjAzMTEwLwYDVQQDEyhEOEVCOTBFRTI3MkZGOEJEMDVCNzE4NUNGRTEwQTMxMTIy NTY2QzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsN52etwTZZc nwcRZ+9TtLjoR2LZbmvlANlxGjsXke0RkY44FdViq81Adn41FPcOou8PSmy4vmrl DsxILFumwk/MMTibTYpWOm/dYmEDvrf5kK9U2bvPx38Lhg8nKyg3VrS0+uJhxC6b 4diCLVF7P1pFlgHQjF7vbFr++oGWQ2PpnG9uB1vmgRO+i+hzjCdGV/PgQs36l2vc x+1RN0i9f73wLj/+GujVF/f1sIVwTf/sLbOlT5CWWqlaMqmSZ9tlGgI5ZSCGwVEa /SUceUSi3GxmJXUdeTQeOJ+2nuvEELugV985C30cqwselZdCEG2oUOsEh4VCi9Rr 1Z5LZ2IYeQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFNjrkO4nL/i9BbcYXP4QoxEi VmwFMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MTM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM1MzIzNTMxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2gGAMA0GCSqGSIb3DQEBCwUAA4IBAQA0pLkVNq2blM5Q5qGS51AtdpZP M8C2g0IZbuoHBY43P+1OPNUcbXzO3naaLx1CnnglQA15nUd4JWddwr53jw45r2Kt Q8VAqIpa64/Ud+usRHLlQazhFhIWK2QexooPZPOIoIaBNmph6QQYvAkemgI24/IE dDKPi8N5yDJuLh1gPxZI9SvS+fsQ4FEbf/9TpR/STS11W8+omvc6buER0ozFLZ97 Z3PYcxYM9AkSw9Mxu0ut9kX57TpAiVd/iVdn0zQdEaVoYMJjgVQH1DFaDcJYTbvS juuavlDELY/2lFC6E4f0VOgWehik/dJTlrhdK+I5PFsXMtau97cifQ2sjJOT -----END CERTIFICATE-----Generated at Tue Jun 17 17:59:50 2025 by rpki-client