$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa File: 323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa (raw, json) Hash identifier: KUi8hshZ2vxwbWf1tYbD1Zi+hayG4xOHYz9Rn3xo2oM= Subject key identifier: 30:74:AA:BD:64:7E:6A:96:6C:70:FB:8C:80:79:06:2F:58:81:57:EF Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 48129A88467D73C47B5146A29FD6277CC1E19A8E Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 142025 IP address blocks: 2602:feda:190::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:12:9a:88:46:7d:73:c4:7b:51:46:a2:9f:d6:27:7c:c1:e1:9a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=3074AABD647E6A966C70FB8C8079062F588157EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:b8:67:42:5f:e7:e2:c2:e0:55:3c:57:ce: d9:66:f7:ee:58:8d:9b:7e:ab:d2:f3:33:66:39:31: d4:25:00:64:b1:13:e2:12:d7:3d:7e:94:d2:ca:93: 2c:ce:3e:ac:a8:5e:48:6c:40:f9:79:f8:12:57:c5: ac:fc:72:70:36:3c:66:bc:44:31:f3:fe:60:d5:04: d1:c3:bc:7d:e8:53:98:2b:58:e5:9c:7b:59:69:1d: b5:40:f8:60:8c:cb:a3:c9:a2:f4:a6:f0:b4:26:1c: fc:f4:13:6f:4d:6b:61:15:5c:a1:38:95:63:dc:94: 0a:ef:98:80:ba:99:1f:e2:ac:22:50:5b:69:f7:57: bb:d5:7e:4d:63:c1:bf:c3:bc:3e:28:c4:46:f7:66: 2d:f3:fe:0e:fa:5e:45:90:0f:e6:92:11:31:04:de: 46:61:94:41:6f:49:b7:fb:51:25:3c:5a:19:cb:3a: 78:34:27:57:99:54:e3:e6:fc:d5:fb:71:67:c3:81: bd:f9:56:67:f7:fe:fe:ff:71:0c:98:2c:b6:e0:aa: d6:a5:af:55:a2:18:40:62:21:b2:e6:09:36:fd:ef: ec:88:46:e9:01:8f:b4:59:62:1e:c4:dd:2f:21:29: c8:13:97:5b:da:40:c2:c0:bb:b5:3d:7e:24:02:4b: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:AA:BD:64:7E:6A:96:6C:70:FB:8C:80:79:06:2F:58:81:57:EF X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:190::/44 Signature Algorithm: sha256WithRSAEncryption 29:cd:6a:1b:e4:45:8b:de:f7:11:0a:6c:ec:dd:13:12:83:d1: da:e0:0c:38:ae:84:ee:70:d4:e5:55:ce:74:00:4b:02:91:91: 54:ff:df:f3:83:2b:ac:86:50:4d:da:36:8b:1e:f6:61:de:7b: a1:fd:41:d4:92:b0:c5:c9:cf:e9:54:b2:86:c0:90:c6:43:b5: 08:67:58:fe:c9:d0:7b:68:ae:d0:72:64:77:f3:b4:61:80:b8: ee:c2:6e:a7:6a:31:33:12:78:4e:61:0e:79:17:8a:6a:0a:72: 38:71:1a:9c:17:e8:b3:3b:11:4b:6b:f4:d2:eb:49:e3:f4:64: a4:7d:f3:1c:4f:00:38:ce:dc:71:1a:7c:2a:43:b6:5b:92:e1: eb:ac:2f:00:13:a3:16:fd:7d:d4:21:ad:a1:73:54:85:a4:2b: f7:61:51:36:39:f1:36:16:bc:ba:f6:25:d7:b6:e5:f8:c2:b6: bb:c4:b5:31:6b:77:64:95:7b:62:5d:a0:1e:a3:a7:0e:f1:03: 2c:69:50:91:82:a5:b6:7d:9b:c1:ff:48:7e:46:9b:9c:82:36: 29:16:9f:4a:3e:a2:b3:48:e5:f1:d3:fc:f4:30:9c:fc:91:64: e1:66:87:14:a7:af:be:0a:82:aa:f4:90:c3:93:6b:8e:70:5a: 05:75:dc:02 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUSBKaiEZ9c8R7UUain9YnfMHhmo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEygzMDc0QUFCRDY0N0U2QTk2NkM3MEZCOEM4MDc5MDYyRjU4 ODE1N0VGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiy4Z0Jf5+LC 4FU8V87ZZvfuWI2bfqvS8zNmOTHUJQBksRPiEtc9fpTSypMszj6sqF5IbED5efgS V8Ws/HJwNjxmvEQx8/5g1QTRw7x96FOYK1jlnHtZaR21QPhgjMujyaL0pvC0Jhz8 9BNvTWthFVyhOJVj3JQK75iAupkf4qwiUFtp91e71X5NY8G/w7w+KMRG92Yt8/4O +l5FkA/mkhExBN5GYZRBb0m3+1ElPFoZyzp4NCdXmVTj5vzV+3Fnw4G9+VZn9/7+ /3EMmCy24KrWpa9VohhAYiGy5gk2/e/siEbpAY+0WWIexN0vISnIE5db2kDCwLu1 PX4kAksi5wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDB0qr1kfmqWbHD7jIB5Bi9Y gVfvMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzEzOTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzAzMjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gGQMA0GCSqGSIb3DQEBCwUAA4IBAQApzWob5EWL3vcRCmzs3RMS g9Ha4Aw4roTucNTlVc50AEsCkZFU/9/zgyushlBN2jaLHvZh3nuh/UHUkrDFyc/p VLKGwJDGQ7UIZ1j+ydB7aK7QcmR387RhgLjuwm6najEzEnhOYQ55F4pqCnI4cRqc F+izOxFLa/TS60nj9GSkffMcTwA4ztxxGnwqQ7ZbkuHrrC8AE6MW/X3UIa2hc1SF pCv3YVE2OfE2Fry69iXXtuX4wra7xLUxa3dklXtiXaAeo6cO8QMsaVCRgqW2fZvB /0h+RpucgjYpFp9KPqKzSOXx0/z0MJz8kWThZocUp6++CoKq9JDDk2uOcFoFddwC -----END CERTIFICATE-----Generated at Mon Jun 16 16:23:03 2025 by rpki-client