$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa File: 323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa (raw, json) Hash identifier: x0Ls9cUy80dHLUK/dZf+mAz99PzAGmnIpOL3XbbIwTo= Subject key identifier: 14:BA:84:17:8B:21:6A:72:A1:7D:A5:09:72:FA:1C:00:90:84:F4:E6 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 672533AF9CCE925213898E65819C0E79483A2324 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 396303 IP address blocks: 2602:feda:1::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:25:33:af:9c:ce:92:52:13:89:8e:65:81:9c:0e:79:48:3a:23:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=14BA84178B216A72A17DA50972FA1C009084F4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:e5:66:2a:e5:d4:57:26:e0:d8:9d:e4:e3: ae:a9:c1:ce:bd:01:f7:d8:ab:ce:34:c9:45:f8:87: 4f:d6:7b:5f:bc:be:52:d1:28:45:93:1d:6c:d2:95: e0:36:a2:b7:e7:09:d2:8f:1e:f5:a2:d3:8a:b4:29: 15:34:8b:f6:1b:c5:9f:10:aa:07:55:24:22:40:cf: 6e:aa:fd:79:a4:1e:13:84:75:a7:0b:9b:1c:23:81: 76:74:76:e4:fa:17:81:5c:9f:61:bb:c6:5d:a3:3a: da:84:a4:d7:1c:ac:8f:67:ca:66:2f:43:44:8c:64: 85:ac:73:3d:c2:8f:36:14:c0:16:51:26:cc:7c:45: aa:73:1c:cf:f6:29:5a:c0:a4:ef:6a:b7:7e:91:f3: 65:d7:f6:ba:25:f0:98:f5:55:a0:f1:f8:30:3e:f5: 87:0e:39:b0:26:79:47:e0:fc:17:8d:38:5b:2b:d6: 79:a4:4f:2e:56:c9:16:61:0f:bc:1b:a7:e3:80:60: 1c:09:46:8f:09:1c:4f:08:19:6b:5a:62:64:df:bc: d0:f4:3a:36:a9:52:ac:42:89:68:90:f5:48:ee:1d: c5:64:3f:a0:00:62:0b:82:23:3e:a3:ab:c9:41:43: fa:be:c1:05:ca:c2:ad:56:ee:f1:4b:7b:43:80:ea: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BA:84:17:8B:21:6A:72:A1:7D:A5:09:72:FA:1C:00:90:84:F4:E6 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:1::/48 Signature Algorithm: sha256WithRSAEncryption bf:3b:f8:bb:a3:cc:aa:32:5c:d0:1c:d4:63:29:6a:3d:1f:82: e5:e1:3c:a6:98:05:93:d0:d8:89:d9:53:e3:c9:77:37:fa:83: 1e:20:f5:63:a9:d0:23:c8:55:55:d5:ca:e5:20:d8:a8:fe:2e: d1:a7:e4:38:56:9f:4e:fa:45:0e:c8:c6:95:b2:0d:a9:83:c1: 09:45:22:5e:a6:fb:fb:6a:9c:6b:c2:e4:e1:39:54:6e:1e:14: d2:2f:45:ae:12:fb:8c:f8:f5:d5:24:69:9d:87:2f:bb:13:ee: da:e9:30:8d:fa:61:58:d1:6d:93:94:dd:1c:93:d4:9e:fd:28: 37:39:0f:82:e6:12:61:48:0d:b4:d1:1f:43:ab:ad:a7:0d:e8: 73:d8:d4:43:2a:e5:7a:ad:3a:b7:91:22:f9:df:74:9e:c1:ed: 20:31:12:c7:e7:00:26:fd:de:7a:2c:ef:47:b7:38:88:1b:5d: 2c:aa:26:da:64:06:49:cd:70:55:d9:d4:cc:bb:dc:15:96:2b: eb:7d:29:88:d8:15:ba:19:8d:c2:52:78:1d:4a:6d:99:f8:32: 1f:66:12:2e:28:f6:ed:f5:1e:ad:ff:95:81:60:f1:bc:ea:fd: 8d:db:9d:75:4e:86:c3:22:c4:6d:86:38:58:0f:64:b8:91:ad: 7a:07:55:b7 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUZyUzr5zOklITiY5lgZwOeUg6IyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEygxNEJBODQxNzhCMjE2QTcyQTE3REE1MDk3MkZBMUMwMDkw ODRGNEU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdrlZirl1Fcm 4Nid5OOuqcHOvQH32KvONMlF+IdP1ntfvL5S0ShFkx1s0pXgNqK35wnSjx71otOK tCkVNIv2G8WfEKoHVSQiQM9uqv15pB4ThHWnC5scI4F2dHbk+heBXJ9hu8Zdozra hKTXHKyPZ8pmL0NEjGSFrHM9wo82FMAWUSbMfEWqcxzP9ilawKTvard+kfNl1/a6 JfCY9VWg8fgwPvWHDjmwJnlH4PwXjThbK9Z5pE8uVskWYQ+8G6fjgGAcCUaPCRxP CBlrWmJk37zQ9Do2qVKsQolokPVI7h3FZD+gAGILgiM+o6vJQUP6vsEFysKtVu7x S3tDgOp7VwIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFBS6hBeLIWpyoX2lCXL6HACQ hPTmMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzkzNjMzMzAzMy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACYC/toAATANBgkqhkiG9w0BAQsFAAOCAQEAvzv4u6PMqjJc0BzUYylqPR+C5eE8 ppgFk9DYidlT48l3N/qDHiD1Y6nQI8hVVdXK5SDYqP4u0afkOFafTvpFDsjGlbIN qYPBCUUiXqb7+2qca8Lk4TlUbh4U0i9FrhL7jPj11SRpnYcvuxPu2ukwjfphWNFt k5TdHJPUnv0oNzkPguYSYUgNtNEfQ6utpw3oc9jUQyrleq06t5Ei+d90nsHtIDES x+cAJv3eeizvR7c4iBtdLKom2mQGSc1wVdnUzLvcFZYr630piNgVuhmNwlJ4HUpt mfgyH2YSLij27fUerf+VgWDxvOr9jduddU6GwyLEbYY4WA9kuJGtegdVtw== -----END CERTIFICATE-----Generated at Mon Jun 16 19:31:08 2025 by rpki-client