$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa File: 323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa (raw, json) Hash identifier: 2gdaQs08QuE7xrztdnRAyG1JtnSd/o7nDV8VF4nu/xs= Subject key identifier: AA:13:74:7A:D7:A4:A6:02:62:39:D2:CD:FA:6E:70:38:F9:17:FB:1E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7E9C689D49CC728E332A01425FF43A8471323D70 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa Signing time: Mon 16 Jun 2025 08:52:31 +0000 ROA not before: Mon 16 Jun 2025 08:47:31 +0000 ROA not after: Mon 15 Jun 2026 08:52:31 +0000 asID: 133846 IP address blocks: 2602:feda:1b0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9c:68:9d:49:cc:72:8e:33:2a:01:42:5f:f4:3a:84:71:32:3d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:31 2025 GMT Not After : Jun 15 08:52:31 2026 GMT Subject: CN=AA13747AD7A4A6026239D2CDFA6E7038F917FB1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:89:8f:55:16:45:30:77:4b:e3:75:b9:4d: 73:bf:ec:b8:14:f6:5a:d7:86:6a:93:6f:40:94:f4: 2e:9d:dc:1f:80:49:71:24:d1:b1:9b:1c:fb:6e:87: 5c:14:aa:2a:5d:54:96:2a:50:49:34:cf:cc:e9:28: cd:19:56:3d:00:3d:43:f8:c8:df:b3:89:5f:17:96: e7:cc:8d:c9:0b:a7:5a:cf:b8:2e:b8:39:84:b0:c3: e5:44:9d:9e:a2:f6:ad:5c:48:09:b8:b4:28:4c:76: bd:7b:9f:64:ae:f1:a2:ab:f7:83:d5:13:d7:3d:9b: 3a:a0:51:26:44:fe:f7:f5:56:f0:cd:0b:92:7f:7f: 8b:b4:71:20:07:69:ee:e8:f8:3f:93:01:3a:80:f6: 20:b6:dd:60:4b:e0:d1:d0:05:85:21:f5:eb:fe:f4: d5:9a:ef:c0:3a:37:80:75:2e:5d:a4:24:73:2c:7c: eb:b6:16:cd:a9:21:fa:70:67:05:5b:aa:a4:eb:43: dd:6e:3e:5c:72:c1:c3:41:7f:52:b6:36:b6:b7:62: ac:da:18:0b:24:c1:2a:ed:e2:54:27:b7:08:73:40: da:99:d6:2f:29:2f:fb:aa:20:8c:5d:de:ff:39:4c: dc:65:b8:38:e2:69:f3:24:e6:97:f2:ca:97:23:c1: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:13:74:7A:D7:A4:A6:02:62:39:D2:CD:FA:6E:70:38:F9:17:FB:1E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:1b0::/44 Signature Algorithm: sha256WithRSAEncryption 44:eb:1b:20:20:ef:3f:79:03:15:17:24:75:5d:0f:fb:82:14: 7c:8a:46:ee:8a:e9:c3:a6:58:99:57:3b:8b:f4:f8:33:d6:0e: 4c:d7:fd:06:9a:51:ea:c8:57:64:b5:69:74:e1:db:6b:7a:a6: fd:8d:cd:fc:b3:9a:71:13:98:64:87:d7:94:6a:6c:e2:d2:fa: 53:73:60:fd:97:6b:26:a5:a2:96:4b:a7:02:43:2c:90:5a:8f: fc:7a:c8:81:f3:20:50:a9:6c:e1:42:1c:a8:84:f5:b4:dd:72: 63:17:db:cd:0f:f4:da:16:e6:e5:25:b4:e2:5d:79:c1:31:29: ab:f4:41:7d:59:21:e7:ed:8c:0d:3b:3e:6b:8d:9b:ee:9b:5b: 06:94:f6:2f:1d:4c:0d:ef:96:d5:90:a1:c4:66:b7:90:a6:81: 6e:67:22:86:fb:a4:41:a1:31:59:7b:21:e9:08:c4:67:00:1c: 2a:e0:7c:c6:e0:da:3c:69:b7:9a:3c:b5:f0:8e:59:5c:83:16: c2:50:d1:a1:b7:70:d7:d0:bc:46:d3:9d:04:ba:09:d2:03:56: 37:87:a3:a0:ab:d1:2e:3f:b9:bb:4e:5b:73:c3:c8:51:4d:a4: d1:bb:08:fd:ae:ae:ec:f3:5e:32:bd:4c:9c:42:f4:f1:57:54: 19:98:68:f8 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfpxonUnMco4zKgFCX/Q6hHEyPXAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMxWhcNMjYwNjE1MDg1MjMx WjAzMTEwLwYDVQQDEyhBQTEzNzQ3QUQ3QTRBNjAyNjIzOUQyQ0RGQTZFNzAzOEY5 MTdGQjFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDSJj1UWRTB3 S+N1uU1zv+y4FPZa14Zqk29AlPQundwfgElxJNGxmxz7bodcFKoqXVSWKlBJNM/M 6SjNGVY9AD1D+Mjfs4lfF5bnzI3JC6daz7guuDmEsMPlRJ2eovatXEgJuLQoTHa9 e59krvGiq/eD1RPXPZs6oFEmRP739VbwzQuSf3+LtHEgB2nu6Pg/kwE6gPYgtt1g S+DR0AWFIfXr/vTVmu/AOjeAdS5dpCRzLHzrthbNqSH6cGcFW6qk60Pdbj5ccsHD QX9Stja2t2Ks2hgLJMEq7eJUJ7cIc0DamdYvKS/7qiCMXd7/OUzcZbg44mnzJOaX 8sqXI8HBmQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKoTdHrXpKYCYjnSzfpucDj5 F/seMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzE2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzMzMzgzNDM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gGwMA0GCSqGSIb3DQEBCwUAA4IBAQBE6xsgIO8/eQMVFyR1XQ/7 ghR8ikbuiunDpliZVzuL9Pgz1g5M1/0GmlHqyFdktWl04dtreqb9jc38s5pxE5hk h9eUamzi0vpTc2D9l2smpaKWS6cCQyyQWo/8esiB8yBQqWzhQhyohPW03XJjF9vN D/TaFublJbTiXXnBMSmr9EF9WSHn7YwNOz5rjZvum1sGlPYvHUwN75bVkKHEZreQ poFuZyKG+6RBoTFZeyHpCMRnABwq4HzG4No8abeaPLXwjllcgxbCUNGht3DX0LxG 050EugnSA1Y3h6Ogq9EuP7m7Tltzw8hRTaTRuwj9rq7s814yvUycQvTxV1QZmGj4 -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:28 2025 by rpki-client