$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa File: 323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa (raw, json) Hash identifier: nZvW+ygx2ao9qGDi1jFSqrKWHVIk4JAGgKK0mDa1td0= Subject key identifier: 89:06:76:3A:D9:BB:B3:E7:EC:53:90:9B:FF:54:E3:F1:F5:16:FD:C7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7506D9571D5750FA0612D63B8F4F12575E23DB76 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 140926 IP address blocks: 2602:feda:1e0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:06:d9:57:1d:57:50:fa:06:12:d6:3b:8f:4f:12:57:5e:23:db:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=8906763AD9BBB3E7EC53909BFF54E3F1F516FDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:c9:f4:4d:59:d4:d3:e5:bb:0d:1b:3c:72: b0:72:f8:22:12:41:72:87:ee:52:d2:6a:c1:02:a2: e3:51:ae:9a:62:6f:77:ec:88:0a:2f:6b:8d:e4:64: 3d:81:90:7f:7f:23:d4:5c:6d:1d:a7:66:67:64:34: 4d:5a:1f:4f:6d:d1:b2:66:29:16:80:cc:a6:bf:52: 9b:6b:00:99:d1:e9:bd:3a:b7:c4:73:be:dd:a3:69: 13:a1:08:c8:c7:7d:49:d2:25:30:d7:01:53:4b:c6: 5d:3f:d5:82:da:60:bf:ea:a4:df:85:60:f5:21:0b: 9d:ef:c8:a1:82:9d:66:0f:f6:ec:a3:ca:f7:dc:04: 37:23:f5:64:3f:d1:d4:6a:22:68:42:3a:1c:8e:40: dd:cf:4f:f3:78:07:83:66:66:4d:ce:eb:b2:6a:1c: bc:e0:a5:15:24:21:94:a9:d1:32:a9:37:d6:30:cc: f6:83:69:bd:29:da:9d:2f:19:1a:b1:64:d2:c1:e8: 38:12:99:2c:3b:0d:37:dc:3c:41:58:51:e4:74:7f: 7d:43:25:da:95:44:10:eb:ea:e0:aa:cc:79:7c:07: 2f:8a:33:71:86:57:85:34:07:4f:0a:5b:b3:18:06: 1f:8e:5c:7b:50:71:2c:79:19:0d:49:86:66:32:bd: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:06:76:3A:D9:BB:B3:E7:EC:53:90:9B:FF:54:E3:F1:F5:16:FD:C7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:1e0::/44 Signature Algorithm: sha256WithRSAEncryption c1:bd:c1:f2:ad:53:f7:df:f4:fb:5e:b7:97:62:21:8a:01:0f: ca:11:bf:65:96:65:02:02:2d:e1:4d:40:c1:10:11:82:9a:4d: 65:28:2f:05:7d:f6:be:7d:ce:11:28:1c:02:cb:28:78:d2:66: f1:ec:82:28:e8:04:45:cf:fa:a4:d5:da:61:4e:e7:ac:8c:3c: cb:59:14:fe:fa:57:fb:83:e5:1f:cc:ee:1d:ec:7c:92:ee:28: 3d:11:3e:af:37:f0:4a:ae:1b:ea:88:ea:1e:e1:65:ab:1b:2e: 8b:ca:ff:15:6e:f3:88:a2:43:0a:a0:53:51:0e:0b:a1:cc:a7: 12:b1:47:a0:9c:14:ea:16:a1:9c:55:8d:f4:45:7f:f1:21:67: 75:1e:31:d7:99:70:5a:cb:65:ff:c0:91:24:8b:a2:64:ce:5b: 20:b5:76:59:17:73:ee:3d:af:21:3e:01:4c:6f:95:27:dd:b6: c2:cf:18:3d:e3:86:fb:20:e5:35:92:49:6f:f6:27:db:d8:99: dc:91:83:cc:aa:29:11:74:66:37:06:a4:8a:4d:3a:e9:49:b6: 87:b6:c7:c8:a6:d9:c6:47:df:a5:50:7c:28:55:e3:eb:a1:37: eb:c4:b5:f5:d8:50:24:aa:97:04:85:79:71:78:20:e4:e0:96: eb:34:5a:1c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUdQbZVx1XUPoGEtY7j08SV14j23YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEyg4OTA2NzYzQUQ5QkJCM0U3RUM1MzkwOUJGRjU0RTNGMUY1 MTZGREM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyITJ9E1Z1NPl uw0bPHKwcvgiEkFyh+5S0mrBAqLjUa6aYm937IgKL2uN5GQ9gZB/fyPUXG0dp2Zn ZDRNWh9PbdGyZikWgMymv1KbawCZ0em9OrfEc77do2kToQjIx31J0iUw1wFTS8Zd P9WC2mC/6qTfhWD1IQud78ihgp1mD/bso8r33AQ3I/VkP9HUaiJoQjocjkDdz0/z eAeDZmZNzuuyahy84KUVJCGUqdEyqTfWMMz2g2m9KdqdLxkasWTSweg4EpksOw03 3DxBWFHkdH99QyXalUQQ6+rgqsx5fAcvijNxhleFNAdPCluzGAYfjlx7UHEseRkN SYZmMr272QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIkGdjrZu7Pn7FOQm/9U4/H1 Fv3HMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzE2NTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMwMzkzMjM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gHgMA0GCSqGSIb3DQEBCwUAA4IBAQDBvcHyrVP33/T7XreXYiGK AQ/KEb9llmUCAi3hTUDBEBGCmk1lKC8Fffa+fc4RKBwCyyh40mbx7IIo6ARFz/qk 1dphTuesjDzLWRT++lf7g+UfzO4d7HyS7ig9ET6vN/BKrhvqiOoe4WWrGy6Lyv8V bvOIokMKoFNRDguhzKcSsUegnBTqFqGcVY30RX/xIWd1HjHXmXBay2X/wJEki6Jk zlsgtXZZF3PuPa8hPgFMb5Un3bbCzxg944b7IOU1kklv9ifb2JnckYPMqikRdGY3 BqSKTTrpSbaHtsfIptnGR9+lUHwoVeProTfrxLX12FAkqpcEhXlxeCDk4JbrNFoc -----END CERTIFICATE-----Generated at Tue Jun 17 00:56:11 2025 by rpki-client