$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa File: 323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa (raw, json) Hash identifier: 5SPF50WbjQ/+wPoZHL8moDSmSQac/PWTiZJe3+DtsOI= Subject key identifier: 20:78:BD:7C:DE:F8:B4:A3:7B:C8:8C:85:E0:FB:E3:E6:0F:02:0E:F6 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0B92C556BACA67173434F927441537C1E7F32EE0 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa Signing time: Mon 16 Jun 2025 08:52:29 +0000 ROA not before: Mon 16 Jun 2025 08:47:29 +0000 ROA not after: Mon 15 Jun 2026 08:52:29 +0000 asID: 204185 IP address blocks: 2602:feda:2a0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:92:c5:56:ba:ca:67:17:34:34:f9:27:44:15:37:c1:e7:f3:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:29 2025 GMT Not After : Jun 15 08:52:29 2026 GMT Subject: CN=2078BD7CDEF8B4A37BC88C85E0FBE3E60F020EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:4e:f6:7d:d2:55:44:d1:8c:c4:47:94:5a: c0:d6:22:fb:64:ae:fb:93:6b:82:de:a4:f2:11:b4: 2d:09:87:e3:54:a0:c8:de:09:fc:29:ca:b3:03:51: d2:7f:ac:78:ed:a3:2a:8a:f5:f9:db:3e:a3:4e:e1: ec:89:cd:68:22:4f:e6:a4:74:c8:1e:65:f1:8c:9e: 40:b7:5d:fe:7b:bc:fa:d6:d9:1f:d2:e1:75:4d:c1: be:82:52:17:e1:27:e7:c0:bf:96:22:02:9a:c8:b9: 2e:a7:ce:b8:a1:04:e0:0c:97:0e:d8:4a:79:71:79: fb:37:5d:3d:a9:17:14:d6:cd:5a:96:05:2b:89:51: 4c:41:ce:71:f4:9b:5e:03:7a:69:51:3c:24:76:e8: e5:0e:06:db:58:fa:40:c1:6b:6c:20:5e:71:e6:b4: 6c:5d:c5:a6:ea:3a:67:f4:3f:b9:33:fc:d3:66:59: 04:80:a4:87:38:48:0b:68:59:95:66:a9:28:d9:18: 64:be:cb:cc:fd:a6:89:23:cc:0b:1b:35:6a:e2:81: 13:00:bc:17:ae:35:02:52:aa:56:a8:f4:2c:8c:af: db:67:37:35:3a:4e:a2:04:46:bc:7e:6b:b5:19:4b: ee:e1:9b:62:8c:5a:e1:d7:a8:59:50:c5:7e:93:2b: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:78:BD:7C:DE:F8:B4:A3:7B:C8:8C:85:E0:FB:E3:E6:0F:02:0E:F6 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:2a0::/44 Signature Algorithm: sha256WithRSAEncryption 73:aa:36:b7:48:79:a9:97:5f:4f:4d:1e:84:5b:ce:5b:80:ef: d6:73:1e:54:fa:6e:3a:59:34:25:f4:29:ee:29:fb:7c:2b:77: 2b:b3:79:5f:16:0b:9a:a7:3e:40:21:81:2b:7d:ff:73:f5:10: 64:6e:02:f9:c5:f2:c7:49:c0:9f:b0:90:2f:97:0d:cb:11:52: 8d:7d:84:91:94:43:42:7b:f6:59:50:e2:c2:d0:22:a5:fc:36: b6:d2:78:e9:99:e1:61:de:00:41:23:62:20:8f:aa:e6:e8:70: 8e:41:80:56:86:23:47:cf:34:97:ac:e1:43:67:96:20:2a:d7: 7e:34:a3:80:d0:c3:e9:be:f6:c4:7c:cf:43:0a:9d:dc:d7:d8: 7f:65:28:ab:b0:1f:27:ea:89:cd:06:59:bd:a6:62:8f:1c:6f: 2b:ad:91:40:ff:3e:eb:11:f7:90:c0:d6:3b:e1:f9:e6:98:9c: 60:24:70:08:a8:4d:85:dd:29:1e:cd:68:31:0d:ac:33:7d:3a: 4a:69:15:13:14:0e:23:e2:5f:f2:43:6d:96:9d:b6:f8:38:82: f9:2e:22:a3:5f:d1:27:94:7b:e2:6a:cf:23:5e:f2:9f:f9:18: a6:a0:5a:66:d2:e2:37:60:fd:42:0d:c7:fa:51:d6:ad:7c:4b: b6:5e:b9:79 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUC5LFVrrKZxc0NPknRBU3wefzLuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI5WhcNMjYwNjE1MDg1MjI5 WjAzMTEwLwYDVQQDEygyMDc4QkQ3Q0RFRjhCNEEzN0JDODhDODVFMEZCRTNFNjBG MDIwRUY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6BO9n3SVUTR jMRHlFrA1iL7ZK77k2uC3qTyEbQtCYfjVKDI3gn8KcqzA1HSf6x47aMqivX52z6j TuHsic1oIk/mpHTIHmXxjJ5At13+e7z61tkf0uF1TcG+glIX4SfnwL+WIgKayLku p864oQTgDJcO2Ep5cXn7N109qRcU1s1algUriVFMQc5x9JteA3ppUTwkdujlDgbb WPpAwWtsIF5x5rRsXcWm6jpn9D+5M/zTZlkEgKSHOEgLaFmVZqko2RhkvsvM/aaJ I8wLGzVq4oETALwXrjUCUqpWqPQsjK/bZzc1Ok6iBEa8fmu1GUvu4ZtijFrh16hZ UMV+kyvygwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCB4vXze+LSje8iMheD74+YP Ag72MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzI2MTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM0MzEzODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gKgMA0GCSqGSIb3DQEBCwUAA4IBAQBzqja3SHmpl19PTR6EW85b gO/Wcx5U+m46WTQl9CnuKft8K3crs3lfFguapz5AIYErff9z9RBkbgL5xfLHScCf sJAvlw3LEVKNfYSRlENCe/ZZUOLC0CKl/Da20njpmeFh3gBBI2Igj6rm6HCOQYBW hiNHzzSXrOFDZ5YgKtd+NKOA0MPpvvbEfM9DCp3c19h/ZSirsB8n6onNBlm9pmKP HG8rrZFA/z7rEfeQwNY74fnmmJxgJHAIqE2F3SkezWgxDawzfTpKaRUTFA4j4l/y Q22Wnbb4OIL5LiKjX9EnlHvias8jXvKf+RimoFpm0uI3YP1CDcf6UdatfEu2Xrl5 -----END CERTIFICATE-----Generated at Tue Jun 17 03:54:13 2025 by rpki-client