$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa File: 323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa (raw, json) Hash identifier: rplE8W9O4lqPDOF1uUoLZ4fppxql1SS04et34Zkw4ao= Subject key identifier: 33:8A:FA:DA:D8:41:E5:CD:2D:C9:F9:CE:39:EA:11:98:00:E8:EF:52 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7F1F13B59FECC0277E1B972EF864D560B912F180 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa Signing time: Mon 16 Jun 2025 08:52:24 +0000 ROA not before: Mon 16 Jun 2025 08:47:24 +0000 ROA not after: Mon 15 Jun 2026 08:52:24 +0000 asID: 133492 IP address blocks: 2602:feda:2d0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1f:13:b5:9f:ec:c0:27:7e:1b:97:2e:f8:64:d5:60:b9:12:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:24 2025 GMT Not After : Jun 15 08:52:24 2026 GMT Subject: CN=338AFADAD841E5CD2DC9F9CE39EA119800E8EF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:28:a3:21:3b:f0:69:8a:77:99:39:fe:91: 7d:73:94:d6:d3:02:d7:93:23:13:80:38:94:8a:11: b5:57:30:97:25:53:47:31:0d:99:da:29:ab:27:35: 32:e1:c1:f9:02:d4:55:a5:03:6d:57:74:b2:4f:5b: cd:aa:94:07:1a:dc:95:fa:b0:3e:97:32:20:3e:5e: 82:62:80:b2:f3:50:39:85:30:46:a2:59:53:99:45: f4:19:15:cc:ed:91:93:93:4d:77:4e:00:0a:b6:80: 3a:5a:dc:39:97:f5:05:aa:d9:bb:5b:b1:8b:23:b0: 02:1b:23:80:cf:d0:77:8b:fc:f8:58:aa:b0:35:a4: b7:6c:b1:fc:55:92:8a:d8:56:72:30:2b:e7:da:dd: 18:73:2f:34:1c:10:79:1d:2c:be:1c:f8:35:a0:2f: 85:de:18:78:6e:cf:09:98:76:24:63:84:a9:46:58: 33:11:dd:c7:74:bf:e3:60:f2:23:c2:5d:41:0f:4a: bd:52:33:32:1b:1e:ea:0b:f6:1f:62:53:42:39:07: 8a:a6:1b:d6:ec:7d:74:2e:68:b1:a2:d5:53:28:50: 74:1d:7d:6a:39:9d:a9:10:f4:7b:88:d9:b9:97:24: 87:7c:0e:77:04:e7:ff:93:85:9b:36:e7:a3:c2:eb: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:FA:DA:D8:41:E5:CD:2D:C9:F9:CE:39:EA:11:98:00:E8:EF:52 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:2d0::/44 Signature Algorithm: sha256WithRSAEncryption 6a:dc:ad:72:ff:2e:b6:9a:3d:84:68:a8:14:79:cb:08:db:65: 34:ba:d1:31:ab:6e:46:44:db:a8:e8:0c:59:70:5c:41:18:d0: 9a:a4:85:82:8f:09:9b:c7:8b:f9:49:19:3e:0e:75:cf:03:00: c6:20:2e:6d:20:15:cb:b0:ee:e2:aa:d0:20:e2:1f:c3:60:7f: 1a:29:16:2c:bd:38:e5:e5:18:e8:ba:0d:4a:01:1e:3e:88:72: 5e:16:0f:35:c5:2a:11:93:66:f3:bb:b6:a5:dd:30:48:23:b4: 40:0f:41:e7:ce:24:0e:cd:b7:d1:cc:98:c1:8c:b8:08:0a:cb: b9:cd:bb:1a:65:bb:1f:6f:12:f7:bb:2f:e4:92:6d:37:60:64: 62:c8:72:70:27:8b:37:92:d4:71:dd:eb:ad:86:37:ae:98:a5: 29:4b:99:81:fc:82:7c:91:98:3e:b5:57:a9:f4:cc:d7:32:d2: 97:f1:20:81:9d:10:6e:07:3c:63:80:e6:79:69:e1:f3:c1:90: 74:a9:5e:d8:28:5c:a8:42:c0:fc:9c:d7:58:60:68:da:03:21: 03:8d:b4:de:eb:5f:52:92:17:3b:71:38:8f:07:de:18:33:57: 01:0d:cf:1f:ef:d8:da:f8:3f:49:3b:fc:5d:1f:4f:25:a5:07: 1b:1b:9a:fc -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfx8TtZ/swCd+G5cu+GTVYLkS8YAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI0WhcNMjYwNjE1MDg1MjI0 WjAzMTEwLwYDVQQDEygzMzhBRkFEQUQ4NDFFNUNEMkRDOUY5Q0UzOUVBMTE5ODAw RThFRjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfIooyE78GmK d5k5/pF9c5TW0wLXkyMTgDiUihG1VzCXJVNHMQ2Z2imrJzUy4cH5AtRVpQNtV3Sy T1vNqpQHGtyV+rA+lzIgPl6CYoCy81A5hTBGollTmUX0GRXM7ZGTk013TgAKtoA6 Wtw5l/UFqtm7W7GLI7ACGyOAz9B3i/z4WKqwNaS3bLH8VZKK2FZyMCvn2t0Ycy80 HBB5HSy+HPg1oC+F3hh4bs8JmHYkY4SpRlgzEd3HdL/jYPIjwl1BD0q9UjMyGx7q C/YfYlNCOQeKphvW7H10LmixotVTKFB0HX1qOZ2pEPR7iNm5lySHfA53BOf/k4Wb NuejwuuUcwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDOK+trYQeXNLcn5zjnqEZgA 6O9SMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzI2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzMzMzQzOTMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gLQMA0GCSqGSIb3DQEBCwUAA4IBAQBq3K1y/y62mj2EaKgUecsI 22U0utExq25GRNuo6AxZcFxBGNCapIWCjwmbx4v5SRk+DnXPAwDGIC5tIBXLsO7i qtAg4h/DYH8aKRYsvTjl5Rjoug1KAR4+iHJeFg81xSoRk2bzu7al3TBII7RAD0Hn ziQOzbfRzJjBjLgICsu5zbsaZbsfbxL3uy/kkm03YGRiyHJwJ4s3ktRx3euthjeu mKUpS5mB/IJ8kZg+tVep9MzXMtKX8SCBnRBuBzxjgOZ5aeHzwZB0qV7YKFyoQsD8 nNdYYGjaAyEDjbTe619Skhc7cTiPB94YM1cBDc8f79ja+D9JO/xdH08lpQcbG5r8 -----END CERTIFICATE-----Generated at Mon Jun 16 16:50:18 2025 by rpki-client