$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa File: 323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa (raw, json) Hash identifier: jLeCMtioQLxxwDZEKODIz8zbJGsLfyOHNEJ8NdX7hNY= Subject key identifier: 73:C2:9E:70:2F:C2:FA:CA:11:5F:43:A1:BD:70:10:32:AB:8E:3D:6C Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 26F360F36224182593F0D18438E25B227FE4B423 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 133492 IP address blocks: 2602:feda:2f0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f3:60:f3:62:24:18:25:93:f0:d1:84:38:e2:5b:22:7f:e4:b4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=73C29E702FC2FACA115F43A1BD701032AB8E3D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:7d:a4:ea:71:c7:22:af:6c:1d:47:bf:65: 70:3b:c0:65:99:b8:74:72:b6:ad:4e:bf:c3:d6:f1: b6:b8:6c:70:6f:05:d8:b0:8c:d2:5c:fe:3f:48:d9: 61:58:40:7f:05:de:4a:06:56:27:f6:a8:75:81:8f: 33:10:0b:70:a5:5f:f9:c0:a4:90:34:cf:5e:97:50: 9a:56:31:74:ca:99:3d:22:c9:cd:9e:e6:bf:58:9f: 16:aa:55:8c:d0:17:7d:32:3f:85:47:a2:64:6b:07: 24:38:35:14:c2:84:44:2b:2a:68:9e:cb:0d:f2:d0: 4e:34:8c:8c:ac:b6:28:37:18:27:59:5f:23:e0:dc: 8f:60:e8:49:80:49:6e:af:7a:64:44:5f:f9:ce:91: d2:6a:c9:bb:cf:d3:b0:fd:d3:dc:f5:0c:fe:1c:2a: 41:bc:5e:76:ea:1e:76:fb:12:1d:35:14:fe:6d:db: 99:86:38:0c:a9:ad:2a:eb:82:98:f0:80:7b:21:47: 80:9b:64:5e:9d:db:b8:82:cd:65:43:b9:b5:d1:d3: 79:c4:06:57:91:4b:51:06:7a:61:68:90:8d:1e:88: 2b:0d:99:57:2e:1d:4e:52:ca:f3:99:73:24:42:72: a2:02:c5:32:0b:be:cd:19:b6:cc:96:45:27:4c:f9: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C2:9E:70:2F:C2:FA:CA:11:5F:43:A1:BD:70:10:32:AB:8E:3D:6C X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:2f0::/44 Signature Algorithm: sha256WithRSAEncryption aa:f0:d2:08:75:51:0c:8f:96:63:2d:77:f9:69:ab:93:72:a4: be:dc:46:6a:06:26:2d:2f:f2:3f:a6:c9:cb:ed:7e:e8:cb:fb: a2:a6:b2:e2:56:e8:66:eb:72:c7:33:e9:95:a4:ed:59:7a:5b: 0b:89:b3:ab:ed:2f:ee:e2:61:5b:da:46:43:de:72:a5:a4:5f: 82:83:4f:ee:9f:db:90:b5:4f:97:f4:a2:07:be:aa:0e:29:90: 70:0a:c3:aa:77:11:8d:96:9f:23:9b:64:30:83:0a:14:4e:88: 9a:9b:76:ec:50:00:d3:47:df:d3:40:92:a5:6b:9b:d7:34:15: 6b:62:74:e4:de:db:06:de:88:80:10:ca:e2:11:a2:3a:ae:b2: e8:ec:ed:af:fe:b9:ac:ff:ec:1d:10:22:e8:62:8f:9c:86:6d: e3:10:4d:6b:88:04:1f:a5:16:5d:e2:c8:4f:8f:c8:c1:83:c4: 2e:e7:32:31:0a:da:f4:57:90:ad:4e:7e:de:13:93:c1:2d:be: 1b:5b:a0:bf:32:12:21:2a:44:21:8f:a9:f0:74:db:3a:aa:4c: 14:04:0d:ad:41:ff:a8:af:7e:b5:02:54:d6:30:7a:18:b9:5d: e2:66:d2:6a:f9:bc:97:2a:3a:29:0b:67:9d:42:87:61:6f:56: 6b:cf:5c:c5 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUJvNg82IkGCWT8NGEOOJbIn/ktCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEyg3M0MyOUU3MDJGQzJGQUNBMTE1RjQzQTFCRDcwMTAzMkFC OEUzRDZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6B9pOpxxyKv bB1Hv2VwO8Blmbh0cratTr/D1vG2uGxwbwXYsIzSXP4/SNlhWEB/Bd5KBlYn9qh1 gY8zEAtwpV/5wKSQNM9el1CaVjF0ypk9IsnNnua/WJ8WqlWM0Bd9Mj+FR6Jkawck ODUUwoREKyponssN8tBONIyMrLYoNxgnWV8j4NyPYOhJgElur3pkRF/5zpHSasm7 z9Ow/dPc9Qz+HCpBvF526h52+xIdNRT+bduZhjgMqa0q64KY8IB7IUeAm2Rendu4 gs1lQ7m10dN5xAZXkUtRBnphaJCNHogrDZlXLh1OUsrzmXMkQnKiAsUyC77NGbbM lkUnTPm6dQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHPCnnAvwvrKEV9Dob1wEDKr jj1sMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzI2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzMzMzQzOTMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gLwMA0GCSqGSIb3DQEBCwUAA4IBAQCq8NIIdVEMj5ZjLXf5aauT cqS+3EZqBiYtL/I/psnL7X7oy/uiprLiVuhm63LHM+mVpO1ZelsLibOr7S/u4mFb 2kZD3nKlpF+Cg0/un9uQtU+X9KIHvqoOKZBwCsOqdxGNlp8jm2QwgwoUToiam3bs UADTR9/TQJKla5vXNBVrYnTk3tsG3oiAEMriEaI6rrLo7O2v/rms/+wdECLoYo+c hm3jEE1riAQfpRZd4shPj8jBg8Qu5zIxCtr0V5CtTn7eE5PBLb4bW6C/MhIhKkQh j6nwdNs6qkwUBA2tQf+or361AlTWMHoYuV3iZtJq+byXKjopC2edQodhb1Zrz1zF -----END CERTIFICATE-----Generated at Tue Jun 17 01:15:47 2025 by rpki-client