$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa File: 323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa (raw, json) Hash identifier: w5AzbFLWJlJhtvu7HDAKbw71Ab+Gmmsl+hAqphgJy4A= Subject key identifier: FD:DD:70:D1:77:73:0B:F9:27:49:A9:E0:96:DD:08:1D:64:1B:E7:69 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 307DF13AEAAA6585A3BC11215B9E40A786F220A0 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa Signing time: Mon 16 Jun 2025 08:52:30 +0000 ROA not before: Mon 16 Jun 2025 08:47:30 +0000 ROA not after: Mon 15 Jun 2026 08:52:30 +0000 asID: 40916 IP address blocks: 2602:feda:3a0::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7d:f1:3a:ea:aa:65:85:a3:bc:11:21:5b:9e:40:a7:86:f2:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:30 2025 GMT Not After : Jun 15 08:52:30 2026 GMT Subject: CN=FDDD70D177730BF92749A9E096DD081D641BE769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:45:94:d2:74:67:00:9c:26:2b:32:e0:e0: f8:60:f0:9f:65:6a:03:22:73:92:14:13:e1:68:ba: 8d:8f:6f:e9:de:39:72:cf:13:7d:5f:33:ea:01:6c: 92:51:7c:bb:97:65:a3:6f:fd:38:fa:60:0d:99:24: 9f:77:88:21:f2:89:11:69:70:f7:00:57:be:9a:bf: 72:e0:e8:0e:c1:84:53:20:30:dd:0e:f6:0f:cc:19: 5e:e6:f6:b6:0a:3b:9d:d4:15:5a:b9:c7:b5:19:59: 16:a9:6a:64:d7:c7:e9:89:09:ac:19:1c:98:95:bf: 63:92:53:0c:e0:5e:dd:eb:e1:55:9b:4a:8a:be:3f: f6:08:42:fd:93:57:c5:25:52:09:20:24:42:d3:60: e2:f2:c9:94:91:51:3f:d6:4e:89:9f:8e:9f:43:bc: 7c:88:3b:17:9f:0d:35:9a:60:b9:e0:a0:cb:7f:b8: 96:a7:95:62:fa:87:ce:b1:66:07:eb:08:2c:33:79: a6:8f:d0:25:2c:41:c4:79:9f:39:b0:37:a6:a3:c8: cd:f8:14:c8:e5:ca:a6:4f:d6:c8:0c:f5:24:cc:9c: f3:2b:51:ea:18:83:fb:35:43:35:2d:87:94:80:6d: fd:06:1e:ce:57:3c:d8:02:84:d0:03:ef:6c:93:b2: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DD:70:D1:77:73:0B:F9:27:49:A9:E0:96:DD:08:1D:64:1B:E7:69 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a0::/45 Signature Algorithm: sha256WithRSAEncryption c2:de:7f:d0:b0:cd:4c:e3:2c:49:a6:cb:29:15:39:84:77:c8: a5:16:d0:4d:c8:d0:eb:65:d2:97:91:33:bb:b8:28:99:85:d9: 81:25:a0:d5:71:24:4d:fd:c0:3a:37:e4:d9:c7:ca:d8:2d:30: 37:d9:87:4b:5c:c4:3f:25:d5:07:07:1e:f2:93:0f:8c:12:a1: 95:11:ae:b1:bc:28:4d:48:70:2b:57:70:56:c7:99:b6:62:3d: fd:cc:8f:39:56:9c:0b:81:42:04:6e:74:77:4b:af:a8:4d:4a: 83:98:d6:d6:fb:28:dd:90:9f:1e:a6:cb:8d:b0:01:54:db:f2: dd:25:41:0e:fa:00:30:12:8f:b0:a6:55:c0:38:4d:08:97:b7: f4:48:ee:77:23:e8:8f:63:e6:9b:aa:8e:5b:c3:13:09:b6:75: 66:8f:bf:58:61:26:b8:42:37:cd:98:f6:70:1a:5b:77:48:7c: 05:ef:5d:ce:63:83:bd:ce:87:f2:71:fc:67:a6:c9:7b:63:2c: ad:68:ed:08:ac:c3:af:8f:cd:93:56:ef:0c:f0:54:cd:17:8c: 12:f3:de:4b:40:b4:80:b3:ed:be:86:40:b2:7e:7e:be:0f:90: ba:86:a3:51:e0:4f:4e:49:5d:4d:f8:43:21:69:aa:87:69:8d: f4:eb:35:a9 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUMH3xOuqqZYWjvBEhW55Ap4byIKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw WjAzMTEwLwYDVQQDEyhGRERENzBEMTc3NzMwQkY5Mjc0OUE5RTA5NkREMDgxRDY0 MUJFNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfdFlNJ0ZwCc Jisy4OD4YPCfZWoDInOSFBPhaLqNj2/p3jlyzxN9XzPqAWySUXy7l2Wjb/04+mAN mSSfd4gh8okRaXD3AFe+mr9y4OgOwYRTIDDdDvYPzBle5va2Cjud1BVauce1GVkW qWpk18fpiQmsGRyYlb9jklMM4F7d6+FVm0qKvj/2CEL9k1fFJVIJICRC02Di8smU kVE/1k6Jn46fQ7x8iDsXnw01mmC54KDLf7iWp5Vi+ofOsWYH6wgsM3mmj9AlLEHE eZ85sDemo8jN+BTI5cqmT9bIDPUkzJzzK1HqGIP7NUM1LYeUgG39Bh7OVzzYAoTQ A+9sk7IjEQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFP3dcNF3cwv5J0mp4JbdCB1k G+dpMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MzYxMzAzYTNhMmYzNDM1MmQzNDM4MjAzZDNlMjAzNDMwMzkzMTM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcDJgL+2gOgMA0GCSqGSIb3DQEBCwUAA4IBAQDC3n/QsM1M4yxJpsspFTmEd8il FtBNyNDrZdKXkTO7uCiZhdmBJaDVcSRN/cA6N+TZx8rYLTA32YdLXMQ/JdUHBx7y kw+MEqGVEa6xvChNSHArV3BWx5m2Yj39zI85VpwLgUIEbnR3S6+oTUqDmNbW+yjd kJ8epsuNsAFU2/LdJUEO+gAwEo+wplXAOE0Il7f0SO53I+iPY+abqo5bwxMJtnVm j79YYSa4QjfNmPZwGlt3SHwF713OY4O9zofycfxnpsl7YyytaO0IrMOvj82TVu8M 8FTNF4wS895LQLSAs+2+hkCyfn6+D5C6hqNR4E9OSV1N+EMhaaqHaY306zWp -----END CERTIFICATE-----Generated at Mon Jun 16 11:17:35 2025 by rpki-client