$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa File: 323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa (raw, json) Hash identifier: olkqUGo0h7sbcgGpDxLUV4nqOQdjGFeVwmsu3AdnMNA= Subject key identifier: 69:75:4C:01:A6:19:10:04:E5:73:81:D8:44:C9:D9:4D:45:56:3A:E3 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 24FFBB13B173B10B2A9CA7A80250B0D9ADA205D9 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa Signing time: Mon 16 Jun 2025 08:52:27 +0000 ROA not before: Mon 16 Jun 2025 08:47:27 +0000 ROA not after: Mon 15 Jun 2026 08:52:27 +0000 asID: 396303 IP address blocks: 2602:feda:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ff:bb:13:b1:73:b1:0b:2a:9c:a7:a8:02:50:b0:d9:ad:a2:05:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:27 2025 GMT Not After : Jun 15 08:52:27 2026 GMT Subject: CN=69754C01A6191004E57381D844C9D94D45563AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:ee:46:7a:af:18:8a:26:4b:0f:08:63:c8: df:89:a3:1d:27:a7:bd:47:28:ba:44:e6:6f:48:df: 3e:40:4b:0a:b9:f7:16:01:b6:6d:2a:58:5a:fa:0b: 73:88:2b:21:00:67:85:dc:d5:bf:06:3f:28:31:63: 36:df:4c:e6:96:75:0b:b4:80:e6:19:cb:3a:54:c6: 31:95:8f:46:32:24:93:c9:55:13:56:16:82:34:31: 67:3d:a5:f5:01:4a:9d:cb:86:92:c8:bf:1e:20:df: 75:fb:8a:51:9a:d3:37:34:78:41:34:49:be:a5:19: 70:60:cc:80:4e:56:a6:86:ee:28:0b:42:ec:05:9e: 8d:2d:a3:8b:85:cd:9a:33:d9:4d:33:03:dd:f6:a5: 34:05:49:98:57:b8:8e:a6:09:43:56:12:50:fe:b8: 6b:b4:0a:5a:66:82:b8:a5:09:61:30:0b:53:90:a0: 39:0b:66:5a:78:e4:db:76:55:2c:08:fb:a1:64:24: 0c:80:dc:04:76:bd:c1:c0:97:7e:4d:a9:15:ae:47: 68:87:c4:bd:e9:9a:6d:05:2f:63:67:e4:51:41:70: c8:8a:3d:56:ba:50:81:54:68:b2:22:8d:59:70:fc: 22:6a:2e:b7:48:79:48:2d:9b:ad:bf:bd:55:38:ad: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:75:4C:01:A6:19:10:04:E5:73:81:D8:44:C9:D9:4D:45:56:3A:E3 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:a4::/48 Signature Algorithm: sha256WithRSAEncryption 20:48:e0:a5:34:61:0b:d0:88:da:70:1d:f7:4f:59:70:8f:e1: e0:b8:5f:56:84:e6:e1:d1:37:50:81:0b:50:ab:c5:a5:2c:ba: 28:0f:4b:8c:e0:e3:4f:32:98:98:1a:52:9b:14:48:85:f2:a4: a2:b9:c1:ce:30:6b:3f:e5:c4:de:65:3c:d3:b5:85:2e:f8:81: 13:61:27:08:2b:54:d1:1e:69:49:f8:40:8c:f4:b2:ae:bd:c5: c3:2e:d3:63:65:a5:3f:78:14:55:d0:76:32:73:de:67:c5:d8: b9:83:60:ff:c2:d2:23:db:99:3b:b4:96:11:a7:9a:62:50:c6: 4b:d4:50:84:8f:b8:07:49:e6:e9:33:15:e5:e5:c6:78:cc:b5: 22:96:23:eb:5b:a7:c7:34:38:38:41:31:a1:b3:65:83:e9:c9: 04:e1:86:6b:eb:ff:fe:12:7f:8c:f5:ed:6f:ed:7a:d5:2e:0f: e7:f5:4c:c2:84:54:e2:7d:2f:b2:98:8a:7e:8f:c4:fb:d3:9b: ce:e2:3f:5f:bb:6f:2b:53:49:e8:c9:0b:6b:fc:d1:54:02:eb: 37:76:ee:36:ee:7c:ac:e2:97:29:82:34:88:7b:25:e7:d4:49: e6:31:65:86:9c:52:e6:89:76:f5:ea:a2:19:dc:22:86:b0:f8: 56:83:fd:a9 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUJP+7E7FzsQsqnKeoAlCw2a2iBdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI3WhcNMjYwNjE1MDg1MjI3 WjAzMTEwLwYDVQQDEyg2OTc1NEMwMUE2MTkxMDA0RTU3MzgxRDg0NEM5RDk0RDQ1 NTYzQUUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfbuRnqvGIom Sw8IY8jfiaMdJ6e9Ryi6ROZvSN8+QEsKufcWAbZtKlha+gtziCshAGeF3NW/Bj8o MWM230zmlnULtIDmGcs6VMYxlY9GMiSTyVUTVhaCNDFnPaX1AUqdy4aSyL8eIN91 +4pRmtM3NHhBNEm+pRlwYMyATlamhu4oC0LsBZ6NLaOLhc2aM9lNMwPd9qU0BUmY V7iOpglDVhJQ/rhrtApaZoK4pQlhMAtTkKA5C2ZaeOTbdlUsCPuhZCQMgNwEdr3B wJd+TakVrkdoh8S96ZptBS9jZ+RRQXDIij1WulCBVGiyIo1ZcPwiai63SHlILZut v71VOK2emQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFGl1TAGmGRAE5XOB2ETJ2U1F VjrjMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzMDMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2gCkMA0GCSqGSIb3DQEBCwUAA4IBAQAgSOClNGEL0IjacB33T1lwj+Hg uF9WhObh0TdQgQtQq8WlLLooD0uM4ONPMpiYGlKbFEiF8qSiucHOMGs/5cTeZTzT tYUu+IETYScIK1TRHmlJ+ECM9LKuvcXDLtNjZaU/eBRV0HYyc95nxdi5g2D/wtIj 25k7tJYRp5piUMZL1FCEj7gHSebpMxXl5cZ4zLUiliPrW6fHNDg4QTGhs2WD6ckE 4YZr6//+En+M9e1v7XrVLg/n9UzChFTifS+ymIp+j8T705vO4j9fu28rU0noyQtr /NFUAus3du427nys4pcpgjSIeyXn1EnmMWWGnFLmiXb16qIZ3CKGsPhWg/2p -----END CERTIFICATE-----Generated at Tue Jun 17 06:56:23 2025 by rpki-client