$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa File: 323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa (raw, json) Hash identifier: lqbN25cW8hcibewtamjl87MbSmHMeVQ698/5pVqNVKs= Subject key identifier: 5D:AB:16:A5:3D:E4:89:53:EA:59:43:42:69:0A:BD:22:F2:85:82:32 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 308A4F7BCF17277DE8CD0381C78A565302A15754 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa Signing time: Mon 16 Jun 2025 08:52:26 +0000 ROA not before: Mon 16 Jun 2025 08:47:26 +0000 ROA not after: Mon 15 Jun 2026 08:52:26 +0000 asID: 140913 IP address blocks: 2602:feda:ae6::/47 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8a:4f:7b:cf:17:27:7d:e8:cd:03:81:c7:8a:56:53:02:a1:57:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:26 2025 GMT Not After : Jun 15 08:52:26 2026 GMT Subject: CN=5DAB16A53DE48953EA594342690ABD22F2858232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:e1:91:0b:93:11:a9:be:83:2d:01:07:3a: fe:60:9c:b1:08:8b:86:03:de:fd:7d:41:5c:55:92: 8d:8e:ba:60:5d:ec:7e:97:3c:46:4b:61:38:15:82: 37:4f:1f:72:5c:51:ce:5c:74:90:a5:91:02:43:1f: 60:da:3e:58:99:97:a6:ea:4d:72:cb:f5:13:5f:4e: 27:02:c1:03:13:66:df:4f:86:90:77:ba:05:77:ca: 65:b4:b3:3c:e0:9e:3d:61:e9:7e:40:28:d4:bf:1b: 7d:8b:31:ea:f7:5f:49:06:1c:52:46:66:b6:ff:46: 87:8d:28:62:fb:17:01:e2:bb:ff:5b:75:e8:c6:bf: 84:aa:84:e3:c4:3a:aa:52:92:e7:7d:67:65:bf:f6: 7e:61:fe:71:cb:24:0d:51:81:37:be:a1:aa:3b:e4: 1b:e7:94:6a:b8:a8:bd:23:c3:fb:e2:3f:1b:10:60: 4e:eb:d3:ee:1a:ef:86:f5:b7:c0:24:3a:7d:bd:a0: 00:d3:d5:8d:8c:d3:f0:d9:2f:ce:b2:19:31:3a:7f: 1a:85:af:69:0d:72:13:67:cb:99:b4:57:65:ed:e6: 0c:e5:52:7b:52:79:0d:b9:7e:77:56:67:f7:4c:b2: a8:57:76:13:8c:47:3a:13:3f:59:c6:5c:22:cc:d8: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:16:A5:3D:E4:89:53:EA:59:43:42:69:0A:BD:22:F2:85:82:32 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae6::/47 Signature Algorithm: sha256WithRSAEncryption 58:67:7c:58:7b:0a:a5:17:c5:d9:d0:ae:31:e7:33:92:65:4c: c5:85:93:ac:18:99:6c:35:46:4a:c3:9e:b4:78:bf:92:2c:c3: 3e:c3:ff:2c:1e:94:b0:92:9e:62:15:45:7f:50:5f:43:6c:5c: 06:e3:18:ec:ff:91:a7:0f:e1:3f:ff:71:fc:10:33:7a:3e:58: 5b:b3:9c:56:f5:c2:95:4d:c0:e6:07:48:c2:30:45:e3:04:5f: d3:4e:80:cd:78:b8:07:4f:68:a4:f7:41:88:2b:51:5c:b7:61: 28:d5:cf:d1:36:34:ce:f5:c6:fa:13:9e:06:07:81:50:f6:ae: 0b:73:22:24:fd:19:f2:5d:1f:12:6a:f4:8b:82:f1:2a:55:64: ed:96:be:d7:02:dd:57:57:d7:27:35:8e:eb:56:e2:f2:66:c1: 80:6b:0c:24:06:bf:15:45:61:29:3c:ac:f7:68:c7:8b:86:4c: 2c:d3:f0:1b:24:2e:d4:c7:0e:32:e5:09:1e:bf:5e:e6:d3:06: e1:2c:86:da:8a:9b:0d:84:5b:f2:02:0e:19:74:a6:99:34:d0: 78:d5:fd:01:09:5c:08:2f:ea:53:aa:26:fd:bc:95:4c:71:1f: 82:9b:d4:ca:8e:98:d9:2a:91:5c:1b:f5:d7:71:1a:84:0b:98: 98:7e:3b:89 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUMIpPe88XJ33ozQOBx4pWUwKhV1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI2WhcNMjYwNjE1MDg1MjI2 WjAzMTEwLwYDVQQDEyg1REFCMTZBNTNERTQ4OTUzRUE1OTQzNDI2OTBBQkQyMkYy ODU4MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiDhkQuTEam+ gy0BBzr+YJyxCIuGA979fUFcVZKNjrpgXex+lzxGS2E4FYI3Tx9yXFHOXHSQpZEC Qx9g2j5YmZem6k1yy/UTX04nAsEDE2bfT4aQd7oFd8pltLM84J49Yel+QCjUvxt9 izHq919JBhxSRma2/0aHjShi+xcB4rv/W3Xoxr+EqoTjxDqqUpLnfWdlv/Z+Yf5x yyQNUYE3vqGqO+Qb55RquKi9I8P74j8bEGBO69PuGu+G9bfAJDp9vaAA09WNjNPw 2S/OshkxOn8aha9pDXITZ8uZtFdl7eYM5VJ7UnkNuX53Vmf3TLKoV3YTjEc6Ez9Z xlwizNjUXwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFF2rFqU95IlT6llDQmkKvSLy hYIyMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NTM2M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzNDMwMzkzMTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcBJgL+2grmMA0GCSqGSIb3DQEBCwUAA4IBAQBYZ3xYewqlF8XZ0K4x5zOS ZUzFhZOsGJlsNUZKw560eL+SLMM+w/8sHpSwkp5iFUV/UF9DbFwG4xjs/5GnD+E/ /3H8EDN6Plhbs5xW9cKVTcDmB0jCMEXjBF/TToDNeLgHT2ik90GIK1Fct2Eo1c/R NjTO9cb6E54GB4FQ9q4LcyIk/RnyXR8SavSLgvEqVWTtlr7XAt1XV9cnNY7rVuLy ZsGAawwkBr8VRWEpPKz3aMeLhkws0/AbJC7Uxw4y5Qkev17m0wbhLIbaipsNhFvy Ag4ZdKaZNNB41f0BCVwIL+pTqib9vJVMcR+Cm9TKjpjZKpFcG/XXcRqEC5iYfjuJ -----END CERTIFICATE-----Generated at Mon Jun 16 19:29:46 2025 by rpki-client