$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa File: 323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa (raw, json) Hash identifier: cKtYuVlTLxkjLbO5B1s+/5KPZ4ZN4ocFmOzAdop6UBc= Subject key identifier: 58:20:8B:C1:44:63:BA:E4:2F:43:72:0A:A5:1F:84:F3:4C:F5:EB:CD Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 51AE62436373E478C3F626A05A28DE3CCE38F588 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa Signing time: Mon 16 Jun 2025 08:52:28 +0000 ROA not before: Mon 16 Jun 2025 08:47:28 +0000 ROA not after: Mon 15 Jun 2026 08:52:28 +0000 asID: 138919 IP address blocks: 2602:feda:af7::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ae:62:43:63:73:e4:78:c3:f6:26:a0:5a:28:de:3c:ce:38:f5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:28 2025 GMT Not After : Jun 15 08:52:28 2026 GMT Subject: CN=58208BC14463BAE42F43720AA51F84F34CF5EBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:3a:f4:63:df:2f:54:4f:2f:9a:ce:87:12: d0:94:e1:a3:16:25:32:59:2c:e1:d1:66:3e:b6:fa: f7:7c:01:2b:b8:89:80:00:32:26:ef:e0:ec:f8:e2: a1:91:08:dc:0d:1b:a0:33:88:be:7d:83:43:df:0d: b9:37:8c:09:33:94:e3:da:35:ff:10:b3:2b:9b:74: fd:7b:4e:30:f8:34:06:86:35:19:21:09:49:46:83: e1:01:49:bf:cc:27:5f:dd:1b:9c:16:36:29:2f:78: 5e:0f:bd:68:b8:e1:4b:32:38:93:8b:28:e3:43:fa: 15:44:40:2d:6a:05:68:31:e1:e3:96:37:ae:99:79: 32:54:9e:a9:e8:07:58:74:65:72:80:64:d9:ee:87: 0b:6d:cf:93:1c:38:ac:f0:1e:74:e5:52:d8:67:bf: 7f:c9:a6:6c:aa:ca:c5:8f:98:3c:47:ba:50:56:ce: ec:31:76:66:8e:3c:b9:37:ab:f0:44:2d:09:7d:36: 13:a6:09:8a:ce:71:7a:2d:b1:92:fc:42:5e:46:de: fe:d7:46:ea:89:49:bf:38:4d:3a:c3:82:1d:1b:6e: 5a:04:be:a2:77:bb:1a:0a:a5:99:b1:d5:1d:f5:36: 4f:fb:61:b4:37:75:10:33:91:79:cb:6f:37:b6:25: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:20:8B:C1:44:63:BA:E4:2F:43:72:0A:A5:1F:84:F3:4C:F5:EB:CD X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:af7::/48 Signature Algorithm: sha256WithRSAEncryption 74:9f:10:62:da:bc:36:f0:03:15:48:ad:f8:db:6a:55:03:9d: 88:26:8a:0d:9c:55:f3:32:c5:98:cd:e4:bc:59:c9:70:9d:a2: ac:1b:7c:0f:f0:60:c8:41:20:bf:de:f2:12:1d:a5:1f:22:d7: 99:c3:6a:4c:8c:97:1b:2e:51:84:4d:13:3e:97:41:9d:31:13: ce:91:42:d6:2b:8e:3e:5d:4c:4c:4b:8b:23:e8:ca:fe:7f:d2: 6a:9c:5d:eb:f4:86:41:81:4a:8b:54:b0:93:2b:a2:37:99:68: a3:17:bd:12:b4:18:a9:f9:28:4d:de:2e:a1:48:22:a4:74:c8: 09:b7:9c:5d:ff:ae:61:33:e4:93:72:39:85:55:23:f0:ed:c8: 6d:f3:d2:77:24:63:41:67:80:2e:23:b9:cd:69:21:32:fa:64: fb:46:fa:3e:8c:6c:db:36:c9:74:2a:a3:17:ce:01:a4:94:19: 83:53:a9:66:52:74:2d:6c:ec:3a:fc:02:b0:66:0e:c6:b2:21: 92:96:0f:f9:8c:32:15:8f:7d:f4:32:55:e8:cd:4d:b9:59:d5: a0:aa:3f:98:5c:22:bd:ed:d1:55:c0:b7:7f:84:19:9b:5f:a8: be:b8:4b:9d:fb:95:30:6f:e9:46:1f:a2:03:79:d1:dd:16:eb: f9:cf:80:14 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUUa5iQ2Nz5HjD9iagWijePM449YgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI4WhcNMjYwNjE1MDg1MjI4 WjAzMTEwLwYDVQQDEyg1ODIwOEJDMTQ0NjNCQUU0MkY0MzcyMEFBNTFGODRGMzRD RjVFQkNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxno69GPfL1RP L5rOhxLQlOGjFiUyWSzh0WY+tvr3fAEruImAADIm7+Ds+OKhkQjcDRugM4i+fYND 3w25N4wJM5Tj2jX/ELMrm3T9e04w+DQGhjUZIQlJRoPhAUm/zCdf3RucFjYpL3he D71ouOFLMjiTiyjjQ/oVREAtagVoMeHjljeumXkyVJ6p6AdYdGVygGTZ7ocLbc+T HDis8B505VLYZ79/yaZsqsrFj5g8R7pQVs7sMXZmjjy5N6vwRC0JfTYTpgmKznF6 LbGS/EJeRt7+10bqiUm/OE06w4IdG25aBL6id7saCqWZsdUd9TZP+2G0N3UQM5F5 y283tiWviQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFggi8FEY7rkL0NyCqUfhPNM 9evNMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NjM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzkzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gr3MA0GCSqGSIb3DQEBCwUAA4IBAQB0nxBi2rw28AMVSK3422pV A52IJooNnFXzMsWYzeS8WclwnaKsG3wP8GDIQSC/3vISHaUfIteZw2pMjJcbLlGE TRM+l0GdMRPOkULWK44+XUxMS4sj6Mr+f9JqnF3r9IZBgUqLVLCTK6I3mWijF70S tBip+ShN3i6hSCKkdMgJt5xd/65hM+STcjmFVSPw7cht89J3JGNBZ4AuI7nNaSEy +mT7Rvo+jGzbNsl0KqMXzgGklBmDU6lmUnQtbOw6/AKwZg7GsiGSlg/5jDIVj330 MlXozU25WdWgqj+YXCK97dFVwLd/hBmbX6i+uEud+5Uwb+lGH6IDedHdFuv5z4AU -----END CERTIFICATE-----Generated at Mon Jun 16 23:39:53 2025 by rpki-client