$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa File: 323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa (raw, json) Hash identifier: WZiwOVMHSiUKlLzJbKcNnapzM8kJWaz8537cH+JWaIw= Subject key identifier: 08:6A:8B:74:94:23:13:9B:5F:0C:78:43:07:1D:49:95:B5:AB:29:26 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 439CF16BEA3D422D7A6E2B65446417942114A255 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa Signing time: Mon 16 Jun 2025 08:52:24 +0000 ROA not before: Mon 16 Jun 2025 08:47:24 +0000 ROA not after: Mon 15 Jun 2026 08:52:24 +0000 asID: 146950 IP address blocks: 2602:feda:b60::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9c:f1:6b:ea:3d:42:2d:7a:6e:2b:65:44:64:17:94:21:14:a2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:24 2025 GMT Not After : Jun 15 08:52:24 2026 GMT Subject: CN=086A8B749423139B5F0C7843071D4995B5AB2926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:27:6b:89:3c:6a:6e:57:d8:83:b6:30:f8: ef:59:8d:ef:c2:32:36:90:b8:15:17:16:c1:1f:f2: 68:80:9a:a0:1b:90:d0:30:ed:8e:d5:f0:07:fe:f1: c3:36:8e:bb:48:65:f4:ec:41:5c:4e:ff:a6:c2:ab: ff:17:f0:d3:07:6b:dd:94:2a:db:d5:24:da:30:d7: 2d:30:6e:6d:f3:11:cb:b3:c0:f3:bf:92:2c:8d:b0: f4:21:9a:c2:f6:d1:22:cb:c6:2c:05:33:47:7d:58: 3b:bd:b8:92:aa:40:9c:43:dd:bc:5a:1e:14:cd:cb: 0f:83:96:a7:0d:ca:ce:1b:37:b5:f6:a4:45:b4:b7: 4e:3c:0a:b3:52:b4:80:19:ec:6a:49:6e:96:dc:1e: 48:8d:e9:e9:32:08:4e:f7:e5:57:1b:77:d2:09:58: 3f:21:be:8d:66:7e:26:1d:c1:60:fe:01:56:d6:da: 9f:80:ee:b6:20:90:20:da:03:35:c2:a2:a3:7b:ce: de:9b:60:ac:4c:03:54:65:3f:00:b3:53:98:fe:37: af:40:da:70:f1:b4:3d:50:f2:64:32:86:9a:9a:38: e0:f1:cc:d8:20:15:bc:b9:23:d5:ae:be:e1:fc:60: 7a:e6:45:f0:c0:ec:1e:a0:28:bb:f2:49:e6:aa:ff: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6A:8B:74:94:23:13:9B:5F:0C:78:43:07:1D:49:95:B5:AB:29:26 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b60::/44 Signature Algorithm: sha256WithRSAEncryption 3e:e1:c1:fe:f0:a3:bc:b4:0e:1c:10:91:62:bc:e7:4b:4c:66: 0b:f2:d1:9d:98:51:2d:30:58:b5:1e:83:62:97:1e:46:2d:de: bb:5b:c9:b1:3b:c9:7c:a8:aa:9e:29:d5:d1:7f:5c:a4:0e:6b: a9:62:e5:5a:ea:0a:d2:6a:4a:f2:03:49:ba:79:34:2a:15:5a: 83:c9:8c:96:f8:2a:a8:fd:ad:c0:8f:0a:9d:4a:89:67:c9:c8: 90:09:55:c2:5a:87:75:8a:e8:a3:b9:f5:9f:11:e8:35:8f:dd: e2:4a:22:07:67:23:5d:3e:d4:6d:40:c7:7d:18:75:40:f5:28: ee:8f:65:cb:9a:35:85:eb:38:0f:ef:d3:d8:a0:92:f3:0c:3c: 6d:29:f6:e5:09:ec:de:bc:4f:b3:7e:ce:c6:59:88:55:9a:84: db:bd:b9:6d:4d:b8:73:44:87:f1:4e:8e:62:19:b0:1d:7a:56: dd:58:a5:f5:ba:51:e5:c1:3b:8b:c1:ce:48:2e:64:a5:24:16: ef:fc:20:85:16:51:ee:1d:6b:a5:f5:8f:b2:1f:77:05:f7:ce: ae:e9:0b:aa:c3:34:9a:4d:81:4a:3c:73:ca:d6:66:75:b4:04: 10:7e:6f:b4:8d:b7:fa:d5:3f:60:87:8e:ba:55:48:0d:e3:a5: 74:13:19:2b -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUQ5zxa+o9Qi16bitlRGQXlCEUolUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI0WhcNMjYwNjE1MDg1MjI0 WjAzMTEwLwYDVQQDEygwODZBOEI3NDk0MjMxMzlCNUYwQzc4NDMwNzFENDk5NUI1 QUIyOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpona4k8am5X 2IO2MPjvWY3vwjI2kLgVFxbBH/JogJqgG5DQMO2O1fAH/vHDNo67SGX07EFcTv+m wqv/F/DTB2vdlCrb1STaMNctMG5t8xHLs8Dzv5IsjbD0IZrC9tEiy8YsBTNHfVg7 vbiSqkCcQ928Wh4UzcsPg5anDcrOGze19qRFtLdOPAqzUrSAGexqSW6W3B5Ijenp MghO9+VXG3fSCVg/Ib6NZn4mHcFg/gFW1tqfgO62IJAg2gM1wqKje87em2CsTANU ZT8As1OY/jevQNpw8bQ9UPJkMoaamjjg8czYIBW8uSPVrr7h/GB65kXwwOweoCi7 8knmqv9dJwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAhqi3SUIxObXwx4QwcdSZW1 qykmMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM2MzkzNTMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gtgMA0GCSqGSIb3DQEBCwUAA4IBAQA+4cH+8KO8tA4cEJFivOdL TGYL8tGdmFEtMFi1HoNilx5GLd67W8mxO8l8qKqeKdXRf1ykDmupYuVa6grSakry A0m6eTQqFVqDyYyW+Cqo/a3AjwqdSolnyciQCVXCWod1iuijufWfEeg1j93iSiIH ZyNdPtRtQMd9GHVA9Sjuj2XLmjWF6zgP79PYoJLzDDxtKfblCezevE+zfs7GWYhV moTbvbltTbhzRIfxTo5iGbAdelbdWKX1ulHlwTuLwc5ILmSlJBbv/CCFFlHuHWul 9Y+yH3cF986u6QuqwzSaTYFKPHPK1mZ1tAQQfm+0jbf61T9gh466VUgN46V0Exkr -----END CERTIFICATE-----Generated at Mon Jun 16 19:23:42 2025 by rpki-client