$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa File: 323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa (raw, json) Hash identifier: S2o+MgK+dxUy2hG48iVcsKhA61VNz9yZyiOPP1IVjug= Subject key identifier: 41:FC:8C:D2:61:68:2F:D8:49:49:9B:2D:99:3B:96:7D:BE:04:28:8B Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 722DA5F8BE08E9A2935AF4A416E87A4D8A5D0DE6 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa Signing time: Mon 16 Jun 2025 08:52:29 +0000 ROA not before: Mon 16 Jun 2025 08:47:29 +0000 ROA not after: Mon 15 Jun 2026 08:52:29 +0000 asID: 212705 IP address blocks: 2602:feda:b70::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2d:a5:f8:be:08:e9:a2:93:5a:f4:a4:16:e8:7a:4d:8a:5d:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:29 2025 GMT Not After : Jun 15 08:52:29 2026 GMT Subject: CN=41FC8CD261682FD849499B2D993B967DBE04288B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:b9:f7:fb:85:eb:26:19:80:a2:5c:a3:04: 72:d7:12:35:e6:14:c0:7c:8e:20:58:c3:d9:18:80: f2:bd:b7:59:8b:97:8d:2e:77:f7:ee:77:45:78:74: aa:4d:db:c9:19:36:aa:f1:ad:59:85:dc:34:3b:77: c1:f7:4f:a0:8d:d4:1e:e3:88:c7:f3:75:21:0d:d8: d1:17:a5:47:0e:45:02:24:7b:1a:23:94:ac:f7:00: a1:e3:6f:f8:8b:1d:83:d8:b6:76:fa:4d:7e:60:7e: 21:34:59:f6:47:41:2f:67:ca:12:c9:e3:1e:f5:2f: 48:6a:e8:b5:12:26:78:c3:c3:01:35:36:1f:5d:dc: 8f:c4:7f:79:b8:96:85:01:f0:a9:17:3c:db:b5:68: 10:83:64:96:4e:66:d4:c2:fb:70:83:66:f8:96:7c: 32:f5:5c:df:e4:66:2b:97:14:28:f1:62:3e:6c:ae: 5b:56:92:03:bd:6d:93:65:18:91:5a:2b:20:57:62: 27:21:72:43:f3:74:86:23:91:4f:6c:17:da:9b:f9: 46:35:18:7d:6d:7e:18:25:18:04:1e:ea:ec:df:6f: 5e:48:10:71:4d:7b:3b:91:b1:18:4f:74:9b:d3:fe: 19:37:4c:41:06:1c:3d:d1:d1:12:5b:a3:8a:52:77: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:8C:D2:61:68:2F:D8:49:49:9B:2D:99:3B:96:7D:BE:04:28:8B X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b70::/44 Signature Algorithm: sha256WithRSAEncryption 61:56:79:37:ad:3c:41:9c:f5:04:33:66:fa:57:ae:2a:b9:ea: 36:31:0a:80:c0:0f:52:18:c4:66:76:d0:e5:d8:15:ff:cb:a3: 50:38:d2:97:dd:f1:5f:2d:bb:59:89:0a:67:23:38:ca:09:02: f2:9e:16:53:04:b4:48:58:59:82:e8:b9:0a:bc:8b:d1:cd:84: 78:21:36:cd:88:78:9a:5d:3a:cb:4f:d1:b8:bd:7d:20:1f:fc: f5:48:1c:c1:cb:8d:59:73:d8:1c:69:5c:8b:83:c6:55:4d:77: bc:79:2c:0f:ea:1f:d0:4e:9c:76:83:be:2e:5a:ef:05:cc:1e: 7d:32:c9:3a:71:67:1d:ec:12:f3:e3:f4:ce:be:e6:a2:12:df: 25:5a:fe:75:20:8a:cc:1f:a3:38:80:1e:60:11:f2:ab:2d:75: 6f:1a:88:8f:cd:11:f7:38:0b:a2:a7:88:58:09:92:39:0e:9a: 16:7d:8f:4b:c2:63:36:90:35:c2:45:72:18:c9:11:9b:f6:8b: d3:71:29:9c:dc:f4:e7:65:b7:ca:a9:80:c5:aa:b5:b0:ca:3b: 24:c3:83:13:55:9b:82:82:c8:93:e0:0a:2b:0e:7b:67:cb:3a: ae:31:e5:7d:28:71:c6:b0:ab:ad:e9:59:99:92:50:30:04:47: ae:8b:f6:40 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUci2l+L4I6aKTWvSkFuh6TYpdDeYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI5WhcNMjYwNjE1MDg1MjI5 WjAzMTEwLwYDVQQDEyg0MUZDOENEMjYxNjgyRkQ4NDk0OTlCMkQ5OTNCOTY3REJF MDQyODhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jm59/uF6yYZ gKJcowRy1xI15hTAfI4gWMPZGIDyvbdZi5eNLnf37ndFeHSqTdvJGTaq8a1Zhdw0 O3fB90+gjdQe44jH83UhDdjRF6VHDkUCJHsaI5Ss9wCh42/4ix2D2LZ2+k1+YH4h NFn2R0EvZ8oSyeMe9S9Iaui1EiZ4w8MBNTYfXdyPxH95uJaFAfCpFzzbtWgQg2SW TmbUwvtwg2b4lnwy9Vzf5GYrlxQo8WI+bK5bVpIDvW2TZRiRWisgV2InIXJD83SG I5FPbBfam/lGNRh9bX4YJRgEHurs329eSBBxTXs7kbEYT3Sb0/4ZN0xBBhw90dES W6OKUnexOwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEH8jNJhaC/YSUmbLZk7ln2+ BCiLMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzczMDM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gtwMA0GCSqGSIb3DQEBCwUAA4IBAQBhVnk3rTxBnPUEM2b6V64q ueo2MQqAwA9SGMRmdtDl2BX/y6NQONKX3fFfLbtZiQpnIzjKCQLynhZTBLRIWFmC 6LkKvIvRzYR4ITbNiHiaXTrLT9G4vX0gH/z1SBzBy41Zc9gcaVyLg8ZVTXe8eSwP 6h/QTpx2g74uWu8FzB59Msk6cWcd7BLz4/TOvuaiEt8lWv51IIrMH6M4gB5gEfKr LXVvGoiPzRH3OAuip4hYCZI5DpoWfY9LwmM2kDXCRXIYyRGb9ovTcSmc3PTnZbfK qYDFqrWwyjskw4MTVZuCgsiT4AorDntnyzquMeV9KHHGsKut6VmZklAwBEeui/ZA -----END CERTIFICATE-----Generated at Mon Jun 16 14:07:44 2025 by rpki-client