$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa File: 323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa (raw, json) Hash identifier: BCaUXypZ9+woXpQbfGBQ26nEi5fquLvU8si155Qr1k0= Subject key identifier: AC:F3:7B:28:76:DF:1D:DE:83:F4:5C:CC:E9:59:37:6F:D1:C6:53:02 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6AA068D6BF4F30DEAC3E07BCCCF3E0D0AF2D45D3 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa Signing time: Mon 16 Jun 2025 08:52:31 +0000 ROA not before: Mon 16 Jun 2025 08:47:31 +0000 ROA not after: Mon 15 Jun 2026 08:52:31 +0000 asID: 207803 IP address blocks: 2602:feda:b80::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a0:68:d6:bf:4f:30:de:ac:3e:07:bc:cc:f3:e0:d0:af:2d:45:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:31 2025 GMT Not After : Jun 15 08:52:31 2026 GMT Subject: CN=ACF37B2876DF1DDE83F45CCCE959376FD1C65302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:83:0f:22:56:6f:6b:2e:f2:06:77:86:c5: b1:b3:ab:6b:0b:65:ca:05:18:9a:4d:f9:87:d4:7f: 98:64:2d:23:cf:0a:41:fa:e2:1f:1e:81:ef:e3:35: 52:0b:c6:08:f7:52:cb:94:be:70:21:f1:34:67:9b: 80:20:87:42:0a:14:af:32:0e:f5:72:fa:99:1f:7b: 99:f2:83:f0:7d:ab:00:11:b8:8d:3b:7d:bb:ad:10: c9:8a:63:1c:c8:ff:21:27:ee:fc:0d:4e:4e:3b:cb: 0c:38:c9:f4:26:3d:55:cf:07:78:86:51:ad:f4:a2: d1:49:b4:d4:1f:8b:70:73:7d:e8:a7:cf:bd:ae:c4: b5:73:74:44:3e:94:fa:a1:22:a9:c2:2a:e0:2d:59: fd:f4:85:7b:53:6a:10:1e:17:a1:c4:4b:df:ab:1c: 89:32:61:ac:3e:ef:9b:0d:62:a3:ec:b3:82:cc:97: 1c:59:24:a9:aa:17:61:c9:7f:18:c7:8c:ff:53:43: ff:62:05:51:42:26:60:8c:0f:0b:03:04:06:4d:6a: 64:f4:25:f6:ee:64:3a:89:8e:c4:db:20:a5:1e:a7: 7a:61:0c:73:4e:31:af:b2:01:d4:b1:52:23:36:bc: d5:f3:be:d1:b9:9f:6d:cb:04:89:ee:67:0a:98:2c: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:7B:28:76:DF:1D:DE:83:F4:5C:CC:E9:59:37:6F:D1:C6:53:02 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b80::/45 Signature Algorithm: sha256WithRSAEncryption 51:cb:04:ba:8c:06:9b:b1:d2:e3:88:68:2f:af:bc:b3:df:62: 39:75:45:0b:67:c2:f6:f1:2a:32:18:29:b5:e5:09:6f:c7:fa: d4:f1:13:60:bd:0e:33:01:b9:8e:c3:73:f4:6c:bd:03:d4:b3: f9:62:fe:72:5d:d1:65:ee:be:e8:24:43:f5:35:06:3d:cc:31: 06:f9:bc:cb:ef:db:03:25:2a:09:2c:5a:14:51:49:86:2b:cb: a7:ba:e5:d3:bd:81:68:13:60:60:a1:33:9d:38:ad:97:5d:01: 06:61:95:31:9e:c1:2f:22:6c:55:99:b7:2a:04:f9:e1:db:0e: 9f:fe:15:eb:ed:ff:cb:35:7a:53:6f:06:a9:6e:af:4a:5d:0e: 80:58:6a:87:23:d1:36:98:61:55:51:eb:30:f3:7b:ff:78:e7: 9b:5e:08:70:3c:38:a7:70:98:9f:db:02:c1:e8:15:40:4e:a3: 6c:db:a2:aa:63:85:02:2b:fd:81:96:c6:7e:fc:a9:f8:f8:1f: 23:a5:63:b9:07:a6:0a:a5:0f:01:f6:06:a5:e3:5c:e3:62:dc: 70:b5:6a:49:ae:f6:5b:48:07:1d:51:51:9e:15:c0:2f:9b:fc: 26:c5:7a:bc:a8:bc:35:98:a4:63:dc:73:bc:bf:98:24:24:45: e9:8d:8d:70 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUaqBo1r9PMN6sPge8zPPg0K8tRdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMxWhcNMjYwNjE1MDg1MjMx WjAzMTEwLwYDVQQDEyhBQ0YzN0IyODc2REYxRERFODNGNDVDQ0NFOTU5Mzc2RkQx QzY1MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7uDDyJWb2su 8gZ3hsWxs6trC2XKBRiaTfmH1H+YZC0jzwpB+uIfHoHv4zVSC8YI91LLlL5wIfE0 Z5uAIIdCChSvMg71cvqZH3uZ8oPwfasAEbiNO327rRDJimMcyP8hJ+78DU5OO8sM OMn0Jj1Vzwd4hlGt9KLRSbTUH4twc33op8+9rsS1c3REPpT6oSKpwirgLVn99IV7 U2oQHhehxEvfqxyJMmGsPu+bDWKj7LOCzJccWSSpqhdhyX8Yx4z/U0P/YgVRQiZg jA8LAwQGTWpk9CX27mQ6iY7E2yClHqd6YQxzTjGvsgHUsVIjNrzV877RuZ9tywSJ 7mcKmCzt2QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKzzeyh23x3eg/RczOlZN2/R xlMCMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODMwM2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzIzMDM3MzgzMDMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2guAMA0GCSqGSIb3DQEBCwUAA4IBAQBRywS6jAabsdLjiGgvr7yz 32I5dUULZ8L28SoyGCm15Qlvx/rU8RNgvQ4zAbmOw3P0bL0D1LP5Yv5yXdFl7r7o JEP1NQY9zDEG+bzL79sDJSoJLFoUUUmGK8unuuXTvYFoE2BgoTOdOK2XXQEGYZUx nsEvImxVmbcqBPnh2w6f/hXr7f/LNXpTbwapbq9KXQ6AWGqHI9E2mGFVUesw83v/ eOebXghwPDincJif2wLB6BVATqNs26KqY4UCK/2BlsZ+/Kn4+B8jpWO5B6YKpQ8B 9gal41zjYtxwtWpJrvZbSAcdUVGeFcAvm/wmxXq8qLw1mKRj3HO8v5gkJEXpjY1w -----END CERTIFICATE-----Generated at Tue Jun 17 12:26:28 2025 by rpki-client