$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa File: 323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa (raw, json) Hash identifier: Xc5xQFHaaoPycxo0pTTStSPSDvYNoL68r3xrkzwbzgk= Subject key identifier: 67:05:03:06:E5:50:71:12:C6:14:1B:39:CD:84:8B:8A:89:68:EE:A4 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5A53BBF7109F22F7CADA44F5DD029413ADFE9461 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa Signing time: Mon 16 Jun 2025 08:52:22 +0000 ROA not before: Mon 16 Jun 2025 08:47:22 +0000 ROA not after: Mon 15 Jun 2026 08:52:22 +0000 asID: 209297 IP address blocks: 2602:feda:bc0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:53:bb:f7:10:9f:22:f7:ca:da:44:f5:dd:02:94:13:ad:fe:94:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:22 2025 GMT Not After : Jun 15 08:52:22 2026 GMT Subject: CN=67050306E5507112C6141B39CD848B8A8968EEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:9a:66:a4:69:fb:70:76:fa:c2:31:6e:06: 19:d4:ee:12:50:df:21:c4:e5:a0:e0:31:9c:86:3d: a9:09:fd:94:df:0d:02:56:10:63:3f:09:0d:dc:81: 86:59:bc:9d:60:b3:52:0f:6d:a9:3d:d8:02:db:66: 51:15:4d:42:a1:1d:1f:9b:5a:68:b1:c7:35:c0:36: 95:62:30:06:97:9f:05:ba:13:65:24:3f:ec:14:eb: f8:a3:3a:6c:6c:32:e5:2b:69:fd:0b:5b:fe:3a:f7: 63:e7:7a:ab:9a:08:68:08:11:6c:ad:1d:51:28:f3: 4c:90:d7:08:64:9b:d1:73:75:c2:f8:7b:9e:f6:df: cf:78:27:64:5d:1f:86:2d:d8:96:9b:a7:ec:8f:6e: 6d:9a:c6:b9:71:15:ca:7a:25:ed:68:72:81:15:45: f6:26:db:f1:67:d9:f0:d6:db:18:a9:2f:0e:b2:95: 07:b6:a8:4e:64:21:2e:8b:a8:df:d7:86:82:22:8e: 59:25:3f:0e:2d:3f:dd:20:b9:8d:6d:08:fb:d3:b1: 56:b1:d0:0e:ce:fc:94:42:36:90:90:77:27:7c:2b: 07:f0:8e:3e:14:fb:15:ef:0a:6a:06:94:68:a0:02: 50:16:77:ff:74:a9:7a:94:ae:57:46:1e:ed:b9:9e: 3f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:03:06:E5:50:71:12:C6:14:1B:39:CD:84:8B:8A:89:68:EE:A4 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:bc0::/44 Signature Algorithm: sha256WithRSAEncryption a3:2f:dc:67:51:6e:c5:c2:72:34:54:67:5b:43:bd:96:cc:a1: 2c:83:78:d1:d9:1d:91:3d:89:06:40:1f:31:60:f9:5e:89:19: fc:40:03:e7:df:d0:0f:d3:4c:4e:59:48:00:df:db:c4:03:8c: e2:23:bd:f3:f6:f2:72:b2:4a:35:4b:6d:9f:de:51:d3:c5:fc: 12:4e:9f:c1:12:8e:36:77:96:5e:ef:f9:6d:27:2d:69:81:6b: 4f:f7:11:d4:8f:dc:38:0f:43:43:6c:4a:90:27:7c:54:16:d7: 34:9c:ce:86:5a:48:0e:ab:aa:eb:9b:6d:30:96:4c:d4:dd:8f: c4:89:0c:0d:c0:c9:fc:74:9c:9b:7e:29:b2:38:0b:73:82:80: d4:ed:9d:6d:40:14:a4:8f:2d:9d:4e:7e:9d:f1:74:fd:06:ca: 6d:7e:60:3f:50:02:8c:12:cb:b0:20:84:6e:b5:2e:89:5d:d8: 90:32:c0:f1:ea:c6:b0:ea:5d:11:62:34:42:6e:6c:82:b4:fd: ef:82:99:eb:78:99:8c:d0:b6:7a:d7:d7:df:aa:3d:96:6c:48: 70:5b:45:72:90:fc:70:9a:b2:61:76:a8:a3:eb:f5:8e:dc:f8: d7:d5:c1:04:3c:fa:15:5a:9a:a3:fa:1c:33:9b:a6:05:d3:01: 4a:bf:7c:4a -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUWlO79xCfIvfK2kT13QKUE63+lGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIyWhcNMjYwNjE1MDg1MjIy WjAzMTEwLwYDVQQDEyg2NzA1MDMwNkU1NTA3MTEyQzYxNDFCMzlDRDg0OEI4QTg5 NjhFRUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QiaZqRp+3B2 +sIxbgYZ1O4SUN8hxOWg4DGchj2pCf2U3w0CVhBjPwkN3IGGWbydYLNSD22pPdgC 22ZRFU1CoR0fm1poscc1wDaVYjAGl58FuhNlJD/sFOv4ozpsbDLlK2n9C1v+Ovdj 53qrmghoCBFsrR1RKPNMkNcIZJvRc3XC+Hue9t/PeCdkXR+GLdiWm6fsj25tmsa5 cRXKeiXtaHKBFUX2JtvxZ9nw1tsYqS8OspUHtqhOZCEui6jf14aCIo5ZJT8OLT/d ILmNbQj707FWsdAOzvyUQjaQkHcnfCsH8I4+FPsV7wpqBpRooAJQFnf/dKl6lK5X Rh7tuZ4/tQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGcFAwblUHESxhQbOc2Ei4qJ aO6kMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjI2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM5MzIzOTM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gvAMA0GCSqGSIb3DQEBCwUAA4IBAQCjL9xnUW7FwnI0VGdbQ72W zKEsg3jR2R2RPYkGQB8xYPleiRn8QAPn39AP00xOWUgA39vEA4ziI73z9vJysko1 S22f3lHTxfwSTp/BEo42d5Ze7/ltJy1pgWtP9xHUj9w4D0NDbEqQJ3xUFtc0nM6G WkgOq6rrm20wlkzU3Y/EiQwNwMn8dJybfimyOAtzgoDU7Z1tQBSkjy2dTn6d8XT9 BsptfmA/UAKMEsuwIIRutS6JXdiQMsDx6saw6l0RYjRCbmyCtP3vgpnreJmM0LZ6 19ffqj2WbEhwW0VykPxwmrJhdqij6/WO3PjX1cEEPPoVWpqj+hwzm6YF0wFKv3xK -----END CERTIFICATE-----Generated at Tue Jun 17 06:56:46 2025 by rpki-client