$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa File: 323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa (raw, json) Hash identifier: Mv1We9Q6O7+bw5ZfIUkE05IuhGZgXmIrzGpjt8QKr5A= Subject key identifier: B7:15:82:58:4C:8D:13:B3:2C:72:F5:09:58:17:5C:80:56:0C:57:FD Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7EFACF49FF840CCC9A3B864F6EC5EB55AFB4F204 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa Signing time: Mon 16 Jun 2025 08:52:24 +0000 ROA not before: Mon 16 Jun 2025 08:47:24 +0000 ROA not after: Mon 15 Jun 2026 08:52:24 +0000 asID: 399015 IP address blocks: 2602:feda:c60::/44 maxlen: 44 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fa:cf:49:ff:84:0c:cc:9a:3b:86:4f:6e:c5:eb:55:af:b4:f2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:24 2025 GMT Not After : Jun 15 08:52:24 2026 GMT Subject: CN=B71582584C8D13B32C72F50958175C80560C57FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:69:25:71:58:aa:60:88:a3:c8:7c:f2:23: 30:bd:ff:d9:20:d7:29:6d:6d:44:bb:6c:2f:ce:8e: e3:d0:53:a8:b1:c4:42:21:ee:91:23:0b:95:c8:1c: 5c:9e:6e:73:b8:d5:3b:65:88:7d:e0:18:c4:af:9c: 6c:b9:78:12:6a:54:e5:8b:68:b2:a4:e0:4f:22:2f: c8:57:94:6e:df:97:a7:6a:f5:77:72:cc:4c:fa:53: 69:2c:ef:d7:86:ac:c0:df:49:a3:67:3d:68:52:50: 09:a2:d8:30:35:e7:78:4a:98:8b:88:98:95:0b:79: bb:c6:68:a4:c9:08:21:a4:88:3e:b0:fc:3b:b4:0f: 1f:40:15:ba:7d:73:6c:2f:d2:a5:80:6c:b6:a7:06: 14:01:cd:4c:56:83:a7:c8:60:6a:96:8d:85:83:05: e4:c2:f7:3c:bb:54:8d:44:ea:8d:d6:1a:a7:92:2d: 64:f2:34:61:af:36:8b:65:10:28:e7:d6:0f:44:fa: 0f:7b:5b:40:55:b0:b9:81:58:d8:39:e6:51:cf:97: 01:87:88:c9:55:ba:46:26:3f:c4:bd:09:84:b2:34: f0:10:f7:d8:d5:3c:14:92:21:0a:a3:a9:90:5b:02: 13:21:d1:5f:6d:c3:1f:59:f2:64:af:b0:c1:a0:d7: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:82:58:4C:8D:13:B3:2C:72:F5:09:58:17:5C:80:56:0C:57:FD X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c60::/44 Signature Algorithm: sha256WithRSAEncryption 2d:8d:2f:d5:a6:77:24:74:1c:d8:56:e3:26:09:c8:4e:fa:d9: 3f:b6:24:4b:d6:e1:f0:4d:8e:c9:7c:7e:29:4e:cd:fc:10:f2: ac:9d:f8:2b:72:26:ba:30:20:7d:59:47:f8:ed:38:d3:3f:c6: 14:f1:a5:69:2d:29:84:3e:42:4b:ac:05:cc:f7:d4:a4:2c:cc: 9e:2b:6b:36:dc:29:c2:ad:5b:d6:0a:90:a8:58:03:78:20:df: 23:9e:6e:78:ca:25:28:a6:f9:1b:0a:07:a0:4f:40:19:89:81: e8:d9:cb:6a:d5:89:cc:fd:1f:d1:41:f1:ad:97:51:96:71:1e: 01:ce:88:46:60:74:57:8a:c9:97:ae:a1:ed:a3:dc:92:87:2e: 4f:87:ce:b4:8b:d2:89:c0:3e:d4:80:4c:a3:99:25:81:a5:cb: 8c:bc:ca:06:ee:59:8c:ad:dc:f4:82:fa:59:36:6b:84:50:bd: e8:9c:02:9e:9f:72:7a:f0:a7:30:52:89:eb:4f:c7:13:37:d6: a7:ab:dc:8e:44:d0:f4:38:b5:72:0c:8d:9e:4f:49:1c:b1:1b: df:f7:5a:d8:a7:1d:32:59:0e:77:94:93:47:72:4e:99:d8:de: 5a:d3:cd:8d:5d:fa:f6:8b:a3:1b:4d:05:a8:d2:9d:05:ee:a7: 9c:46:28:94 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfvrPSf+EDMyaO4ZPbsXrVa+08gQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI0WhcNMjYwNjE1MDg1MjI0 WjAzMTEwLwYDVQQDEyhCNzE1ODI1ODRDOEQxM0IzMkM3MkY1MDk1ODE3NUM4MDU2 MEM1N0ZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ANpJXFYqmCI o8h88iMwvf/ZINcpbW1Eu2wvzo7j0FOoscRCIe6RIwuVyBxcnm5zuNU7ZYh94BjE r5xsuXgSalTli2iypOBPIi/IV5Ru35enavV3csxM+lNpLO/XhqzA30mjZz1oUlAJ otgwNed4SpiLiJiVC3m7xmikyQghpIg+sPw7tA8fQBW6fXNsL9KlgGy2pwYUAc1M VoOnyGBqlo2FgwXkwvc8u1SNROqN1hqnki1k8jRhrzaLZRAo59YPRPoPe1tAVbC5 gVjYOeZRz5cBh4jJVbpGJj/EvQmEsjTwEPfY1TwUkiEKo6mQWwITIdFfbcMfWfJk r7DBoNfmdQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLcVglhMjROzLHL1CVgXXIBW DFf9MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzMzOTM5MzAzMTM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxgMA0GCSqGSIb3DQEBCwUAA4IBAQAtjS/VpnckdBzYVuMmCchO +tk/tiRL1uHwTY7JfH4pTs38EPKsnfgrcia6MCB9WUf47TjTP8YU8aVpLSmEPkJL rAXM99SkLMyeK2s23CnCrVvWCpCoWAN4IN8jnm54yiUopvkbCgegT0AZiYHo2ctq 1YnM/R/RQfGtl1GWcR4BzohGYHRXismXrqHto9yShy5Ph860i9KJwD7UgEyjmSWB pcuMvMoG7lmMrdz0gvpZNmuEUL3onAKen3J68KcwUonrT8cTN9anq9yORND0OLVy DI2eT0kcsRvf91rYpx0yWQ53lJNHck6Z2N5a082NXfr2i6MbTQWo0p0F7qecRiiU -----END CERTIFICATE-----Generated at Tue Jun 17 16:16:22 2025 by rpki-client