$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa File: 323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa (raw, json) Hash identifier: R9UC6lr/CDNoMSWyf1kshmgsTEIA7IoZ976j3mzJS7I= Subject key identifier: 5C:71:D8:46:A3:2D:22:5F:C8:94:55:62:10:B7:71:16:3D:60:F8:68 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5389E2730767C71508C0861B9D3074BBC0E30D0B Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 212357 IP address blocks: 2602:feda:c70::/44 maxlen: 44 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:89:e2:73:07:67:c7:15:08:c0:86:1b:9d:30:74:bb:c0:e3:0d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=5C71D846A32D225FC894556210B771163D60F868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:ee:5e:46:f9:2b:8d:1a:90:64:29:5a:4b: 83:05:1c:71:d5:3e:c4:51:fc:27:53:74:10:ec:71: a5:9c:30:05:87:11:a7:de:1e:43:ea:04:a2:12:59: be:7a:5d:23:8e:74:fc:b5:71:e3:08:39:03:21:20: d4:de:4e:f7:a2:35:01:3d:c5:f3:67:f7:ce:d3:1f: 54:bc:e0:0e:28:20:ae:01:e3:2f:41:0c:79:7e:33: 1a:52:a1:7a:fd:ca:9c:1f:36:53:c7:d7:19:12:7c: 52:97:5b:39:36:96:9d:48:f2:ff:c1:39:c9:f9:26: c7:c1:b9:9c:ce:03:b2:7c:41:91:2c:32:55:04:10: 46:b2:ea:15:26:d3:96:af:5e:23:72:e9:64:ab:81: cc:ec:40:f9:a1:22:8e:04:9a:22:37:0c:bd:8a:e3: 1c:d1:5d:5c:4f:e5:b5:25:0e:4e:e6:22:ba:a4:68: 20:69:b0:4a:dd:8b:d6:4a:5c:2a:13:6e:7d:b0:e2: 04:2f:f0:67:58:71:ea:14:66:ac:f9:0a:5a:ed:e6: 2d:0e:be:7b:57:be:d2:33:93:4b:8f:99:61:b8:06: fb:36:40:98:d5:10:8e:11:bc:20:27:bf:02:96:31: 45:d0:8d:64:55:b5:20:0c:84:d0:0b:bd:31:ae:28: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:D8:46:A3:2D:22:5F:C8:94:55:62:10:B7:71:16:3D:60:F8:68 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c70::/44 Signature Algorithm: sha256WithRSAEncryption 81:a8:59:27:0c:a6:48:3b:60:49:ce:04:d7:18:12:77:be:da: b6:5a:ba:15:88:7b:1f:76:a8:02:6d:9c:56:8e:d4:0c:51:dd: 30:24:57:c5:e4:d6:9a:98:43:49:d5:6a:c6:80:c1:d3:e8:d9: 26:61:5b:7e:33:64:02:5c:56:da:3d:de:bb:eb:18:95:e8:c3: 17:41:db:17:df:7b:e5:5d:45:87:97:64:f6:9f:10:e0:80:a0: 22:bd:fd:36:29:6e:a8:74:06:91:43:d4:49:30:29:d0:b0:8f: 37:62:b1:24:b9:be:c3:1d:08:d3:74:2b:fa:8d:90:74:1d:72: 3d:70:88:3b:2b:4c:48:85:11:5e:44:a1:21:f5:83:c9:4a:ba: fe:7a:04:a9:61:5f:5d:bf:31:f6:16:de:4d:3a:60:bb:e6:78: e7:eb:db:02:bc:ae:ff:20:2b:c5:79:df:73:bb:cf:4a:a6:a2: b9:cf:0e:4b:c1:c8:64:82:e6:fa:9d:bb:42:e4:87:fb:8d:98: c2:ce:ec:7d:f7:76:0d:6d:82:76:66:bf:32:0e:14:45:4c:ee: 68:83:29:8f:8f:45:e0:be:c8:85:e2:31:df:40:69:34:5e:61: 53:7c:10:38:4a:61:e6:10:b5:d6:df:1b:79:38:a8:8e:7e:e1: 0f:69:57:84 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUU4nicwdnxxUIwIYbnTB0u8DjDQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyg1QzcxRDg0NkEzMkQyMjVGQzg5NDU1NjIxMEI3NzExNjNE NjBGODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQTuXkb5K40a kGQpWkuDBRxx1T7EUfwnU3QQ7HGlnDAFhxGn3h5D6gSiElm+el0jjnT8tXHjCDkD ISDU3k73ojUBPcXzZ/fO0x9UvOAOKCCuAeMvQQx5fjMaUqF6/cqcHzZTx9cZEnxS l1s5NpadSPL/wTnJ+SbHwbmczgOyfEGRLDJVBBBGsuoVJtOWr14jculkq4HM7ED5 oSKOBJoiNwy9iuMc0V1cT+W1JQ5O5iK6pGggabBK3YvWSlwqE259sOIEL/BnWHHq FGas+Qpa7eYtDr57V77SM5NLj5lhuAb7NkCY1RCOEbwgJ78CljFF0I1kVbUgDITQ C70xrihC/wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFxx2EajLSJfyJRVYhC3cRY9 YPhoMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzMTMyMzMzNTM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxwMA0GCSqGSIb3DQEBCwUAA4IBAQCBqFknDKZIO2BJzgTXGBJ3 vtq2WroViHsfdqgCbZxWjtQMUd0wJFfF5NaamENJ1WrGgMHT6NkmYVt+M2QCXFba Pd676xiV6MMXQdsX33vlXUWHl2T2nxDggKAivf02KW6odAaRQ9RJMCnQsI83YrEk ub7DHQjTdCv6jZB0HXI9cIg7K0xIhRFeRKEh9YPJSrr+egSpYV9dvzH2Ft5NOmC7 5njn69sCvK7/ICvFed9zu89KpqK5zw5Lwchkgub6nbtC5If7jZjCzux993YNbYJ2 Zr8yDhRFTO5ogymPj0XgvsiF4jHfQGk0XmFTfBA4SmHmELXW3xt5OKiOfuEPaVeE -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:04 2025 by rpki-client