$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa File: 323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa (raw, json) Hash identifier: LnTMPjrGJRev07tIchBtIc+488VOQca3prX4kRpuXho= Subject key identifier: C8:D3:D9:1D:90:FD:37:5D:F9:61:2D:32:07:3F:7F:2E:AC:6E:F0:7A Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3666176D8587299532A32E3C5FC7219CEA91EF72 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa Signing time: Mon 16 Jun 2025 08:52:24 +0000 ROA not before: Mon 16 Jun 2025 08:47:24 +0000 ROA not after: Mon 15 Jun 2026 08:52:24 +0000 asID: 39753 IP address blocks: 2602:feda:ca0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:66:17:6d:85:87:29:95:32:a3:2e:3c:5f:c7:21:9c:ea:91:ef:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:24 2025 GMT Not After : Jun 15 08:52:24 2026 GMT Subject: CN=C8D3D91D90FD375DF9612D32073F7F2EAC6EF07A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:c6:7d:d3:55:70:71:2d:f2:38:15:b5:c8: 93:f1:af:cf:c6:d5:40:6c:b8:4a:4c:e7:69:4a:b7: 86:e8:75:43:72:a0:30:20:f5:ab:d3:b5:da:e6:60: 3c:f9:3c:a4:5f:96:8a:f7:9f:da:49:77:78:e4:7c: 33:a8:26:41:9d:25:7a:0c:7e:96:e0:9b:18:c4:ec: fa:1c:e0:e2:13:c6:23:5a:a6:ea:63:da:6e:0e:e9: 1b:3c:41:52:c0:4f:95:71:3f:48:86:cc:2f:8c:db: dc:b6:76:78:a7:98:de:89:42:9c:fe:38:6f:0f:9d: fa:0b:b6:ae:4a:5c:30:ff:26:59:39:8f:70:fd:9a: 3c:56:00:af:c6:8b:4d:50:c2:04:2f:af:f6:1f:8a: ac:d7:8f:c9:bf:2f:a4:78:96:44:86:ed:ab:da:50: 2a:8c:95:0f:87:f5:a6:d1:d0:76:da:28:14:f8:fc: 07:5c:3e:9a:45:45:b1:7a:75:8a:98:f8:89:55:d0: b0:47:2e:ea:07:e9:e2:eb:c6:80:6f:1d:fc:93:43: 45:d5:a2:b5:2c:30:93:cc:73:a7:8a:ee:66:ad:7d: 59:1c:65:20:9d:9f:d8:d1:1a:58:28:aa:6d:94:28: 14:be:5f:38:10:61:be:48:22:a8:80:5a:cf:39:06: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:D9:1D:90:FD:37:5D:F9:61:2D:32:07:3F:7F:2E:AC:6E:F0:7A X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ca0::/44 Signature Algorithm: sha256WithRSAEncryption aa:29:69:72:f0:e6:28:85:65:6e:af:f7:2d:7a:af:9a:f0:4d: 1e:21:18:b5:79:ce:31:20:62:56:a5:5d:90:4e:de:bf:ff:a5: 94:52:8c:09:9a:ee:b5:64:93:d2:6a:5f:5c:af:e8:77:4f:d4: de:39:69:ce:63:43:52:31:a0:89:08:52:85:42:6e:ef:ce:12: a6:f4:cc:dc:ba:3c:60:bc:ed:58:96:bc:19:d3:c4:71:a5:9f: cc:67:dc:26:9e:a2:6d:b0:f4:88:bb:24:45:bf:dc:5c:5f:bb: 56:4e:3c:16:75:43:93:e1:40:4e:fd:f5:6f:64:4e:37:de:ae: 16:ce:4d:b3:90:20:ab:f4:fc:98:58:06:79:e0:2a:fc:42:51: 4a:d7:12:d9:72:6b:5b:2d:18:ba:22:58:4f:aa:73:c8:46:89: 9a:8f:68:36:c2:01:48:41:0d:53:80:de:fb:35:7c:6a:bf:a9: 6d:06:a3:7c:1e:d7:52:95:e8:95:7f:fc:9f:8f:f6:16:a9:4b: b0:76:7e:5a:13:c5:22:43:fb:7f:8e:01:0e:f2:23:07:77:0c: 32:e6:e8:39:c9:b0:59:81:3d:cb:34:88:78:3f:c1:ef:77:38: f1:e1:50:a9:b6:6a:c4:9c:fc:e7:db:6f:a3:ac:82:c4:b6:55: ff:4f:45:2b -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUNmYXbYWHKZUyoy48X8chnOqR73IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI0WhcNMjYwNjE1MDg1MjI0 WjAzMTEwLwYDVQQDEyhDOEQzRDkxRDkwRkQzNzVERjk2MTJEMzIwNzNGN0YyRUFD NkVGMDdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS3GfdNVcHEt 8jgVtciT8a/PxtVAbLhKTOdpSreG6HVDcqAwIPWr07Xa5mA8+TykX5aK95/aSXd4 5HwzqCZBnSV6DH6W4JsYxOz6HODiE8YjWqbqY9puDukbPEFSwE+VcT9IhswvjNvc tnZ4p5jeiUKc/jhvD536C7auSlww/yZZOY9w/Zo8VgCvxotNUMIEL6/2H4qs14/J vy+keJZEhu2r2lAqjJUPh/Wm0dB22igU+PwHXD6aRUWxenWKmPiJVdCwRy7qB+ni 68aAbx38k0NF1aK1LDCTzHOniu5mrX1ZHGUgnZ/Y0RpYKKptlCgUvl84EGG+SCKo gFrPOQaylwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFMjT2R2Q/Tdd+WEtMgc/fy6s bvB6MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MzYxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMzM5MzczNTMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJgL+2gygMA0GCSqGSIb3DQEBCwUAA4IBAQCqKWly8OYohWVur/cteq+a8E0e IRi1ec4xIGJWpV2QTt6//6WUUowJmu61ZJPSal9cr+h3T9TeOWnOY0NSMaCJCFKF Qm7vzhKm9MzcujxgvO1YlrwZ08RxpZ/MZ9wmnqJtsPSIuyRFv9xcX7tWTjwWdUOT 4UBO/fVvZE433q4Wzk2zkCCr9PyYWAZ54Cr8QlFK1xLZcmtbLRi6IlhPqnPIRoma j2g2wgFIQQ1TgN77NXxqv6ltBqN8HtdSleiVf/yfj/YWqUuwdn5aE8UiQ/t/jgEO 8iMHdwwy5ug5ybBZgT3LNIh4P8Hvdzjx4VCptmrEnPzn22+jrILEtlX/T0Ur -----END CERTIFICATE-----Generated at Mon Jun 16 13:28:38 2025 by rpki-client