$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa File: 323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa (raw, json) Hash identifier: fOGPrsFO/bYxFHix1Qnh3H1eUBRkV0wtYTm7Fsd4SnA= Subject key identifier: 96:4B:6B:49:81:41:2B:99:04:12:71:9F:29:33:C4:1C:CC:01:19:70 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 01DA2A75D8E5123D386834F54275F86D96082677 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa Signing time: Mon 16 Jun 2025 08:52:29 +0000 ROA not before: Mon 16 Jun 2025 08:47:29 +0000 ROA not after: Mon 15 Jun 2026 08:52:29 +0000 asID: 138435 IP address blocks: 2602:feda:d70::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:da:2a:75:d8:e5:12:3d:38:68:34:f5:42:75:f8:6d:96:08:26:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:29 2025 GMT Not After : Jun 15 08:52:29 2026 GMT Subject: CN=964B6B4981412B990412719F2933C41CCC011970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:2c:89:51:54:92:38:35:01:ff:65:d4:40: c3:0b:09:15:19:70:36:e1:45:cd:4f:a6:b0:db:8c: 3b:9b:c2:97:09:24:f8:fd:5c:b2:28:f1:f4:23:fe: dd:66:c9:84:c2:cd:04:57:d4:a7:3a:f2:67:bc:bf: b3:26:a3:d5:87:30:c0:98:57:18:97:b7:80:53:0e: 68:7c:c7:4c:84:eb:de:9e:e3:a6:ad:19:9f:6b:e1: bc:47:8d:dc:5e:3b:ea:f6:d5:ae:e3:2c:64:14:50: d9:94:a7:87:d6:24:56:05:6e:10:56:ba:6a:d9:d5: fb:63:14:7a:3f:a1:e0:5e:3a:38:64:c3:2a:17:b1: f0:07:5c:ec:58:97:55:5d:5c:a4:7e:09:96:68:9d: 4d:da:dd:0a:46:5a:c8:c7:34:3b:41:fc:8a:86:5d: ea:f3:06:c3:41:28:9d:fd:42:1e:ab:ec:85:eb:71: 32:f4:5f:80:99:99:1c:d4:28:a9:c8:85:d3:dc:50: 8d:27:07:7e:fb:d3:f5:fd:77:5c:f3:b0:f6:6e:2c: 87:49:67:03:4c:46:01:4d:7d:5d:d3:9d:99:9e:26: dd:bb:ec:82:f0:5f:98:45:5f:ff:f4:bf:2b:d2:20: 98:52:4c:68:2d:f6:9d:10:4a:bd:57:96:59:e1:c0: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:6B:49:81:41:2B:99:04:12:71:9F:29:33:C4:1C:CC:01:19:70 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:d70::/44 Signature Algorithm: sha256WithRSAEncryption 80:1a:8c:ee:5a:f0:8b:30:6b:71:70:f6:38:bd:f5:ab:19:7f: 08:f1:57:d8:fb:2f:52:47:92:81:2e:2d:55:9e:e4:0e:da:b4: dc:67:94:4e:69:b1:c6:9b:eb:5c:75:1c:78:48:d1:ab:c4:98: 6a:5e:aa:66:b6:f6:a3:70:bb:c0:76:84:c3:22:c6:94:53:d4: 39:b5:0c:03:c8:6e:42:14:0c:c2:41:49:58:1c:68:46:76:ad: 9f:b9:7b:70:e1:b9:a3:32:cb:5c:a9:d6:f8:67:85:f4:7a:82: cf:c3:d4:4a:e8:79:f3:02:83:a0:aa:fe:e1:59:72:34:c5:13: 19:26:a0:cb:38:ef:7d:30:25:2a:b8:98:48:96:29:30:3e:e5: a3:ec:e3:26:7b:eb:1f:9f:02:b7:14:32:f2:b5:a7:de:75:df: c5:90:63:8d:d3:dd:c5:72:ea:88:d1:d4:30:93:58:a4:33:1b: 22:a4:9b:b1:4d:a4:df:10:5f:24:c3:4d:53:08:eb:df:16:ac: 0a:81:e7:33:e7:6d:a7:3e:2b:ec:f2:0c:9e:56:84:b6:1e:b4: 75:f5:33:ad:62:a3:61:ba:25:d4:44:17:7f:25:3a:2a:f7:8e: 21:e8:81:96:0e:27:2d:6d:af:9f:75:33:77:e8:aa:4a:54:d0: 71:ae:24:81 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUAdoqddjlEj04aDT1QnX4bZYIJncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI5WhcNMjYwNjE1MDg1MjI5 WjAzMTEwLwYDVQQDEyg5NjRCNkI0OTgxNDEyQjk5MDQxMjcxOUYyOTMzQzQxQ0ND MDExOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/wsiVFUkjg1 Af9l1EDDCwkVGXA24UXNT6aw24w7m8KXCST4/VyyKPH0I/7dZsmEws0EV9SnOvJn vL+zJqPVhzDAmFcYl7eAUw5ofMdMhOvenuOmrRmfa+G8R43cXjvq9tWu4yxkFFDZ lKeH1iRWBW4QVrpq2dX7YxR6P6HgXjo4ZMMqF7HwB1zsWJdVXVykfgmWaJ1N2t0K RlrIxzQ7QfyKhl3q8wbDQSid/UIeq+yF63Ey9F+AmZkc1CipyIXT3FCNJwd++9P1 /Xdc87D2biyHSWcDTEYBTX1d052Znibdu+yC8F+YRV//9L8r0iCYUkxoLfadEEq9 V5ZZ4cBSawIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJZLa0mBQSuZBBJxnykzxBzM ARlwMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQzNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM4MzQzMzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g1wMA0GCSqGSIb3DQEBCwUAA4IBAQCAGozuWvCLMGtxcPY4vfWr GX8I8VfY+y9SR5KBLi1VnuQO2rTcZ5ROabHGm+tcdRx4SNGrxJhqXqpmtvajcLvA doTDIsaUU9Q5tQwDyG5CFAzCQUlYHGhGdq2fuXtw4bmjMstcqdb4Z4X0eoLPw9RK 6HnzAoOgqv7hWXI0xRMZJqDLOO99MCUquJhIlikwPuWj7OMme+sfnwK3FDLytafe dd/FkGON093FcuqI0dQwk1ikMxsipJuxTaTfEF8kw01TCOvfFqwKgecz522nPivs 8gyeVoS2HrR19TOtYqNhuiXURBd/JToq944h6IGWDictba+fdTN36KpKVNBxriSB -----END CERTIFICATE-----Generated at Tue Jun 17 04:25:38 2025 by rpki-client