$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa File: 323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa (raw, json) Hash identifier: PRY9oGHEPXOrFZlAVRg9AjKo8B3GduY8lZ2nNxpnih0= Subject key identifier: 37:0C:8A:3E:6D:96:E1:C3:D0:19:1B:BA:18:E0:C2:96:A2:B5:94:D4 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0B0DD00A94DEAAE64761B5EF7CB8F8C622EE87EC Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa Signing time: Mon 16 Jun 2025 08:52:27 +0000 ROA not before: Mon 16 Jun 2025 08:47:27 +0000 ROA not after: Mon 15 Jun 2026 08:52:27 +0000 asID: 142427 IP address blocks: 2602:feda:dc0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0d:d0:0a:94:de:aa:e6:47:61:b5:ef:7c:b8:f8:c6:22:ee:87:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:27 2025 GMT Not After : Jun 15 08:52:27 2026 GMT Subject: CN=370C8A3E6D96E1C3D0191BBA18E0C296A2B594D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:dd:5a:6c:32:ea:21:ef:2b:fb:71:34:76: 0c:1b:8f:90:57:3e:cc:46:23:87:5c:b8:2d:2e:87: d3:86:ab:5d:53:77:6a:fd:98:29:86:ca:db:79:03: 22:c7:12:35:6d:d8:2a:e2:4c:c1:ca:53:2c:22:d8: ec:22:fe:50:03:99:be:09:38:96:63:e9:f1:5d:cc: 2d:55:a7:1e:6d:55:e4:86:27:73:dd:e6:92:61:91: a2:a1:46:73:c1:36:c8:38:8c:78:8e:98:10:5e:18: d2:41:04:ce:81:f4:53:cb:66:5e:09:06:1c:c5:2b: 32:76:aa:39:98:47:20:5c:60:0e:ec:13:61:0f:ee: d5:2b:fb:1a:f1:c3:4b:f2:7d:62:ab:bc:09:02:1c: 3e:f6:55:21:37:98:76:89:0c:b3:28:d5:b2:6b:17: d6:9e:1b:59:38:0d:69:ec:3d:de:6e:cd:4a:00:5f: 27:45:6d:fd:b4:ec:96:f8:1c:ab:cd:c2:f7:8a:15: 4f:a1:06:68:11:65:40:e7:e3:2c:a0:75:81:65:d2: 61:f9:a2:60:68:c6:25:4e:55:a9:62:7d:6d:3d:f7: 03:f3:0d:00:6c:58:07:63:d4:2f:01:7c:81:44:1e: f0:3d:4f:6f:cc:5b:f2:dd:7c:56:e4:e1:f6:25:60: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0C:8A:3E:6D:96:E1:C3:D0:19:1B:BA:18:E0:C2:96:A2:B5:94:D4 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:dc0::/44 Signature Algorithm: sha256WithRSAEncryption 54:3f:23:1c:ed:60:6d:8c:c2:79:09:20:74:3e:19:cf:72:44: 3b:2f:df:67:12:d8:fe:35:4d:a0:3f:83:9a:6c:92:33:b5:50: eb:60:1c:b7:3b:48:74:b5:c9:b9:91:48:2f:3e:6b:da:dc:13: dd:84:4c:12:51:96:6d:a7:d5:0f:17:e8:b1:c2:af:ca:4e:84: 38:34:91:39:90:b6:9a:da:43:27:11:56:7d:8b:6b:9d:b6:1a: 42:27:67:0d:cc:4d:42:c7:28:d2:db:5d:49:d2:f8:7a:13:65: 0f:8f:9a:96:99:24:56:24:65:31:b2:5d:05:25:43:94:b6:84: 2d:df:d7:09:91:74:ff:71:5e:6a:f3:3b:c3:65:a6:9a:18:5d: cd:30:74:37:b8:a3:62:66:83:06:d3:5c:bb:f7:c2:2a:d4:97: a3:87:2e:b9:f6:3c:c1:ca:f1:29:c9:b1:a6:78:85:3e:d0:41: 19:08:7b:57:5b:32:89:dd:57:ef:c9:41:4f:0a:5d:01:a9:54: be:b9:20:2c:b7:05:68:8e:83:14:a7:36:7a:16:71:4d:ad:95: 89:99:3f:80:92:d1:d2:54:d7:d8:e5:39:65:19:85:e2:0a:fd: db:ef:55:8b:68:f5:59:81:a5:79:66:8d:ac:fa:b5:88:fc:2d: 6e:8a:33:41 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUCw3QCpTequZHYbXvfLj4xiLuh+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI3WhcNMjYwNjE1MDg1MjI3 WjAzMTEwLwYDVQQDEygzNzBDOEEzRTZEOTZFMUMzRDAxOTFCQkExOEUwQzI5NkEy QjU5NEQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBndWmwy6iHv K/txNHYMG4+QVz7MRiOHXLgtLofThqtdU3dq/ZgphsrbeQMixxI1bdgq4kzBylMs ItjsIv5QA5m+CTiWY+nxXcwtVacebVXkhidz3eaSYZGioUZzwTbIOIx4jpgQXhjS QQTOgfRTy2ZeCQYcxSsydqo5mEcgXGAO7BNhD+7VK/sa8cNL8n1iq7wJAhw+9lUh N5h2iQyzKNWyaxfWnhtZOA1p7D3ebs1KAF8nRW39tOyW+ByrzcL3ihVPoQZoEWVA 5+MsoHWBZdJh+aJgaMYlTlWpYn1tPfcD8w0AbFgHY9QvAXyBRB7wPU9vzFvy3XxW 5OH2JWAOzQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDcMij5tluHD0Bkbuhjgwpai tZTUMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQ2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzQzMjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g3AMA0GCSqGSIb3DQEBCwUAA4IBAQBUPyMc7WBtjMJ5CSB0PhnP ckQ7L99nEtj+NU2gP4OabJIztVDrYBy3O0h0tcm5kUgvPmva3BPdhEwSUZZtp9UP F+ixwq/KToQ4NJE5kLaa2kMnEVZ9i2udthpCJ2cNzE1CxyjS211J0vh6E2UPj5qW mSRWJGUxsl0FJUOUtoQt39cJkXT/cV5q8zvDZaaaGF3NMHQ3uKNiZoMG01y798Iq 1Jejhy659jzByvEpybGmeIU+0EEZCHtXWzKJ3VfvyUFPCl0BqVS+uSAstwVojoMU pzZ6FnFNrZWJmT+AktHSVNfY5TllGYXiCv3b71WLaPVZgaV5Zo2s+rWI/C1uijNB -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:40 2025 by rpki-client