$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa File: 323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa (raw, json) Hash identifier: htsD51CYLYoPlovOk/1gYu4VTmdZQTbZkZBqXdULAOc= Subject key identifier: 3A:DE:17:A5:58:C8:16:2F:2C:45:42:D7:1F:21:4C:39:C0:FF:91:DF Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7CED35DF6DA7B1AC17B9BA872074EFA83C656AA0 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa Signing time: Mon 16 Jun 2025 08:52:33 +0000 ROA not before: Mon 16 Jun 2025 08:47:33 +0000 ROA not after: Mon 15 Jun 2026 08:52:33 +0000 asID: 147071 IP address blocks: 2602:feda:df0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ed:35:df:6d:a7:b1:ac:17:b9:ba:87:20:74:ef:a8:3c:65:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:33 2025 GMT Not After : Jun 15 08:52:33 2026 GMT Subject: CN=3ADE17A558C8162F2C4542D71F214C39C0FF91DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:d5:48:33:94:75:f2:66:41:43:f5:e2:36: 3f:cb:d7:5d:9b:4d:72:75:24:b3:be:f5:1f:e7:9c: a2:ab:db:6a:5b:b2:9c:9c:3b:20:c7:ea:f8:8d:73: 90:47:3a:1c:ce:d5:4a:70:ef:7e:5d:62:42:60:fa: b9:8b:c6:a5:00:70:e5:3b:23:ee:b5:49:06:07:e4: 3f:da:46:06:35:be:de:1e:5f:69:f8:48:17:70:76: e3:01:8a:98:3e:14:fb:2c:e1:9a:31:c6:79:90:a8: 97:3d:8c:31:9c:9c:96:1c:b9:c8:c1:49:b5:cd:af: bd:06:1f:fe:0a:f7:1d:05:68:69:ab:04:6b:ea:e2: 76:71:62:db:81:a1:9c:14:4e:ab:86:83:b2:7d:e9: 84:47:1b:ea:9b:65:a3:c7:8c:f6:18:0e:4a:02:f8: 56:78:de:af:3d:56:0c:e5:c9:be:44:e1:68:9e:de: 0a:8c:ab:63:8b:c3:d0:fc:1f:14:84:45:5d:7b:d1: a0:01:aa:7c:0b:44:e9:f1:36:0a:8f:07:50:80:2d: 8b:8f:08:58:5e:4d:37:c9:5f:7c:cb:0a:c8:e8:6c: 71:27:37:38:95:2c:ab:e7:29:e7:02:b7:e7:51:f5: 4f:4f:3b:77:ab:5d:b8:26:68:14:fc:86:be:e7:f6: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:17:A5:58:C8:16:2F:2C:45:42:D7:1F:21:4C:39:C0:FF:91:DF X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:df0::/44 Signature Algorithm: sha256WithRSAEncryption 79:89:78:bf:45:88:0f:22:b9:06:63:67:2c:ba:6f:a0:bd:f9: ae:6e:1a:4c:7e:8e:c5:64:84:42:94:be:4a:a9:c4:1f:9a:26: 4c:fa:e6:66:96:19:11:a6:4c:02:74:e1:89:35:cd:6f:2a:66: 3d:20:d7:7a:fe:2f:25:67:c5:ed:22:1a:e9:9b:21:5d:14:ac: 0e:a8:2e:0c:63:dc:96:09:8a:ed:b7:70:7b:dc:c0:90:1c:2c: 6b:4a:e1:9c:e5:ff:7d:47:ca:b0:6b:e5:cf:a6:d4:30:be:64: 65:37:98:8d:03:34:55:ab:7a:6c:db:d0:4e:95:a3:43:1b:d9: 94:c4:0e:e8:96:0a:37:c4:ea:5f:8d:70:28:26:6e:fe:8e:ed: 90:2b:16:d2:b5:cd:1f:0d:fd:a8:7a:d2:1e:ce:8e:11:13:bf: 63:08:7b:ad:b5:18:54:7c:99:b8:cf:2b:ca:7e:95:a9:24:30: 52:15:ad:2b:53:71:30:9b:2b:a0:fc:4c:ce:31:3f:97:51:ee: 61:06:d9:32:df:9b:bb:05:0c:fc:42:44:dd:2d:29:03:a4:da: 67:95:b0:9f:8c:20:23:4d:5a:57:fc:3b:89:45:ab:32:5c:2b: 45:6d:b2:a8:d6:48:d3:30:43:d1:15:e6:14:da:63:b5:73:d3: e7:f6:3d:c9 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfO01322nsawXubqHIHTvqDxlaqAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMzWhcNMjYwNjE1MDg1MjMz WjAzMTEwLwYDVQQDEygzQURFMTdBNTU4QzgxNjJGMkM0NTQyRDcxRjIxNEMzOUMw RkY5MURGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj3VSDOUdfJm QUP14jY/y9ddm01ydSSzvvUf55yiq9tqW7KcnDsgx+r4jXOQRzocztVKcO9+XWJC YPq5i8alAHDlOyPutUkGB+Q/2kYGNb7eHl9p+EgXcHbjAYqYPhT7LOGaMcZ5kKiX PYwxnJyWHLnIwUm1za+9Bh/+CvcdBWhpqwRr6uJ2cWLbgaGcFE6rhoOyfemERxvq m2Wjx4z2GA5KAvhWeN6vPVYM5cm+ROFont4KjKtji8PQ/B8UhEVde9GgAap8C0Tp 8TYKjwdQgC2LjwhYXk03yV98ywrI6GxxJzc4lSyr5ynnArfnUfVPTzt3q124JmgU /Ia+5/Yx2QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDreF6VYyBYvLEVC1x8hTDnA /5HfMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQ2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM3MzAzNzMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g3wMA0GCSqGSIb3DQEBCwUAA4IBAQB5iXi/RYgPIrkGY2csum+g vfmubhpMfo7FZIRClL5KqcQfmiZM+uZmlhkRpkwCdOGJNc1vKmY9INd6/i8lZ8Xt IhrpmyFdFKwOqC4MY9yWCYrtt3B73MCQHCxrSuGc5f99R8qwa+XPptQwvmRlN5iN AzRVq3ps29BOlaNDG9mUxA7olgo3xOpfjXAoJm7+ju2QKxbStc0fDf2oetIezo4R E79jCHuttRhUfJm4zyvKfpWpJDBSFa0rU3Ewmyug/EzOMT+XUe5hBtky35u7BQz8 QkTdLSkDpNpnlbCfjCAjTVpX/DuJRasyXCtFbbKo1kjTMEPRFeYU2mO1c9Pn9j3J -----END CERTIFICATE-----Generated at Mon Jun 16 15:57:48 2025 by rpki-client