$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa File: 323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa (raw, json) Hash identifier: kESSOIRCYtCrWeeRzVKRV4Xh6TT7G2vIoOaftvCEvNc= Subject key identifier: E9:69:24:62:43:BB:A2:8C:A8:FC:C6:8D:B2:C7:1B:CC:58:40:2D:FA Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6434E47192BB6A64F3204F11BDEACDC0997A0F66 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa Signing time: Mon 16 Jun 2025 08:52:30 +0000 ROA not before: Mon 16 Jun 2025 08:47:30 +0000 ROA not after: Mon 15 Jun 2026 08:52:30 +0000 asID: 147028 IP address blocks: 2602:feda:e30::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:34:e4:71:92:bb:6a:64:f3:20:4f:11:bd:ea:cd:c0:99:7a:0f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:30 2025 GMT Not After : Jun 15 08:52:30 2026 GMT Subject: CN=E969246243BBA28CA8FCC68DB2C71BCC58402DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:d7:57:05:25:b5:e1:18:a2:ec:f6:42:6a: f9:79:fb:d7:7d:6b:31:da:6f:23:8f:97:25:7f:d5: 7c:9a:7b:cf:c3:91:60:bf:29:30:6c:c9:9e:7f:5d: f4:40:34:51:52:a1:10:94:d4:4d:2e:e9:0c:c7:28: ac:e6:65:22:a3:b0:a5:99:3b:a9:9f:bb:bd:72:95: c1:4a:37:45:8e:cd:81:10:cb:5e:0b:7a:2a:b7:79: af:0a:94:dd:d7:36:9f:dc:80:a7:f7:3f:1f:ff:ae: 5e:a3:ad:ef:18:05:df:98:bb:21:45:b8:60:52:83: 96:06:33:fc:ba:23:91:27:56:2c:f4:98:5d:41:9a: 69:24:f3:8a:a4:da:a2:d6:e9:fa:bd:95:9a:50:3d: 6d:3d:57:97:ee:ca:fd:5b:5e:6e:af:25:8a:c7:ae: f2:17:a3:62:8e:78:ac:af:3e:6b:24:ee:71:25:1f: 4d:05:7e:f9:e3:ed:e2:81:64:60:ee:71:46:45:60: 07:41:c9:1d:a8:f1:71:b1:2c:2c:70:8d:1c:88:b0: 1b:49:7b:a3:23:77:32:ea:a7:0e:fb:f8:06:23:ca: 30:08:1c:b2:af:7b:04:ec:65:65:96:af:4b:4d:b0: 04:38:b1:0c:58:41:10:d0:27:b7:7a:f3:f1:d3:70: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:69:24:62:43:BB:A2:8C:A8:FC:C6:8D:B2:C7:1B:CC:58:40:2D:FA X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e30::/44 Signature Algorithm: sha256WithRSAEncryption 20:26:16:9b:b9:e8:ef:37:e8:60:43:c3:4b:b7:f8:55:c0:e0: 13:eb:43:54:f9:53:91:94:7b:c0:cf:a3:50:5e:f1:b9:9d:d4: 9c:88:77:0c:ae:d4:14:5f:16:db:f4:19:40:c2:15:85:0b:e8: 3c:56:de:47:5d:87:a6:ae:4d:0e:85:b3:d7:43:55:7b:27:f8: 62:66:52:e9:fe:7c:67:13:14:8e:f8:92:9a:17:19:6c:ca:77: ea:b4:06:51:41:db:b2:e2:8d:3c:88:df:59:51:57:1a:23:45: 93:00:40:9b:30:46:18:ad:b4:a5:63:4e:49:e3:a2:cc:44:28: 8f:91:62:fc:74:84:1c:f4:8e:b2:df:0d:7d:0e:64:ed:02:c0: af:36:ab:b8:09:3e:e1:5c:52:47:15:55:31:e7:68:63:a0:c9: 59:13:13:69:04:79:7b:3a:82:59:4d:a3:21:7a:12:f0:97:3c: 8c:88:33:e3:45:b2:8f:76:ef:c5:63:56:f9:ac:ce:d4:60:67: 67:c6:87:f2:6a:b2:71:d6:b6:52:64:e8:11:31:6b:f6:83:45: 8f:bd:23:72:17:dd:51:a6:ea:57:34:dd:51:82:26:9a:b8:c6: 48:89:7e:19:21:cb:8a:95:9c:95:f8:57:45:d7:b0:05:d6:ed: bd:c4:60:72 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUZDTkcZK7amTzIE8RverNwJl6D2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw WjAzMTEwLwYDVQQDEyhFOTY5MjQ2MjQzQkJBMjhDQThGQ0M2OERCMkM3MUJDQzU4 NDAyREZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf3XVwUlteEY ouz2Qmr5efvXfWsx2m8jj5clf9V8mnvPw5FgvykwbMmef130QDRRUqEQlNRNLukM xyis5mUio7ClmTupn7u9cpXBSjdFjs2BEMteC3oqt3mvCpTd1zaf3ICn9z8f/65e o63vGAXfmLshRbhgUoOWBjP8uiORJ1Ys9JhdQZppJPOKpNqi1un6vZWaUD1tPVeX 7sr9W15uryWKx67yF6Nijnisrz5rJO5xJR9NBX754+3igWRg7nFGRWAHQckdqPFx sSwscI0ciLAbSXujI3cy6qcO+/gGI8owCByyr3sE7GVllq9LTbAEOLEMWEEQ0Ce3 evPx03A08wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOlpJGJDu6KMqPzGjbLHG8xY QC36MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM3MzAzMjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g4wMA0GCSqGSIb3DQEBCwUAA4IBAQAgJhabuejvN+hgQ8NLt/hV wOAT60NU+VORlHvAz6NQXvG5ndSciHcMrtQUXxbb9BlAwhWFC+g8Vt5HXYemrk0O hbPXQ1V7J/hiZlLp/nxnExSO+JKaFxlsynfqtAZRQduy4o08iN9ZUVcaI0WTAECb MEYYrbSlY05J46LMRCiPkWL8dIQc9I6y3w19DmTtAsCvNqu4CT7hXFJHFVUx52hj oMlZExNpBHl7OoJZTaMhehLwlzyMiDPjRbKPdu/FY1b5rM7UYGdnxofyarJx1rZS ZOgRMWv2g0WPvSNyF91RpupXNN1RgiaauMZIiX4ZIcuKlZyV+FdF17AF1u29xGBy -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:57 2025 by rpki-client