$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa File: 323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa (raw, json) Hash identifier: lOZ7+OedrlMMNmyGoLXE8xWADpT/kVyOiUPbzw7Vt4M= Subject key identifier: ED:28:EC:73:06:04:D5:EB:55:E7:38:E4:06:30:BB:35:09:DA:D4:0E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 59B20722E2B3D6B7B488957C85E352AA037866C4 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa Signing time: Mon 16 Jun 2025 08:52:26 +0000 ROA not before: Mon 16 Jun 2025 08:47:26 +0000 ROA not after: Mon 15 Jun 2026 08:52:26 +0000 asID: 149285 IP address blocks: 2602:feda:e40::/44 maxlen: 44 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b2:07:22:e2:b3:d6:b7:b4:88:95:7c:85:e3:52:aa:03:78:66:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:26 2025 GMT Not After : Jun 15 08:52:26 2026 GMT Subject: CN=ED28EC730604D5EB55E738E40630BB3509DAD40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:0b:f0:bf:c6:1c:d2:b8:f6:6c:b8:43:e5: 6c:a9:8d:5f:a2:4c:e6:5a:a8:7c:ff:9c:c3:8b:06: f2:68:fc:fe:84:21:8d:aa:3a:e6:7c:c2:b5:2f:2c: af:d5:64:e3:62:88:5b:95:d9:ca:dd:d3:ae:31:2f: 9b:9f:76:7c:f0:d9:6f:b2:29:da:de:91:d1:27:c7: bb:df:ce:28:a5:71:82:73:e5:a0:cc:93:c0:15:2a: 46:4f:d3:25:e9:d1:19:07:27:50:2b:8a:fe:e7:fd: 73:88:81:25:b4:00:9f:85:96:b2:50:7c:6e:4e:c1: 01:b5:e1:29:07:77:b4:84:ae:96:59:c7:b8:02:57: 15:cb:32:05:22:c1:d4:3d:31:0b:6b:00:25:24:23: 70:df:2c:df:7d:ef:b0:dd:d0:8f:5e:17:c2:3a:84: 4a:92:2e:14:d9:b2:5a:83:47:28:34:0d:fd:53:bc: 66:91:a5:4e:c6:fe:35:04:b6:5c:74:d4:38:c7:2d: e9:7d:2e:9a:8c:c7:7e:a8:a0:13:3b:f3:1d:0f:de: e5:dc:29:b7:52:a0:4c:c1:58:10:f2:bf:8b:04:ad: 85:33:73:f3:1e:28:03:71:ea:21:0f:d8:96:e7:a6: 50:5d:c4:17:ac:8a:20:51:90:2e:1a:2b:23:58:dc: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:28:EC:73:06:04:D5:EB:55:E7:38:E4:06:30:BB:35:09:DA:D4:0E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e40::/44 Signature Algorithm: sha256WithRSAEncryption 35:17:1c:0f:40:3f:c8:7b:45:65:4d:d7:82:8d:b0:79:64:02: f7:f2:d8:a3:e9:7d:3d:b7:f6:15:88:9c:ce:dc:de:ca:64:1e: d5:c5:8f:f1:34:79:e2:f6:1e:05:92:27:e7:12:06:b0:27:31: 56:56:35:97:dd:5e:45:90:86:26:59:62:69:3f:38:d2:64:1c: 56:b0:32:3e:15:03:78:dd:7b:7f:5e:f0:84:f8:72:9a:ed:01: 3d:56:85:98:ae:39:8a:cc:25:7a:e1:4a:a5:95:52:f2:b0:dc: 26:88:00:de:2e:9f:d6:06:22:1e:b5:a4:2a:27:5e:66:2a:1b: 30:3d:59:94:5d:ee:70:3e:3e:8a:63:b9:be:a3:aa:93:79:34: b4:ae:0c:77:ab:5b:dd:4a:d4:f8:e2:e2:13:62:dd:f8:df:15: 8a:9e:6f:ec:cd:28:9a:96:30:b8:f8:be:28:cd:33:80:ca:2d: 52:e6:d2:d8:0a:90:d4:5a:74:f1:e0:8b:25:85:1d:70:e8:ad: 7f:55:8c:f0:55:92:0b:ba:50:0a:05:62:b3:37:91:1a:45:e3: 9e:62:a9:dc:93:ee:39:a0:75:f3:e2:bd:ad:bc:d8:b6:73:6a: 46:65:19:ed:0b:5f:7f:29:2c:b0:95:93:ab:a2:e7:a6:2d:27: b0:ca:af:e1 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUWbIHIuKz1re0iJV8heNSqgN4ZsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI2WhcNMjYwNjE1MDg1MjI2 WjAzMTEwLwYDVQQDEyhFRDI4RUM3MzA2MDRENUVCNTVFNzM4RTQwNjMwQkIzNTA5 REFENDBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8YL8L/GHNK4 9my4Q+VsqY1fokzmWqh8/5zDiwbyaPz+hCGNqjrmfMK1Lyyv1WTjYohbldnK3dOu MS+bn3Z88Nlvsina3pHRJ8e7384opXGCc+WgzJPAFSpGT9Ml6dEZBydQK4r+5/1z iIEltACfhZayUHxuTsEBteEpB3e0hK6WWce4AlcVyzIFIsHUPTELawAlJCNw3yzf fe+w3dCPXhfCOoRKki4U2bJag0coNA39U7xmkaVOxv41BLZcdNQ4xy3pfS6ajMd+ qKATO/MdD97l3Cm3UqBMwVgQ8r+LBK2FM3PzHigDceohD9iW56ZQXcQXrIogUZAu GisjWNyyJwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFO0o7HMGBNXrVec45AYwuzUJ 2tQOMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzNDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEzNDM5MzIzODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g5AMA0GCSqGSIb3DQEBCwUAA4IBAQA1FxwPQD/Ie0VlTdeCjbB5 ZAL38tij6X09t/YViJzO3N7KZB7VxY/xNHni9h4FkifnEgawJzFWVjWX3V5FkIYm WWJpPzjSZBxWsDI+FQN43Xt/XvCE+HKa7QE9VoWYrjmKzCV64UqllVLysNwmiADe Lp/WBiIetaQqJ15mKhswPVmUXe5wPj6KY7m+o6qTeTS0rgx3q1vdStT44uITYt34 3xWKnm/szSialjC4+L4ozTOAyi1S5tLYCpDUWnTx4IslhR1w6K1/VYzwVZILulAK BWKzN5EaReOeYqnck+45oHXz4r2tvNi2c2pGZRntC19/KSywlZOrouemLSewyq/h -----END CERTIFICATE-----Generated at Wed Nov 5 09:42:36 2025 by rpki-client