$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa File: 323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa (raw, json) Hash identifier: T5eMF1qRXLSv/LzKUUF0NuM3Yu5ORh5ztfVxuRnsm8U= Subject key identifier: 82:8C:BB:09:09:CA:8B:33:2F:55:85:A0:C2:1C:3C:C2:1C:9B:CD:79 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7AD9F6F7AD416030C4F5683D195714A632B9037B Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa Signing time: Mon 16 Jun 2025 08:52:25 +0000 ROA not before: Mon 16 Jun 2025 08:47:25 +0000 ROA not after: Mon 15 Jun 2026 08:52:25 +0000 asID: 149835 IP address blocks: 2602:feda:e60::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d9:f6:f7:ad:41:60:30:c4:f5:68:3d:19:57:14:a6:32:b9:03:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:25 2025 GMT Not After : Jun 15 08:52:25 2026 GMT Subject: CN=828CBB0909CA8B332F5585A0C21C3CC21C9BCD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:37:c7:0e:a9:3b:5b:72:0e:cb:c0:06:9a: 9f:87:8b:a5:80:fb:7e:bd:0b:1a:80:d2:c5:2a:1d: bd:94:95:7e:22:e4:19:44:9f:41:59:97:45:79:a5: ad:62:07:01:ad:de:98:35:fb:85:96:34:ea:b2:29: 1e:dd:83:dd:8c:c8:76:2e:22:b9:f4:63:2d:04:6d: d4:a4:76:83:2c:ea:d0:01:45:30:5e:f9:03:ba:1a: 6a:de:30:b0:75:69:ae:2f:82:26:ca:e7:83:39:d6: 53:e5:09:59:1c:97:25:7c:32:22:5e:66:0e:1e:c6: dd:3c:61:df:b7:6f:4f:11:b0:a5:4d:b8:86:ad:39: 73:7e:a7:26:eb:c9:9d:33:d4:28:da:16:dd:7b:af: 83:83:0b:c0:bf:c1:06:26:55:35:03:d1:01:6b:0d: c2:6f:97:7f:86:ad:43:e7:87:22:e1:4d:a2:5c:51: 3c:0b:e8:39:68:4b:9c:82:7d:be:df:d1:b3:70:3b: 59:a5:74:f1:7a:82:76:02:d5:3e:66:ab:1a:a9:5d: 3e:41:5f:e6:d7:bd:a1:52:8b:32:df:a5:f9:28:62: 6f:32:cd:d3:ae:e9:7f:26:26:46:9d:d8:90:f9:c4: 8e:64:fa:3c:ac:4c:18:9f:5b:82:8e:00:82:7b:09: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8C:BB:09:09:CA:8B:33:2F:55:85:A0:C2:1C:3C:C2:1C:9B:CD:79 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e60::/44 Signature Algorithm: sha256WithRSAEncryption 70:68:c9:9c:43:2f:3b:9d:29:7a:6f:a1:18:11:a6:b6:25:5d: da:92:cf:a7:ae:bf:a0:d7:70:c5:23:ed:b1:3b:0c:01:29:97: 90:7a:33:1d:c9:37:71:03:7f:70:2f:07:1b:19:de:e5:f3:f4: c4:75:1f:cf:ac:79:ca:27:33:6c:a0:b8:f1:90:f5:76:6d:87: ae:01:7e:b3:cf:b5:5c:d4:d7:0e:20:dc:2b:86:a8:7d:59:61: 22:2e:40:ac:8d:8c:72:8b:9b:aa:6c:f7:4a:39:a7:2c:cf:52: ea:92:e4:ad:14:26:67:67:65:fc:d3:c8:7f:67:22:cc:38:52: 32:d2:a5:76:c7:50:9a:f2:39:8b:4c:45:d6:eb:c2:8a:c8:0d: 49:05:de:a5:8a:91:d7:e2:71:06:1e:50:70:52:53:2d:ae:44: 65:2e:c9:70:8d:6f:27:54:4b:06:d4:79:df:28:8b:0f:fc:40: 30:d9:bc:16:42:52:16:ee:c3:2d:aa:a2:fc:ab:df:3d:c6:fc: bd:46:a6:7c:6a:9c:f1:48:b4:c8:c6:a6:ea:c2:0c:7a:ce:88: 7e:c6:f9:45:ce:6d:6c:18:5e:ce:2a:64:e5:89:88:dd:3a:53: 7a:da:87:43:8a:4b:82:39:63:7a:40:6b:82:f6:86:66:93:1a: cb:bf:db:f2 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUetn2961BYDDE9Wg9GVcUpjK5A3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI1WhcNMjYwNjE1MDg1MjI1 WjAzMTEwLwYDVQQDEyg4MjhDQkIwOTA5Q0E4QjMzMkY1NTg1QTBDMjFDM0NDMjFD OUJDRDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd03xw6pO1ty DsvABpqfh4ulgPt+vQsagNLFKh29lJV+IuQZRJ9BWZdFeaWtYgcBrd6YNfuFljTq sike3YPdjMh2LiK59GMtBG3UpHaDLOrQAUUwXvkDuhpq3jCwdWmuL4ImyueDOdZT 5QlZHJclfDIiXmYOHsbdPGHft29PEbClTbiGrTlzfqcm68mdM9Qo2hbde6+DgwvA v8EGJlU1A9EBaw3Cb5d/hq1D54ci4U2iXFE8C+g5aEucgn2+39GzcDtZpXTxeoJ2 AtU+ZqsaqV0+QV/m172hUosy36X5KGJvMs3Trul/JiZGndiQ+cSOZPo8rEwYn1uC jgCCewlORwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIKMuwkJyoszL1WFoMIcPMIc m815MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM5MzgzMzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g5gMA0GCSqGSIb3DQEBCwUAA4IBAQBwaMmcQy87nSl6b6EYEaa2 JV3aks+nrr+g13DFI+2xOwwBKZeQejMdyTdxA39wLwcbGd7l8/TEdR/PrHnKJzNs oLjxkPV2bYeuAX6zz7Vc1NcOINwrhqh9WWEiLkCsjYxyi5uqbPdKOacsz1LqkuSt FCZnZ2X808h/ZyLMOFIy0qV2x1Ca8jmLTEXW68KKyA1JBd6lipHX4nEGHlBwUlMt rkRlLslwjW8nVEsG1HnfKIsP/EAw2bwWQlIW7sMtqqL8q989xvy9RqZ8apzxSLTI xqbqwgx6zoh+xvlFzm1sGF7OKmTliYjdOlN62odDikuCOWN6QGuC9oZmkxrLv9vy -----END CERTIFICATE-----Generated at Mon Jun 16 23:39:44 2025 by rpki-client