$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa File: 323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa (raw, json) Hash identifier: fNnT5e0O44ZcedxkT38pu7z/HaoWoosq1d6yY4+aCGo= Subject key identifier: 33:C1:C7:69:D6:8B:6F:CD:69:D8:D1:43:29:EB:7E:BA:48:06:B5:48 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6870A97FAD9F0C7EF62F2A296274B1FD954355E8 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa Signing time: Sun 02 Nov 2025 15:21:29 +0000 ROA not before: Sun 02 Nov 2025 15:16:29 +0000 ROA not after: Sun 01 Nov 2026 15:21:29 +0000 asID: 150289 IP address blocks: 2602:feda:e80::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:70:a9:7f:ad:9f:0c:7e:f6:2f:2a:29:62:74:b1:fd:95:43:55:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Nov 2 15:16:29 2025 GMT Not After : Nov 1 15:21:29 2026 GMT Subject: CN=33C1C769D68B6FCD69D8D14329EB7EBA4806B548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7a:58:0b:cf:c8:89:ba:fa:e8:cb:42:dd:4c: 98:33:ee:14:1b:02:a2:d1:66:33:e1:f3:7d:42:40: d7:b6:7c:a7:02:8d:4f:2d:32:3a:b5:03:a8:30:08: 02:6d:f6:c3:10:32:6e:e9:b3:b5:87:5c:a0:22:4f: df:39:36:56:cb:7a:d3:69:36:d4:4c:b0:a1:dd:c1: 84:c3:9d:75:8f:07:c5:87:78:a6:0c:6a:a7:1f:98: f2:13:8f:d5:44:b4:a9:ef:03:0f:c3:02:6c:5a:51: d0:f6:b9:51:34:4b:d2:c0:d7:f6:ca:83:d5:94:52: 43:9b:cf:40:46:1b:1a:d4:9a:06:ea:50:a5:73:6f: 6e:9c:0b:db:87:17:21:c7:ed:03:3b:cd:e8:e2:79: 58:77:5d:cf:00:bf:ea:cf:cd:f9:87:71:22:11:7b: 0a:07:97:1e:4c:69:2e:ea:07:8d:72:11:8f:e4:62: 31:7b:8b:f3:09:2a:3b:70:cc:ae:34:49:19:fe:54: eb:01:cf:b7:26:b0:6b:22:f6:5d:e1:88:a9:1a:f7: 3c:5c:2a:02:01:ce:e8:a5:76:de:eb:8b:db:7e:87: 08:e7:8f:a5:95:9b:81:0a:e6:67:a6:c7:c8:91:35: aa:ff:e5:0c:03:10:14:b2:77:1f:61:99:79:eb:52: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C1:C7:69:D6:8B:6F:CD:69:D8:D1:43:29:EB:7E:BA:48:06:B5:48 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e80::/44 Signature Algorithm: sha256WithRSAEncryption 81:26:49:80:cc:77:75:f9:48:fe:a6:a6:47:67:9b:90:f2:f1: ad:20:3d:8e:e7:41:5a:58:75:cc:27:e9:fd:d8:68:25:ba:12: 1d:20:48:30:5e:1f:ff:f7:2b:49:23:cd:db:48:f7:ca:07:80: 4c:39:5c:ac:5e:7f:91:4e:b1:62:73:27:48:06:75:d9:1f:29: 36:0c:46:86:3a:34:8a:d0:5c:8c:c0:4a:c8:53:2f:25:4b:d2: ea:95:0c:80:51:e2:0b:4a:92:cc:6b:39:78:f2:f7:16:df:19: 44:fa:03:9f:75:b7:49:db:24:d0:ab:30:60:90:4d:91:b7:a9: 1f:43:38:10:e7:25:bb:48:3c:aa:c2:10:ba:a6:a4:19:c8:0e: 6a:e0:b1:a7:f5:41:91:cb:ff:2f:89:f9:5f:72:ad:42:52:cb: 08:05:74:ac:c1:2f:ca:2c:47:92:db:04:a3:29:b2:1c:10:14: 47:7c:ab:4d:de:9e:59:9c:fd:f7:a3:8b:be:e7:d0:6f:3a:11: 9c:d4:ee:d8:27:c1:31:f5:30:2b:34:3c:c3:43:2f:c1:6a:29: d6:56:4f:8c:41:c0:7e:a7:b7:e5:d2:05:fb:ba:b3:f6:b1:dd: 78:c8:d7:96:3f:32:d3:42:32:47:bd:78:24:5b:40:d6:1b:89: f8:b6:c6:39 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUaHCpf62fDH72LyopYnSx/ZVDVegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUxMTAyMTUxNjI5WhcNMjYxMTAxMTUyMTI5 WjAzMTEwLwYDVQQDEygzM0MxQzc2OUQ2OEI2RkNENjlEOEQxNDMyOUVCN0VCQTQ4 MDZCNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XpYC8/Iibr6 6MtC3UyYM+4UGwKi0WYz4fN9QkDXtnynAo1PLTI6tQOoMAgCbfbDEDJu6bO1h1yg Ik/fOTZWy3rTaTbUTLCh3cGEw511jwfFh3imDGqnH5jyE4/VRLSp7wMPwwJsWlHQ 9rlRNEvSwNf2yoPVlFJDm89ARhsa1JoG6lClc29unAvbhxchx+0DO83o4nlYd13P AL/qz835h3EiEXsKB5ceTGku6geNchGP5GIxe4vzCSo7cMyuNEkZ/lTrAc+3JrBr IvZd4YipGvc8XCoCAc7opXbe64vbfocI54+llZuBCuZnpsfIkTWq/+UMAxAUsncf YZl561Kg5wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDPBx2nWi2/NadjRQynrfrpI BrVIMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzODMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNTMwMzIzODM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g6AMA0GCSqGSIb3DQEBCwUAA4IBAQCBJkmAzHd1+Uj+pqZHZ5uQ 8vGtID2O50FaWHXMJ+n92GgluhIdIEgwXh//9ytJI83bSPfKB4BMOVysXn+RTrFi cydIBnXZHyk2DEaGOjSK0FyMwErIUy8lS9LqlQyAUeILSpLMazl48vcW3xlE+gOf dbdJ2yTQqzBgkE2Rt6kfQzgQ5yW7SDyqwhC6pqQZyA5q4LGn9UGRy/8viflfcq1C UssIBXSswS/KLEeS2wSjKbIcEBRHfKtN3p5ZnP33o4u+59BvOhGc1O7YJ8Ex9TAr NDzDQy/BainWVk+MQcB+p7fl0gX7urP2sd14yNeWPzLTQjJHvXgkW0DWG4n4tsY5 -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:01 2025 by rpki-client