$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa File: 323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa (raw, json) Hash identifier: Ln9/B68ONnfFEltLhQTswX4JmwHfPLmHoM6DcM9KG00= Subject key identifier: 6C:64:91:DA:26:9B:76:80:3E:16:03:6F:AF:7C:8C:F8:AF:E6:E7:CB Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1ED51BE072EF0FF777DF0ED62D69377B964ED2C8 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa Signing time: Mon 16 Jun 2025 08:52:26 +0000 ROA not before: Mon 16 Jun 2025 08:47:26 +0000 ROA not after: Mon 15 Jun 2026 08:52:26 +0000 asID: 147041 IP address blocks: 2602:feda:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d5:1b:e0:72:ef:0f:f7:77:df:0e:d6:2d:69:37:7b:96:4e:d2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:26 2025 GMT Not After : Jun 15 08:52:26 2026 GMT Subject: CN=6C6491DA269B76803E16036FAF7C8CF8AFE6E7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:a5:44:b5:2d:84:12:e7:3a:f9:4b:14:0a: 3d:2c:5c:44:44:85:f6:d6:a5:fa:93:44:82:21:7b: b2:78:c0:8d:17:34:1b:ab:ee:b4:4e:25:d7:21:04: 82:43:ee:c7:88:6b:4a:62:2e:52:12:9c:64:4e:ae: 49:51:c3:5b:7d:e2:b5:c4:8e:fb:e6:f1:df:e1:14: 23:45:6a:49:63:e3:6f:ae:29:17:44:ba:30:75:3a: 98:71:e4:bf:af:41:02:4c:58:75:c0:f9:4d:8c:56: ed:04:60:e2:cc:80:d3:c7:e9:78:5d:25:19:3e:c9: 30:f5:72:76:66:76:86:c6:d3:c6:d6:cb:55:69:4c: 2e:c0:e1:76:1d:c0:5c:99:c4:d0:62:77:aa:57:7d: 44:58:82:bd:bf:12:13:c2:2f:d3:e8:8d:ce:4d:33: f2:69:66:28:0b:47:ac:fd:37:10:50:2a:a6:9b:67: 3b:95:78:f3:a1:0f:3d:59:0c:3d:97:7e:d3:1d:d6: 17:84:58:a9:5d:c5:62:12:db:85:d1:fc:f6:26:96: 86:5d:fc:02:02:b3:9f:77:67:43:8c:d9:4c:77:50: a4:8c:a6:c1:32:ba:8a:29:27:f7:dd:b1:56:0d:91: 8b:64:11:5e:d9:9c:f4:5c:45:56:bf:a0:3f:7d:5e: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:64:91:DA:26:9B:76:80:3E:16:03:6F:AF:7C:8C:F8:AF:E6:E7:CB X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f000::/44 Signature Algorithm: sha256WithRSAEncryption 3b:e7:bd:96:a2:40:6c:0e:d0:cc:59:86:27:f2:d5:2f:a2:22: 0a:bf:b3:d2:25:63:14:a3:63:d4:f4:1b:8c:58:96:d4:63:42: 08:28:90:f3:da:52:4a:1a:2b:80:03:a1:78:9a:9f:d3:64:e3: 36:09:4d:d7:f2:20:dc:04:d0:dd:42:aa:54:71:e4:1e:4c:f7: 00:a8:ac:c9:94:ed:76:e1:e8:9c:68:64:8f:d9:88:39:a5:92: 3b:63:b8:b8:73:4a:13:d5:ba:29:79:11:af:5e:45:18:98:27: c4:6c:72:6d:f3:0e:9f:4d:90:82:a6:74:f4:ba:66:11:c0:60: 02:e2:38:ae:68:f3:49:1e:b4:bb:d4:72:92:76:6c:e6:63:cd: 1c:19:81:02:9c:3c:ea:e9:4d:4e:2a:43:7b:1a:f2:64:8e:43: 6f:e9:f3:29:7c:24:95:32:06:5b:7a:88:47:f7:ff:8f:f1:85: 4c:3e:66:58:67:46:5d:5f:e0:ae:6e:4e:67:64:4a:be:8f:53: fa:bb:48:b9:08:d0:93:b4:2a:7b:3d:ed:64:de:85:4a:03:33: 76:33:4b:11:e5:1f:5c:61:80:a2:de:ed:8e:7e:ad:c8:2a:4d: e3:f0:a7:6e:64:53:b9:d9:90:96:b0:6f:cc:bc:4b:ec:ed:4f: 5d:c3:b1:f1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHtUb4HLvD/d33w7WLWk3e5ZO0sgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI2WhcNMjYwNjE1MDg1MjI2 WjAzMTEwLwYDVQQDEyg2QzY0OTFEQTI2OUI3NjgwM0UxNjAzNkZBRjdDOENGOEFG RTZFN0NCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmalRLUthBLn OvlLFAo9LFxERIX21qX6k0SCIXuyeMCNFzQbq+60TiXXIQSCQ+7HiGtKYi5SEpxk Tq5JUcNbfeK1xI775vHf4RQjRWpJY+NvrikXRLowdTqYceS/r0ECTFh1wPlNjFbt BGDizIDTx+l4XSUZPskw9XJ2ZnaGxtPG1stVaUwuwOF2HcBcmcTQYneqV31EWIK9 vxITwi/T6I3OTTPyaWYoC0es/TcQUCqmm2c7lXjzoQ89WQw9l37THdYXhFipXcVi EtuF0fz2JpaGXfwCArOfd2dDjNlMd1CkjKbBMrqKKSf33bFWDZGLZBFe2Zz0XEVW v6A/fV7g5wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGxkkdomm3aAPhYDb698jPiv 5ufLMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjYzMDMwMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMTM0MzczMDM0MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQmAv7a8AAwDQYJKoZIhvcNAQELBQADggEBADvnvZaiQGwO0MxZhify 1S+iIgq/s9IlYxSjY9T0G4xYltRjQggokPPaUkoaK4ADoXian9Nk4zYJTdfyINwE 0N1CqlRx5B5M9wCorMmU7Xbh6JxoZI/ZiDmlkjtjuLhzShPVuil5Ea9eRRiYJ8Rs cm3zDp9NkIKmdPS6ZhHAYALiOK5o80ketLvUcpJ2bOZjzRwZgQKcPOrpTU4qQ3sa 8mSOQ2/p8yl8JJUyBlt6iEf3/4/xhUw+ZlhnRl1f4K5uTmdkSr6PU/q7SLkI0JO0 Kns97WTehUoDM3YzSxHlH1xhgKLe7Y5+rcgqTePwp25kU7nZkJawb8y8S+ztT13D sfE= -----END CERTIFICATE-----Generated at Tue Jun 17 11:13:05 2025 by rpki-client