$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa File: 323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa (raw, json) Hash identifier: pYc6n6tuq+jt+1LyT5K39wL4fzwU8DxD9DkLg1bdbDc= Subject key identifier: 41:A2:A7:3A:D7:F0:85:C3:47:B0:08:B4:9B:3F:19:0E:12:46:4C:25 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3BD0ED8809669E37DD2E28E66C19E4E9AFD147C2 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 147173 IP address blocks: 2602:feda:f020::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:ed:88:09:66:9e:37:dd:2e:28:e6:6c:19:e4:e9:af:d1:47:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=41A2A73AD7F085C347B008B49B3F190E12464C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:15:98:59:95:f6:05:12:96:f5:56:1b:85: 9a:cc:af:bb:d5:42:73:b1:55:4b:b1:e9:67:f5:2a: 17:7a:e4:47:b5:54:a0:df:ab:84:96:98:86:43:31: bf:77:33:d9:45:f9:74:cb:93:4a:c4:84:6a:7c:90: 85:99:0d:2f:14:31:64:29:49:42:a7:83:60:88:93: a9:82:b8:5b:10:c6:12:47:ec:a8:18:6b:66:3b:d1: af:11:fc:8f:01:98:8b:0e:51:ff:72:2b:2a:5b:26: ba:2a:a6:b3:8c:e0:19:d5:14:3d:bb:3c:b5:14:00: f5:ad:92:0a:9f:9d:73:af:e6:b0:12:cb:79:2e:57: 29:2e:f0:13:13:ae:e7:a7:15:38:58:c0:e9:5b:c3: 98:61:38:88:b6:ff:c6:48:b2:52:0e:94:c0:ce:3d: b5:35:10:d2:81:d6:fc:67:85:95:2d:de:cd:07:e6: 03:f1:b4:90:22:82:ac:76:d2:60:44:66:81:01:88: 27:52:c9:7f:28:85:e4:5b:63:b2:ec:01:55:4f:2b: 78:e8:0e:18:fa:df:70:2e:cb:6d:b4:6a:07:70:97: 27:57:6c:a1:fd:4c:f4:5c:e0:44:0e:07:e7:a9:66: 53:c2:bb:e7:a2:65:3f:f8:ed:70:64:9d:8d:76:81: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:A7:3A:D7:F0:85:C3:47:B0:08:B4:9B:3F:19:0E:12:46:4C:25 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f020::/44 Signature Algorithm: sha256WithRSAEncryption 6e:dc:31:f7:41:70:9a:a9:61:42:cb:b8:49:4d:bd:2d:c7:c8: 0c:b0:11:1f:30:98:7f:83:dd:d5:c1:33:22:38:ce:3e:77:42: c5:06:2c:ca:e8:f0:d3:e8:d4:28:ba:af:5e:bf:39:3e:52:e3: e2:04:0e:1c:f9:5b:48:45:3f:36:1b:b6:52:af:03:f5:16:af: 36:15:8a:2d:35:56:4a:46:d6:da:6f:bf:5a:f3:b2:e9:45:96: 81:51:65:41:ee:9c:4f:52:e3:6a:8e:a7:ba:8a:cf:26:b5:d2: db:ed:ea:28:a6:f7:51:a9:90:d8:bf:72:59:22:0e:5d:bd:42: ba:7b:91:10:97:44:7a:43:04:2c:20:aa:59:2c:d7:41:19:f8: de:04:9f:f8:0d:70:20:60:90:3f:a5:35:52:b1:1f:78:20:29: 97:ed:d9:84:12:8d:ce:c0:58:e3:37:7e:cd:61:0d:38:6c:56: 7e:b9:59:9c:f6:65:3b:1d:b0:41:89:9e:28:34:28:df:a1:90: 56:42:37:03:20:08:8f:42:aa:03:54:c9:cf:4a:ac:c9:86:d7: 07:a2:87:7b:2a:ef:5b:ed:a6:3c:e6:e4:c6:58:b6:bd:81:f4: 3b:58:8b:2c:51:7a:0c:be:59:bb:bf:a1:85:48:f1:a1:26:2b: 8a:3f:c6:97 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUO9DtiAlmnjfdLijmbBnk6a/RR8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyg0MUEyQTczQUQ3RjA4NUMzNDdCMDA4QjQ5QjNGMTkwRTEy NDY0QzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIcVmFmV9gUS lvVWG4WazK+71UJzsVVLseln9SoXeuRHtVSg36uElpiGQzG/dzPZRfl0y5NKxIRq fJCFmQ0vFDFkKUlCp4NgiJOpgrhbEMYSR+yoGGtmO9GvEfyPAZiLDlH/cisqWya6 KqazjOAZ1RQ9uzy1FAD1rZIKn51zr+awEst5LlcpLvATE67npxU4WMDpW8OYYTiI tv/GSLJSDpTAzj21NRDSgdb8Z4WVLd7NB+YD8bSQIoKsdtJgRGaBAYgnUsl/KIXk W2Oy7AFVTyt46A4Y+t9wLstttGoHcJcnV2yh/Uz0XOBEDgfnqWZTwrvnomU/+O1w ZJ2NdoErHwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFEGipzrX8IXDR7AItJs/GQ4S RkwlMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjYzMDMyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMTM0MzczMTM3MzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQmAv7a8CAwDQYJKoZIhvcNAQELBQADggEBAG7cMfdBcJqpYULLuElN vS3HyAywER8wmH+D3dXBMyI4zj53QsUGLMro8NPo1Ci6r16/OT5S4+IEDhz5W0hF PzYbtlKvA/UWrzYVii01VkpG1tpvv1rzsulFloFRZUHunE9S42qOp7qKzya10tvt 6iim91GpkNi/clkiDl29Qrp7kRCXRHpDBCwgqlks10EZ+N4En/gNcCBgkD+lNVKx H3ggKZft2YQSjc7AWOM3fs1hDThsVn65WZz2ZTsdsEGJnig0KN+hkFZCNwMgCI9C qgNUyc9KrMmG1weih3sq71vtpjzm5MZYtr2B9DtYiyxRegy+Wbu/oYVI8aEmK4o/ xpc= -----END CERTIFICATE-----Generated at Wed Jun 18 00:55:04 2025 by rpki-client