$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa File: 323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa (raw, json) Hash identifier: AG40dUpxs+7q9fEMaaRec6298+I/w4roCMJz6EcHWMk= Subject key identifier: 8D:F3:BB:01:87:FA:A2:6A:59:E2:E5:59:C8:B8:56:AF:E4:27:8F:15 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7EE6DD22B4ECA5471B121DF605F777B0F1D70339 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:25 +0000 ROA not before: Mon 16 Jun 2025 08:47:25 +0000 ROA not after: Mon 15 Jun 2026 08:52:25 +0000 asID: 46997 IP address blocks: 2602:feda:30::/44 maxlen: 44 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e6:dd:22:b4:ec:a5:47:1b:12:1d:f6:05:f7:77:b0:f1:d7:03:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:25 2025 GMT Not After : Jun 15 08:52:25 2026 GMT Subject: CN=8DF3BB0187FAA26A59E2E559C8B856AFE4278F15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:f1:88:b9:fb:2f:1f:f0:47:e2:6a:b5:64: 26:d6:7c:49:b7:b3:87:b4:a3:af:2a:55:37:a9:b2: a9:56:dd:2e:74:fd:0d:d7:a9:8c:28:40:cc:31:bc: 00:2c:08:f9:77:e5:0c:41:33:89:35:cc:58:f0:ee: 45:82:78:e9:53:2c:60:7a:b1:63:25:9a:a4:8b:3d: 01:0d:ca:67:6d:2d:d8:f6:5a:5b:8b:6a:09:bf:64: 76:d2:f6:37:20:42:61:c6:29:45:6b:7a:b1:23:fe: dd:0d:34:c3:0f:c1:ba:91:f9:0f:42:06:5a:1c:6a: 34:4a:c2:28:18:cb:1f:ac:be:6b:42:b7:b7:12:2d: b6:aa:85:c2:37:3c:c3:c4:0f:c0:dc:77:09:c4:f6: a8:03:71:06:79:59:6b:28:86:d6:f1:02:f3:e5:f3: c1:64:19:f8:9f:a4:0f:d0:39:08:d3:8e:74:65:df: cb:6b:e7:78:06:76:3f:77:f4:92:ff:cf:4f:57:61: d8:e9:22:ac:c4:a3:9e:f7:c5:9c:5f:5b:48:89:11: 00:c1:1e:c4:1a:f0:62:6a:2f:b1:ee:e6:b5:4e:be: f5:ba:50:a8:34:88:b7:ef:a2:b9:2c:69:d7:7e:95: 24:11:03:06:55:4d:8c:75:d0:ad:ec:f4:f0:c9:31: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:BB:01:87:FA:A2:6A:59:E2:E5:59:C8:B8:56:AF:E4:27:8F:15 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:30::/44 Signature Algorithm: sha256WithRSAEncryption 37:55:36:fc:8a:ed:f6:fc:d1:b5:cd:0d:6b:b3:a1:ca:18:43: a1:48:c1:6d:75:8b:22:cc:68:ab:4f:47:4e:27:f4:5a:1a:6b: 64:a3:a4:d8:55:53:6f:65:3f:bf:a5:2b:08:db:28:c5:e0:5e: 5f:f0:b3:1e:c9:f7:1d:c9:76:46:76:6e:65:83:75:8d:a4:6a: 76:39:4e:96:71:a0:0c:bf:df:f7:58:84:af:2c:2b:db:8f:ff: 29:8a:6a:fd:db:59:53:73:21:b1:5e:ca:73:d0:3d:ce:fd:b8: b1:33:ac:bb:09:2d:0a:33:b7:3e:4f:25:07:0c:be:30:21:c2: 15:41:15:1c:72:a3:b5:b8:0f:a8:1f:67:5a:ee:1a:50:c6:7a: 53:7b:19:7d:09:58:f4:e6:a2:72:dc:a3:3b:2e:d7:e2:a7:25: 34:ee:22:1d:b4:7c:cd:38:4c:41:b0:00:8e:cb:a4:cb:ac:e9: 9a:45:3a:b0:b7:5e:a4:0f:ae:bf:1a:39:db:45:6b:a6:d8:dc: c3:46:bb:af:64:17:da:f7:ed:5a:92:b3:dd:b9:31:c2:cf:5b: 06:f7:67:d4:9d:ce:60:62:a3:52:3e:03:7b:4f:2b:66:0b:5e: d9:a1:39:ac:21:72:7f:e4:af:2c:76:a2:3e:35:cd:20:bd:14: 47:09:79:3f -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUfubdIrTspUcbEh32Bfd3sPHXAzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI1WhcNMjYwNjE1MDg1MjI1 WjAzMTEwLwYDVQQDEyg4REYzQkIwMTg3RkFBMjZBNTlFMkU1NTlDOEI4NTZBRkU0 Mjc4RjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3zxiLn7Lx/w R+JqtWQm1nxJt7OHtKOvKlU3qbKpVt0udP0N16mMKEDMMbwALAj5d+UMQTOJNcxY 8O5FgnjpUyxgerFjJZqkiz0BDcpnbS3Y9lpbi2oJv2R20vY3IEJhxilFa3qxI/7d DTTDD8G6kfkPQgZaHGo0SsIoGMsfrL5rQre3Ei22qoXCNzzDxA/A3HcJxPaoA3EG eVlrKIbW8QLz5fPBZBn4n6QP0DkI0450Zd/La+d4BnY/d/SS/89PV2HY6SKsxKOe 98WcX1tIiREAwR7EGvBiai+x7ua1Tr71ulCoNIi376K5LGnXfpUkEQMGVU2MddCt 7PTwyTHHpwIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFI3zuwGH+qJqWeLlWci4Vq/k J48VMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH BCYC/toAMDANBgkqhkiG9w0BAQsFAAOCAQEAN1U2/Irt9vzRtc0Na7OhyhhDoUjB bXWLIsxoq09HTif0WhprZKOk2FVTb2U/v6UrCNsoxeBeX/CzHsn3Hcl2RnZuZYN1 jaRqdjlOlnGgDL/f91iErywr24//KYpq/dtZU3MhsV7Kc9A9zv24sTOsuwktCjO3 Pk8lBwy+MCHCFUEVHHKjtbgPqB9nWu4aUMZ6U3sZfQlY9OaictyjOy7X4qclNO4i HbR8zThMQbAAjsuky6zpmkU6sLdepA+uvxo520Vrptjcw0a7r2QX2vftWpKz3bkx ws9bBvdn1J3OYGKjUj4De08rZgte2aE5rCFyf+SvLHaiPjXNIL0URwl5Pw== -----END CERTIFICATE-----Generated at Mon Oct 27 12:24:22 2025 by rpki-client