$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: ulXDvFUua9bT7iDbuoJeYmUGHrWuFZKrMGRiNILEFv0= Subject key identifier: 63:B6:A5:BC:20:B6:B9:00:16:6E:90:2B:72:CF:D4:F1:FA:59:E5:08 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 34E4E14EEA53D39DD435B84308BE9B9D7A405D01 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:32 +0000 ROA not before: Mon 16 Jun 2025 08:47:32 +0000 ROA not after: Mon 15 Jun 2026 08:52:32 +0000 asID: 46997 IP address blocks: 2602:feda:3::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e4:e1:4e:ea:53:d3:9d:d4:35:b8:43:08:be:9b:9d:7a:40:5d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:32 2025 GMT Not After : Jun 15 08:52:32 2026 GMT Subject: CN=63B6A5BC20B6B900166E902B72CFD4F1FA59E508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:b5:82:b2:2d:62:39:26:52:62:1a:62:84: 44:19:ec:a1:c7:4e:41:fa:f0:6c:ee:12:88:30:a9: 79:08:4b:c3:c9:09:2a:75:c1:95:97:33:a3:29:4d: c3:6b:b5:a2:05:12:e8:df:7c:d5:a9:38:95:0d:43: 40:1e:0a:67:f4:ad:e5:52:01:39:eb:03:45:6d:9c: ea:35:9d:f2:db:f8:b7:df:c7:56:2f:8f:5f:47:89: 70:12:f7:09:3e:e7:8c:53:3b:03:2b:fd:9c:09:8b: ec:7e:0f:d8:39:dd:e4:ee:37:39:32:b9:c4:0c:30: 9c:d7:18:96:67:af:ff:85:80:c0:66:80:49:ae:8c: 8d:2e:e5:1e:20:0e:b0:79:ef:0f:19:4d:7d:1b:60: 26:1d:a5:cb:c5:77:a3:e8:ef:80:fe:5a:da:d3:f0: 42:bb:55:d0:2d:4c:24:10:72:1b:4f:de:e7:65:ff: 0f:48:2d:3c:39:64:cd:59:72:17:3b:6c:a5:1d:00: c4:bf:1c:92:7f:0b:8f:04:1c:0d:9a:1f:ef:6b:18: 77:62:96:47:30:e5:0f:86:e6:07:43:31:dd:d7:44: dd:d3:fb:ca:5c:2b:13:65:ff:bd:66:38:b6:a6:13: 8f:7a:53:a0:0f:19:f6:4f:c5:75:81:44:6f:5a:a7: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B6:A5:BC:20:B6:B9:00:16:6E:90:2B:72:CF:D4:F1:FA:59:E5:08 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3::/48 Signature Algorithm: sha256WithRSAEncryption 52:af:57:13:3b:10:0c:a1:2d:5e:78:39:63:a0:73:38:78:04: 88:11:39:0b:53:1d:72:ce:63:6b:b4:cc:fe:e6:e5:89:97:25: 50:f9:4f:06:16:ad:b7:f3:4c:de:ec:db:6e:a5:25:a0:15:1f: 38:72:4b:36:17:05:62:0e:71:da:73:fb:f7:9a:c2:b1:a9:31: 4f:19:bc:7a:af:3d:32:eb:72:7f:74:90:6b:7f:d1:6a:dc:b2: c5:6c:ca:28:99:2c:ce:a9:b8:44:d7:a2:22:78:1b:20:9b:54: fb:85:e0:82:2c:ef:98:44:07:45:d9:fd:80:12:2b:42:c5:79: 01:b2:fe:96:0d:95:f9:26:27:b5:cc:ed:a9:f2:b1:2b:6e:78: b6:db:5f:a7:89:23:d1:72:2e:a9:55:7a:0c:47:e3:c4:87:95: f3:df:6c:31:53:63:ec:1c:eb:59:e4:81:5c:14:b8:b3:c7:2a: 51:fa:a6:1e:5e:f9:f2:9c:59:f9:6d:00:12:9b:d0:bf:fa:e2: 93:b0:05:91:2b:e5:04:e0:dd:d7:b7:4c:ad:0d:ff:cf:68:17: 51:ff:4d:16:75:f4:ee:f0:63:43:8f:08:f4:a6:b9:35:30:3e: 77:3e:81:44:96:73:f5:0c:2e:42:d7:6e:97:ae:80:0d:a4:61: a7:4c:95:f6 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUNOThTupT053UNbhDCL6bnXpAXQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMyWhcNMjYwNjE1MDg1MjMy WjAzMTEwLwYDVQQDEyg2M0I2QTVCQzIwQjZCOTAwMTY2RTkwMkI3MkNGRDRGMUZB NTlFNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyam1grItYjkm UmIaYoREGeyhx05B+vBs7hKIMKl5CEvDyQkqdcGVlzOjKU3Da7WiBRLo33zVqTiV DUNAHgpn9K3lUgE56wNFbZzqNZ3y2/i338dWL49fR4lwEvcJPueMUzsDK/2cCYvs fg/YOd3k7jc5MrnEDDCc1xiWZ6//hYDAZoBJroyNLuUeIA6wee8PGU19G2AmHaXL xXej6O+A/lra0/BCu1XQLUwkEHIbT97nZf8PSC08OWTNWXIXO2ylHQDEvxySfwuP BBwNmh/vaxh3YpZHMOUPhuYHQzHd10Td0/vKXCsTZf+9Zji2phOPelOgDxn2T8V1 gURvWqcMqQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFGO2pbwgtrkAFm6QK3LP1PH6 WeUIMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm Av7aAAMwDQYJKoZIhvcNAQELBQADggEBAFKvVxM7EAyhLV54OWOgczh4BIgROQtT HXLOY2u0zP7m5YmXJVD5TwYWrbfzTN7s226lJaAVHzhySzYXBWIOcdpz+/eawrGp MU8ZvHqvPTLrcn90kGt/0WrcssVsyiiZLM6puETXoiJ4GyCbVPuF4IIs75hEB0XZ /YASK0LFeQGy/pYNlfkmJ7XM7anysStueLbbX6eJI9FyLqlVegxH48SHlfPfbDFT Y+wc61nkgVwUuLPHKlH6ph5e+fKcWfltABKb0L/64pOwBZEr5QTg3de3TK0N/89o F1H/TRZ19O7wY0OPCPSmuTUwPnc+gUSWc/UMLkLXbpeugA2kYadMlfY= -----END CERTIFICATE-----Generated at Mon Oct 27 12:24:24 2025 by rpki-client