$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa File: 323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa (raw, json) Hash identifier: YoAU604vGIdoSSDUq2rTf8Rye2h09ON29BTArVRGs0M= Subject key identifier: AD:81:F7:89:C4:A0:2C:59:81:C8:C4:4C:C7:93:7B:BD:8C:CB:04:1F Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3653966115D34F8AA0968C2F8FD40FA03D02205F Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa Signing time: Mon 16 Jun 2025 08:52:33 +0000 ROA not before: Mon 16 Jun 2025 08:47:33 +0000 ROA not after: Mon 15 Jun 2026 08:52:33 +0000 asID: 139328 IP address blocks: 2602:feda:bf0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 18:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:53:96:61:15:d3:4f:8a:a0:96:8c:2f:8f:d4:0f:a0:3d:02:20:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:33 2025 GMT Not After : Jun 15 08:52:33 2026 GMT Subject: CN=AD81F789C4A02C5981C8C44CC7937BBD8CCB041F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:c7:68:60:78:f0:d7:ca:5d:8a:e1:df:71: 0c:1a:d6:b0:4f:24:f1:f0:4f:57:1e:e4:0f:72:4c: bb:c8:b7:4a:68:da:d1:c2:82:72:3e:ff:97:3d:55: 36:5c:a1:db:f9:6a:e1:54:81:d7:7a:67:ec:a9:58: 10:8f:08:65:5c:01:0d:86:81:b0:fd:e7:7e:a7:87: 87:cd:fa:9d:be:dd:9e:90:b9:e7:c1:c8:e5:6d:a8: 54:9e:75:ba:db:36:ab:81:13:8f:b4:d4:be:93:3f: 73:a9:35:c3:65:16:db:f7:4e:9a:e5:55:5b:1b:21: 28:85:cb:e1:8c:dd:b3:d1:8d:9b:08:64:30:2c:b0: 61:37:5c:e5:83:7a:e5:ec:ad:1b:cb:6d:8a:db:8a: 30:9c:c2:22:56:6f:13:00:1d:64:52:b0:37:e2:84: 37:9b:96:72:b7:ca:1d:12:b0:e5:1c:9c:98:b8:6a: 56:4a:11:3d:4e:a4:1a:b2:13:eb:d8:70:b4:e2:3d: 71:e9:d4:ba:b4:3b:4d:14:12:58:6c:ec:df:f4:f3: c9:e6:51:a0:ed:e8:45:fa:f1:75:a6:17:6c:f2:f2: cf:26:74:03:2a:be:d1:8c:78:2b:64:68:c3:9e:f7: 29:44:9e:eb:d0:dc:53:35:d3:8b:ab:a5:9c:0b:f9: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:F7:89:C4:A0:2C:59:81:C8:C4:4C:C7:93:7B:BD:8C:CB:04:1F X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:bf0::/44 Signature Algorithm: sha256WithRSAEncryption 8f:29:02:ad:06:1d:3e:34:fe:0b:3c:d7:53:f6:a0:90:6d:3e: 56:2d:b0:fe:a2:2c:d3:1c:45:00:fa:e7:05:00:9b:ac:5f:c3: 18:d9:22:42:de:f2:85:48:7d:8f:f6:a4:2b:a8:f4:eb:fa:31: cb:40:9a:f3:c4:2f:ec:08:89:b8:34:87:e6:df:f2:fb:9d:4a: 8c:3b:35:0e:3e:71:f9:b8:39:60:02:b3:ca:6f:ec:89:bb:34: c4:6f:df:f0:c4:14:6b:82:b6:5d:63:87:f9:30:16:cd:ea:ce: 50:5c:3a:5f:41:56:24:e4:f0:89:86:ca:0b:bc:a5:08:3b:c3: 47:cd:84:53:73:57:3a:a7:19:f2:ea:b4:42:05:02:c4:72:fe: cc:b7:5d:60:b7:dd:c3:c7:a9:33:70:1b:ee:3a:c9:47:6d:9f: e3:06:46:b6:53:a4:fa:10:01:f7:0a:8d:5b:26:43:f0:36:a4: 55:f9:79:3a:4d:19:59:83:f2:e6:26:09:62:9a:be:17:ab:ef: 9f:62:4e:13:6c:52:36:9f:5e:b0:c9:dc:4e:7a:2f:95:18:c1: 07:97:e1:5d:71:a7:0b:c8:66:c4:4d:25:63:39:c6:4c:5a:54: ee:17:27:b6:7a:a1:fb:fc:78:8e:c9:77:2c:ec:30:0b:14:f1: 93:18:f3:06 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUNlOWYRXTT4qglowvj9QPoD0CIF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMzWhcNMjYwNjE1MDg1MjMz WjAzMTEwLwYDVQQDEyhBRDgxRjc4OUM0QTAyQzU5ODFDOEM0NENDNzkzN0JCRDhD Q0IwNDFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLjHaGB48NfK XYrh33EMGtawTyTx8E9XHuQPcky7yLdKaNrRwoJyPv+XPVU2XKHb+WrhVIHXemfs qVgQjwhlXAENhoGw/ed+p4eHzfqdvt2ekLnnwcjlbahUnnW62zargROPtNS+kz9z qTXDZRbb906a5VVbGyEohcvhjN2z0Y2bCGQwLLBhN1zlg3rl7K0by22K24ownMIi Vm8TAB1kUrA34oQ3m5Zyt8odErDlHJyYuGpWShE9TqQashPr2HC04j1x6dS6tDtN FBJYbOzf9PPJ5lGg7ehF+vF1phds8vLPJnQDKr7RjHgrZGjDnvcpRJ7r0NxTNdOL q6WcC/lr4wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK2B94nEoCxZgcjETMeTe72M ywQfMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjI2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM5MzMzMjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gvwMA0GCSqGSIb3DQEBCwUAA4IBAQCPKQKtBh0+NP4LPNdT9qCQ bT5WLbD+oizTHEUA+ucFAJusX8MY2SJC3vKFSH2P9qQrqPTr+jHLQJrzxC/sCIm4 NIfm3/L7nUqMOzUOPnH5uDlgArPKb+yJuzTEb9/wxBRrgrZdY4f5MBbN6s5QXDpf QVYk5PCJhsoLvKUIO8NHzYRTc1c6pxny6rRCBQLEcv7Mt11gt93Dx6kzcBvuOslH bZ/jBka2U6T6EAH3Co1bJkPwNqRV+Xk6TRlZg/LmJglimr4Xq++fYk4TbFI2n16w ydxOei+VGMEHl+FdcacLyGbETSVjOcZMWlTuFye2eqH7/HiOyXcs7DALFPGTGPMG -----END CERTIFICATE-----Generated at Wed Oct 29 08:16:29 2025 by rpki-client