$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa File: 3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa (raw, json) Hash identifier: XWoeBIjJgCnfQVtElPkAgZK+h/BWqHNnxEq4R7SuMig= Subject key identifier: F0:83:2A:9B:6A:D1:09:DC:08:D8:8A:58:F3:95:18:08:5B:51:39:AB Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5D6C4BBF76FE40617B638E6591522E435DE89C14 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa Signing time: Mon 18 May 2026 09:21:40 +0000 ROA not before: Mon 18 May 2026 09:16:40 +0000 ROA not after: Mon 17 May 2027 09:21:40 +0000 asID: 396982 IP address blocks: 134.195.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:4b:bf:76:fe:40:61:7b:63:8e:65:91:52:2e:43:5d:e8:9c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:40 2026 GMT Not After : May 17 09:21:40 2027 GMT Subject: CN=F0832A9B6AD109DC08D88A58F39518085B5139AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:ca:9d:06:c2:dd:b3:0b:9f:53:ae:77:ef: 96:5e:0f:84:52:1c:40:76:1c:c9:a8:7f:2d:90:56: 90:98:50:37:02:c3:61:d2:2e:8f:41:b0:a3:cb:40: d9:5a:12:1b:ab:00:83:2e:c5:a5:6a:c4:a2:9b:1d: 77:ef:09:4d:98:91:35:5a:f6:ec:06:be:00:07:f2: 74:8b:b1:2f:89:c4:ee:20:8c:ca:91:4b:c9:8f:8e: a6:8a:d8:83:ba:a4:b4:5e:6f:f5:56:0c:69:07:46: 6e:27:c0:f1:90:2f:d8:6f:fa:f3:c5:61:12:04:62: d4:d0:81:c7:c6:2e:d4:41:dc:7f:fe:4c:83:60:f6: 5e:a8:8f:b1:b3:62:cc:e3:0a:4e:41:00:dc:ea:24: 06:cd:e1:65:7b:ea:2e:b8:7a:d4:ce:e0:56:be:5c: 9d:b9:1f:4c:5b:03:f4:96:7e:9f:6d:6b:bb:0f:df: 36:39:4f:5d:9a:73:76:4c:7b:86:c7:b0:f5:b3:d0: 74:33:b7:0d:25:27:36:01:bd:2d:a2:5c:41:1e:72: af:e0:ec:20:ec:d4:59:40:41:5d:c6:ca:25:26:58: cb:78:c8:c5:53:20:35:fa:65:d0:42:75:e8:bc:70: ff:69:5a:ac:f3:cf:b1:c9:46:73:a6:ad:b5:b6:9b: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:83:2A:9B:6A:D1:09:DC:08:D8:8A:58:F3:95:18:08:5B:51:39:AB X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption 26:a3:b8:c4:d0:72:f4:c9:54:e4:91:9a:45:5e:d6:31:69:36: e1:e3:0a:81:e2:52:a9:da:a1:1e:d1:9d:4d:b9:b5:c1:25:10: cd:53:87:0e:96:76:1e:28:d8:d6:2a:4b:00:0d:8c:81:e3:97: b8:46:8d:ec:31:78:ce:2b:56:16:a9:8d:44:b7:e4:ad:3b:9c: a5:1b:2e:8f:db:4a:39:07:56:23:6f:79:3f:ae:a2:22:1c:12: 31:c0:21:80:1d:e0:55:26:d5:92:92:07:dc:1b:2a:76:db:00: 60:03:3a:a3:b3:0e:b4:94:66:16:bb:db:c2:bf:c4:64:cc:6d: 2c:04:9a:3e:13:71:39:d5:a6:da:34:08:52:75:6e:7a:a2:c5: e5:86:6e:84:c4:cc:f9:82:f7:ac:e3:cd:b5:82:01:43:b9:f9: 59:92:71:c6:2e:26:be:cc:bf:20:e4:27:ea:48:5a:ec:6b:35: c9:84:96:0f:86:ea:2e:7c:60:bb:08:ca:de:d6:fa:4e:11:17: 6e:55:41:4d:d1:71:3c:79:a8:10:1e:52:bd:1d:cc:9e:99:7e: d6:66:11:80:09:99:73:d3:f9:c4:1d:f4:23:93:19:28:58:30: 38:e1:ad:0a:7d:79:86:34:5f:cf:33:92:e3:2b:cf:77:4c:6a: 4c:31:30:89 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUXWxLv3b+QGF7Y45lkVIuQ13onBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQwWhcNMjcwNTE3MDkyMTQw WjAzMTEwLwYDVQQDEyhGMDgzMkE5QjZBRDEwOURDMDhEODhBNThGMzk1MTgwODVC NTEzOUFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlLKnQbC3bML n1Oud++WXg+EUhxAdhzJqH8tkFaQmFA3AsNh0i6PQbCjy0DZWhIbqwCDLsWlasSi mx137wlNmJE1WvbsBr4AB/J0i7EvicTuIIzKkUvJj46mitiDuqS0Xm/1VgxpB0Zu J8DxkC/Yb/rzxWESBGLU0IHHxi7UQdx//kyDYPZeqI+xs2LM4wpOQQDc6iQGzeFl e+ouuHrUzuBWvlyduR9MWwP0ln6fbWu7D982OU9dmnN2THuGx7D1s9B0M7cNJSc2 Ab0tolxBHnKv4Owg7NRZQEFdxsolJljLeMjFUyA1+mXQQnXovHD/aVqs88+xyUZz pq21tps5FwIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFPCDKptq0QncCNiKWPOVGAhb UTmrMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzMzM0MmUzMTM5MzUyZTMxMzAz MDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzkzNjM5MzgzMi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AYbDZDANBgkqhkiG9w0BAQsFAAOCAQEAJqO4xNBy9MlU5JGaRV7WMWk24eMKgeJS qdqhHtGdTbm1wSUQzVOHDpZ2HijY1ipLAA2MgeOXuEaN7DF4zitWFqmNRLfkrTuc pRsuj9tKOQdWI295P66iIhwSMcAhgB3gVSbVkpIH3BsqdtsAYAM6o7MOtJRmFrvb wr/EZMxtLASaPhNxOdWm2jQIUnVueqLF5YZuhMTM+YL3rOPNtYIBQ7n5WZJxxi4m vsy/IOQn6kha7Gs1yYSWD4bqLnxguwjK3tb6ThEXblVBTdFxPHmoEB5SvR3Mnpl+ 1mYRgAmZc9P5xB30I5MZKFgwOOGtCn15hjRfzzOS4yvPd0xqTDEwiQ== -----END CERTIFICATE-----Generated at Sat Jun 6 08:15:28 2026 by rpki-client