$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa File: 3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa (raw, json) Hash identifier: IhQrYQIw6sWv/WO68aGcbyK4W4nJL4h+vGJpgTABvtc= Subject key identifier: 91:F2:33:34:33:D9:D3:EB:45:EB:D3:89:64:72:4D:A9:B0:03:25:1D Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1EC663F5FB6535DA4E030C176F83E08A7686A804 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa Signing time: Mon 18 May 2026 09:21:36 +0000 ROA not before: Mon 18 May 2026 09:16:36 +0000 ROA not after: Mon 17 May 2027 09:21:36 +0000 asID: 46997 IP address blocks: 134.195.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c6:63:f5:fb:65:35:da:4e:03:0c:17:6f:83:e0:8a:76:86:a8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:36 2026 GMT Not After : May 17 09:21:36 2027 GMT Subject: CN=91F2333433D9D3EB45EBD38964724DA9B003251D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:8b:82:ed:87:f3:07:bb:98:79:1b:fc:4f: 3d:da:91:d6:a0:c2:07:92:29:d7:03:d5:aa:f3:1a: e9:ac:cb:32:e2:bb:5e:0f:7e:b1:ae:f2:b2:e5:da: af:dc:0b:ea:42:0d:0f:37:89:28:42:54:e7:7a:29: c2:74:ff:59:d8:c6:66:e3:72:5f:58:96:31:d5:eb: 81:cb:09:0c:30:b6:77:aa:3b:d4:7b:9c:ce:dc:17: d5:49:ac:b0:65:b1:43:86:15:69:d1:51:3d:5e:c9: b8:92:56:97:5b:19:7f:67:c5:4c:92:3e:e6:a5:22: c2:4a:a6:d6:84:05:07:f1:c3:0a:b4:3e:02:17:ed: c9:d1:96:98:f5:d2:e9:df:dd:4c:98:4e:5e:d5:d7: 9b:d4:c2:51:4d:db:cb:56:f5:b3:82:fc:6c:01:96: 20:9a:bc:d8:e9:90:fc:c6:9e:82:a3:37:bc:35:ec: 95:5e:bb:c5:2a:aa:7c:23:da:51:02:36:3e:92:dd: 15:91:54:59:43:55:48:c3:dc:fa:f5:85:14:e4:ba: ed:fb:74:dc:5b:f1:4c:4b:c3:71:cb:2f:ee:e7:35: f3:98:84:bf:b5:c1:5c:59:d7:e2:e6:ce:cb:06:f0: 5d:37:a9:a5:08:0e:22:e8:16:23:e8:6d:49:c4:67: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F2:33:34:33:D9:D3:EB:45:EB:D3:89:64:72:4D:A9:B0:03:25:1D X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:3f:47:26:95:ce:96:2a:c0:8e:ac:b8:02:df:d0:73:d4:b3: 7b:02:9c:06:5f:71:9a:7e:27:8b:a9:d9:09:1c:1a:6c:36:f1: ac:20:43:fe:af:e8:0e:57:00:f9:db:b3:59:b1:fa:cd:6b:b3: 01:fc:78:bf:98:38:25:db:37:57:3f:17:b3:ef:fb:ac:89:6a: c1:74:24:e1:d7:16:94:c6:8d:b9:67:ec:ea:3a:4b:f4:42:77: 7e:3a:cd:81:3e:32:df:5d:b3:49:10:f1:f5:b3:90:85:2f:f5: a6:b0:b1:23:6d:1c:cc:43:9d:43:f5:72:20:3f:ec:21:5e:6a: 08:94:74:71:ba:1a:c1:01:f3:f1:84:65:99:9c:4a:6d:b2:7c: fe:98:ee:52:fe:80:c4:61:08:ab:f9:3d:77:55:0c:a9:d2:59: 5b:6a:4a:13:cf:f3:f9:22:dc:67:2f:12:05:b1:c1:57:fe:95: 12:a6:d7:9f:35:8c:ac:c5:8c:35:d6:9d:b7:25:25:bc:0b:fe: ed:a1:ab:d8:f6:c7:11:14:52:c8:19:af:b3:96:9b:3e:55:fe: 3e:4e:3f:0d:85:69:8b:b2:4d:54:48:ea:7e:0e:0f:c6:8c:a2: d5:68:e8:0b:8c:69:f7:2b:ec:44:94:13:34:a6:2e:74:65:14: ee:0e:b3:f3 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIUHsZj9ftlNdpOAwwXb4PginaGqAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM2WhcNMjcwNTE3MDkyMTM2 WjAzMTEwLwYDVQQDEyg5MUYyMzMzNDMzRDlEM0VCNDVFQkQzODk2NDcyNERBOUIw MDMyNTFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt52Lgu2H8we7 mHkb/E892pHWoMIHkinXA9Wq8xrprMsy4rteD36xrvKy5dqv3AvqQg0PN4koQlTn einCdP9Z2MZm43JfWJYx1euBywkMMLZ3qjvUe5zO3BfVSaywZbFDhhVp0VE9Xsm4 klaXWxl/Z8VMkj7mpSLCSqbWhAUH8cMKtD4CF+3J0ZaY9dLp391MmE5e1deb1MJR TdvLVvWzgvxsAZYgmrzY6ZD8xp6Coze8NeyVXrvFKqp8I9pRAjY+kt0VkVRZQ1VI w9z69YUU5Lrt+3TcW/FMS8Nxyy/u5zXzmIS/tcFcWdfi5s7LBvBdN6mlCA4i6BYj 6G1JxGcPUQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJHyMzQz2dPrRevTiWRyTamw AyUdMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzMzM0MmUzMTM5MzUyZTMxMzAz MDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGG w2QwDQYJKoZIhvcNAQELBQADggEBAIo/RyaVzpYqwI6suALf0HPUs3sCnAZfcZp+ J4up2QkcGmw28awgQ/6v6A5XAPnbs1mx+s1rswH8eL+YOCXbN1c/F7Pv+6yJasF0 JOHXFpTGjbln7Oo6S/RCd346zYE+Mt9ds0kQ8fWzkIUv9aawsSNtHMxDnUP1ciA/ 7CFeagiUdHG6GsEB8/GEZZmcSm2yfP6Y7lL+gMRhCKv5PXdVDKnSWVtqShPP8/ki 3GcvEgWxwVf+lRKm1581jKzFjDXWnbclJbwL/u2hq9j2xxEUUsgZr7OWmz5V/j5O Pw2FaYuyTVRI6n4OD8aMotVo6AuMafcr7ESUEzSmLnRlFO4Os/M= -----END CERTIFICATE-----Generated at Sat Jun 6 08:15:35 2026 by rpki-client