$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa File: 3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa (raw, json) Hash identifier: 5hRFNhgZF75X9DUG+sL5Yki60TEYwc9Gv/vT8k66+TQ= Subject key identifier: 96:BC:D0:01:C5:CC:B7:A0:4A:92:AA:35:55:0A:78:D9:25:2F:34:95 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2C5AF2EFFDB1EE68F0CD714C938B4A53E9DD8F10 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa Signing time: Wed 20 May 2026 22:21:42 +0000 ROA not before: Wed 20 May 2026 22:16:42 +0000 ROA not after: Wed 19 May 2027 22:21:42 +0000 asID: 205058 IP address blocks: 141.193.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5a:f2:ef:fd:b1:ee:68:f0:cd:71:4c:93:8b:4a:53:e9:dd:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 20 22:16:42 2026 GMT Not After : May 19 22:21:42 2027 GMT Subject: CN=96BCD001C5CCB7A04A92AA35550A78D9252F3495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:0e:62:ca:87:e1:d4:2c:73:7b:46:a4:a8: c3:21:fa:4e:6b:32:8d:0a:25:b9:43:6a:2e:db:be: 33:03:c2:0e:29:f3:a6:21:c2:d2:85:ba:e9:28:03: d3:c8:87:e0:d9:9d:bb:a5:5a:7c:f2:15:2f:12:30: a7:44:ab:8a:d5:56:e2:40:cc:8f:03:c5:05:4f:60: 86:d0:04:ff:bb:ac:c7:11:6b:66:29:53:f5:0d:75: fe:9f:85:d8:d3:b9:e1:db:a8:30:e7:61:80:44:a5: 93:86:57:11:1c:60:fc:4d:e7:d5:2e:43:01:4b:0d: 4b:ab:61:1f:74:2b:4e:37:d3:3c:21:13:c9:9e:5c: 23:9a:a4:14:98:17:34:45:f1:75:c9:ad:6a:6c:61: 3b:45:0e:5a:e2:f0:75:3e:34:b1:c0:ec:65:cb:a0: 69:7f:90:aa:2c:74:8b:1c:02:c3:4e:ee:1a:6a:56: bc:f7:69:15:7c:a1:ee:29:9a:d4:f8:e8:e0:ab:f7: ba:63:a1:2b:e6:cf:a6:cd:cf:57:19:04:a2:fa:6c: 26:40:43:bd:30:ba:a5:3c:74:e9:eb:ff:bc:51:e5: 2c:0e:cf:c4:8c:9f:4b:28:03:c2:5d:d3:cf:a4:29: 3a:ad:ae:b4:ab:e6:46:80:35:86:02:ba:da:0d:d6: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BC:D0:01:C5:CC:B7:A0:4A:92:AA:35:55:0A:78:D9:25:2F:34:95 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.193.21.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a1:6c:34:f4:65:08:58:2d:97:6a:de:98:d6:e2:ec:0e:c9: f2:53:6d:d7:2c:fa:79:6f:24:59:e0:23:51:d1:04:cc:93:03: ab:5c:15:88:a1:92:42:3e:2a:15:3c:b3:50:1a:96:54:66:a8: ce:ed:82:49:d4:98:98:5d:18:7e:59:f7:b8:a0:05:5c:23:5a: 96:e3:b4:77:75:0f:31:67:28:a0:a7:2c:2d:a6:c2:c3:00:35: 3d:79:c5:a8:e2:21:cb:41:3e:56:13:22:0a:d7:d4:ea:dc:c6: 15:c0:09:c8:2b:10:4c:52:3a:de:da:4a:f9:3b:8a:9e:c2:43: d1:c8:b0:d1:93:5b:0d:6f:83:b0:69:82:d4:58:d1:e3:60:cb: d9:74:aa:8d:e9:84:87:94:87:82:44:20:d1:ed:cc:93:35:e2: 81:2d:a6:11:ee:43:c5:f0:42:18:3d:be:df:37:53:de:2c:4e: 55:96:c6:d6:0c:de:c8:a4:9f:fe:68:32:f4:f3:d1:87:ed:22: fa:06:ec:f3:c5:74:ea:21:1b:92:f2:93:2d:6f:1a:44:95:ea: 5b:5b:c0:44:87:f7:d5:41:93:0d:bf:a5:f9:98:e5:8d:9e:c8: b7:4d:52:02:26:7b:f6:e5:41:47:e4:84:24:1a:63:c3:fa:a7: 5a:5e:0f:32 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIULFry7/2x7mjwzXFMk4tKU+ndjxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTIwMjIxNjQyWhcNMjcwNTE5MjIyMTQy WjAzMTEwLwYDVQQDEyg5NkJDRDAwMUM1Q0NCN0EwNEE5MkFBMzU1NTBBNzhEOTI1 MkYzNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywsOYsqH4dQs c3tGpKjDIfpOazKNCiW5Q2ou274zA8IOKfOmIcLShbrpKAPTyIfg2Z27pVp88hUv EjCnRKuK1VbiQMyPA8UFT2CG0AT/u6zHEWtmKVP1DXX+n4XY07nh26gw52GARKWT hlcRHGD8TefVLkMBSw1Lq2EfdCtON9M8IRPJnlwjmqQUmBc0RfF1ya1qbGE7RQ5a 4vB1PjSxwOxly6Bpf5CqLHSLHALDTu4aala892kVfKHuKZrU+Ojgq/e6Y6Er5s+m zc9XGQSi+mwmQEO9MLqlPHTp6/+8UeUsDs/EjJ9LKAPCXdPPpCk6ra60q+ZGgDWG ArraDdZacQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJa80AHFzLegSpKqNVUKeNkl LzSVMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzMDM1Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACN wRUwDQYJKoZIhvcNAQELBQADggEBAAqhbDT0ZQhYLZdq3pjW4uwOyfJTbdcs+nlv JFngI1HRBMyTA6tcFYihkkI+KhU8s1AallRmqM7tgknUmJhdGH5Z97igBVwjWpbj tHd1DzFnKKCnLC2mwsMANT15xajiIctBPlYTIgrX1OrcxhXACcgrEExSOt7aSvk7 ip7CQ9HIsNGTWw1vg7BpgtRY0eNgy9l0qo3phIeUh4JEINHtzJM14oEtphHuQ8Xw Qhg9vt83U94sTlWWxtYM3sikn/5oMvTz0YftIvoG7PPFdOohG5Lyky1vGkSV6ltb wESH99VBkw2/pfmY5Y2eyLdNUgIme/blQUfkhCQaY8P6p1peDzI= -----END CERTIFICATE-----Generated at Sat Jun 6 08:15:35 2026 by rpki-client