$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa File: 3134312e3139332e32312e302f32342d3234203d3e203436393937.roa (raw, json) Hash identifier: h5IHmH5Euc5zzWodZgnqiD7vjMfJeeRt+KPkxzO9AVI= Subject key identifier: 97:D3:7F:98:D5:71:F4:46:F1:04:43:2A:9E:9A:A5:79:E6:04:3B:49 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 33E3BC609D08DBE4EE67D863AE3CCC2AB5A39864 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa Signing time: Mon 18 May 2026 09:21:32 +0000 ROA not before: Mon 18 May 2026 09:16:32 +0000 ROA not after: Mon 17 May 2027 09:21:32 +0000 asID: 46997 IP address blocks: 141.193.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e3:bc:60:9d:08:db:e4:ee:67:d8:63:ae:3c:cc:2a:b5:a3:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:32 2026 GMT Not After : May 17 09:21:32 2027 GMT Subject: CN=97D37F98D571F446F104432A9E9AA579E6043B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:1c:4e:2a:5b:fd:6f:34:51:06:57:52:82: 80:7b:62:24:8c:88:5f:76:f1:3b:a1:05:45:90:bb: d0:5a:94:0f:79:b9:81:72:56:0c:ec:3a:b8:49:a9: 4f:e1:e2:f0:56:9f:80:d3:f4:36:20:af:1e:e1:f8: 3e:1c:fb:30:9e:1b:02:4f:54:1c:69:ca:62:43:0d: 21:f5:c1:2d:e5:81:3a:b0:f0:69:c9:24:0b:6d:f3: 87:7f:dc:bc:ca:40:16:a3:88:6a:f8:d0:3d:d7:7b: 32:11:4b:15:04:20:1a:fb:7b:a1:95:f3:04:06:5d: d7:f9:8c:40:26:46:c6:a4:f4:a7:d9:10:df:37:77: 6c:f3:c8:72:5e:48:f5:73:58:8e:da:f7:a4:57:4b: cb:13:37:0c:36:5a:95:9c:97:2b:7c:6b:bd:25:d5: d6:91:64:46:20:6c:ee:8c:6c:ca:c2:93:00:45:64: 04:e1:e9:5c:36:a3:85:a2:d2:3e:16:15:62:87:f8: 87:46:53:6f:38:22:05:f1:e4:a1:ae:ba:02:6c:f9: 9c:19:ad:aa:27:36:92:b8:7c:1c:8f:1a:de:1f:8a: 25:b7:66:33:3f:25:42:dc:38:11:84:de:7e:c6:ad: 09:ce:89:1b:38:2d:6c:ba:35:80:ae:e3:a4:e7:a3: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:7F:98:D5:71:F4:46:F1:04:43:2A:9E:9A:A5:79:E6:04:3B:49 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.193.21.0/24 Signature Algorithm: sha256WithRSAEncryption 56:a5:fa:f2:30:7a:94:fa:97:8a:15:e4:bd:1a:b6:37:69:ff: 86:04:91:a5:55:21:98:94:86:4e:06:28:7e:65:f2:d0:ab:9c: bb:41:1c:22:2d:c8:88:be:e5:bc:0e:ec:91:83:81:43:1c:ce: 25:55:a4:7c:b0:1b:68:2c:11:fa:a2:81:d2:eb:30:00:de:a7: d4:0e:46:37:8d:63:47:56:02:e7:f0:d6:c7:5e:2c:0a:a1:d3: 54:7a:00:2e:9a:e4:32:19:74:c6:cb:1c:2e:5f:94:a3:9f:47: bd:53:fd:2d:de:81:c7:b9:ed:f2:f3:c3:46:d9:6c:2d:69:96: c2:38:af:f9:45:62:34:b7:d7:00:72:b0:59:77:e2:e0:cc:75: 00:89:1e:e8:d2:11:85:9e:5c:1f:4d:44:1e:13:fc:eb:cc:2b: ec:28:bb:59:52:c8:e7:ec:24:e4:1d:4c:46:96:02:1c:02:c6: ae:73:fd:a2:07:4d:0d:ad:b8:93:34:b8:cb:ea:24:7e:85:98: 2d:da:60:df:13:e0:e7:a2:02:bf:5a:20:ce:5a:f0:74:77:eb: fa:96:8c:4f:e5:16:a7:21:5d:97:4f:18:13:09:46:6b:e8:32: 7b:97:8c:f5:b4:fc:ba:5f:2f:d3:7a:2e:80:ed:b5:d0:a8:5e: dc:b3:e3:6f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUM+O8YJ0I2+TuZ9hjrjzMKrWjmGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMyWhcNMjcwNTE3MDkyMTMy WjAzMTEwLwYDVQQDEyg5N0QzN0Y5OEQ1NzFGNDQ2RjEwNDQzMkE5RTlBQTU3OUU2 MDQzQjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/4cTipb/W80 UQZXUoKAe2IkjIhfdvE7oQVFkLvQWpQPebmBclYM7Dq4SalP4eLwVp+A0/Q2IK8e 4fg+HPswnhsCT1QcacpiQw0h9cEt5YE6sPBpySQLbfOHf9y8ykAWo4hq+NA913sy EUsVBCAa+3uhlfMEBl3X+YxAJkbGpPSn2RDfN3ds88hyXkj1c1iO2vekV0vLEzcM NlqVnJcrfGu9JdXWkWRGIGzujGzKwpMARWQE4elcNqOFotI+FhVih/iHRlNvOCIF 8eShrroCbPmcGa2qJzaSuHwcjxreH4olt2YzPyVC3DgRhN5+xq0JzokbOC1sujWA ruOk56N3vQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJfTf5jVcfRG8QRDKp6apXnm BDtJMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEV MA0GCSqGSIb3DQEBCwUAA4IBAQBWpfryMHqU+peKFeS9GrY3af+GBJGlVSGYlIZO Bih+ZfLQq5y7QRwiLciIvuW8DuyRg4FDHM4lVaR8sBtoLBH6ooHS6zAA3qfUDkY3 jWNHVgLn8NbHXiwKodNUegAumuQyGXTGyxwuX5Sjn0e9U/0t3oHHue3y88NG2Wwt aZbCOK/5RWI0t9cAcrBZd+LgzHUAiR7o0hGFnlwfTUQeE/zrzCvsKLtZUsjn7CTk HUxGlgIcAsauc/2iB00NrbiTNLjL6iR+hZgt2mDfE+DnogK/WiDOWvB0d+v6loxP 5RanIV2XTxgTCUZr6DJ7l4z1tPy6Xy/Tei6A7bXQqF7cs+Nv -----END CERTIFICATE-----Generated at Sat Jun 6 08:15:35 2026 by rpki-client