$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa File: 323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa (raw, json) Hash identifier: hmqQWrXrZ4hAFyy+lEsPYNMBlb3yxYSucJLFFP5cCN0= Subject key identifier: BB:D8:2F:EC:ED:6F:B1:A5:89:27:1B:42:03:8A:9A:59:9B:0E:ED:E6 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 51DFE1DAE4441912935DC70A92E996F53B502D4F Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa Signing time: Mon 18 May 2026 09:21:35 +0000 ROA not before: Mon 18 May 2026 09:16:35 +0000 ROA not after: Mon 17 May 2027 09:21:35 +0000 asID: 142025 IP address blocks: 2602:feda:190::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:df:e1:da:e4:44:19:12:93:5d:c7:0a:92:e9:96:f5:3b:50:2d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:35 2026 GMT Not After : May 17 09:21:35 2027 GMT Subject: CN=BBD82FECED6FB1A589271B42038A9A599B0EEDE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:a9:5d:58:db:6b:ed:88:fe:8f:63:8f:ff: 67:3c:c5:6d:4a:64:10:c4:30:d9:20:45:4b:fb:1e: 11:5d:78:56:d1:16:6a:1a:80:fb:de:7a:9b:d5:e1: c7:0a:bc:bc:f4:d3:c2:0b:9a:44:95:c1:fd:09:5d: e7:1c:05:18:db:12:5e:05:ca:36:70:dd:fd:ee:0e: 95:eb:ce:09:77:53:65:78:a5:9e:91:39:54:d5:01: ad:c3:11:9f:e4:0b:2a:00:60:88:29:de:bc:88:34: f2:cf:5e:53:f1:e9:22:2e:cf:e1:4f:53:10:47:db: 32:dd:c9:d8:e2:b8:b0:37:75:00:6b:6f:c8:b3:8b: 7f:94:cd:b9:84:a4:78:e5:fd:ea:02:91:1f:70:c3: 07:be:ba:d3:c8:a4:d4:b9:0e:0c:59:e7:0f:48:c4: 0a:5a:b7:e2:b0:e3:8d:ef:16:9a:cb:d9:c6:e7:b7: ca:a7:e9:84:08:ef:05:66:ac:85:d7:bc:4b:27:83: 2a:e9:b2:60:ee:6d:85:c0:4e:fb:ab:dd:59:85:d6: 90:09:9d:8b:56:9c:ab:47:a5:c9:bb:2a:79:e4:6e: 49:ff:ed:11:1e:3c:9e:ad:c0:82:68:f3:3e:b0:79: 66:e2:27:cd:02:5c:ad:72:fc:64:8b:03:43:ce:56: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D8:2F:EC:ED:6F:B1:A5:89:27:1B:42:03:8A:9A:59:9B:0E:ED:E6 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:190::/44 Signature Algorithm: sha256WithRSAEncryption 22:64:53:6a:8a:23:23:c7:24:a8:73:d3:56:22:4e:c8:72:dc: c4:5d:38:e1:7e:de:24:8c:22:c5:a6:17:9a:d6:2d:74:d6:d3: 55:b9:d8:38:44:ec:cc:6a:bd:04:e9:8a:ec:1d:93:de:0c:fd: 8d:a6:d0:59:41:10:70:ed:e8:41:cd:9b:ee:75:71:10:32:c8: 8f:57:14:0b:88:61:c1:6f:19:9c:bc:cc:cf:24:4b:cc:52:e7: 76:82:40:73:61:4c:2f:44:27:d2:39:01:f2:33:d2:cd:84:e8: 76:e1:56:b0:d0:e7:d5:6b:83:f4:f1:a4:a6:32:d2:7e:dc:16: 4c:b9:55:37:e2:77:2c:47:8c:b5:a0:b7:74:b3:27:11:66:e9: 3e:12:96:a1:a4:d7:c4:33:69:e0:22:dc:79:b5:fc:e9:c7:ac: 3d:38:5b:50:74:53:10:07:b0:b4:12:d3:3d:84:f6:a6:c6:f8: 1f:6d:51:86:75:b6:a1:50:09:30:ae:69:51:2b:bb:4a:6b:d9: 3e:26:ba:ae:11:89:df:2d:8b:79:0a:b6:41:d0:3d:e3:95:7c: c4:fd:ac:c1:9b:7e:c7:8f:1b:7f:77:64:10:48:b4:a2:ce:42: 8f:5e:46:36:a0:50:e1:4c:1c:80:2c:66:f2:7b:8e:01:37:e9: a1:09:9b:35 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUUd/h2uREGRKTXccKkumW9TtQLU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM1WhcNMjcwNTE3MDkyMTM1 WjAzMTEwLwYDVQQDEyhCQkQ4MkZFQ0VENkZCMUE1ODkyNzFCNDIwMzhBOUE1OTlC MEVFREU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBWpXVjba+2I /o9jj/9nPMVtSmQQxDDZIEVL+x4RXXhW0RZqGoD73nqb1eHHCry89NPCC5pElcH9 CV3nHAUY2xJeBco2cN397g6V684Jd1NleKWekTlU1QGtwxGf5AsqAGCIKd68iDTy z15T8ekiLs/hT1MQR9sy3cnY4riwN3UAa2/Is4t/lM25hKR45f3qApEfcMMHvrrT yKTUuQ4MWecPSMQKWrfisOON7xaay9nG57fKp+mECO8FZqyF17xLJ4Mq6bJg7m2F wE77q91ZhdaQCZ2LVpyrR6XJuyp55G5J/+0RHjyercCCaPM+sHlm4ifNAlytcvxk iwNDzlbPQQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLvYL+ztb7GliScbQgOKmlmb Du3mMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzEzOTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzAzMjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gGQMA0GCSqGSIb3DQEBCwUAA4IBAQAiZFNqiiMjxySoc9NWIk7I ctzEXTjhft4kjCLFphea1i101tNVudg4ROzMar0E6YrsHZPeDP2NptBZQRBw7ehB zZvudXEQMsiPVxQLiGHBbxmcvMzPJEvMUud2gkBzYUwvRCfSOQHyM9LNhOh24Vaw 0OfVa4P08aSmMtJ+3BZMuVU34ncsR4y1oLd0sycRZuk+EpahpNfEM2ngItx5tfzp x6w9OFtQdFMQB7C0EtM9hPamxvgfbVGGdbahUAkwrmlRK7tKa9k+JrquEYnfLYt5 CrZB0D3jlXzE/azBm37Hjxt/d2QQSLSizkKPXkY2oFDhTByALGbye44BN+mhCZs1 -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:20 2026 by rpki-client