$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa File: 323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa (raw, json) Hash identifier: YRVHo2qptXF6SA3O6vnjeJVAPda4/yvkYO4y+FUlbpM= Subject key identifier: AF:3A:D6:95:64:FD:87:7C:96:5D:0E:B0:FB:A6:6A:9A:2C:3F:08:D1 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 28CB2F368935CC14CBBB28E2496F2EE9504D3531 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa Signing time: Mon 18 May 2026 09:21:37 +0000 ROA not before: Mon 18 May 2026 09:16:37 +0000 ROA not after: Mon 17 May 2027 09:21:37 +0000 asID: 133846 IP address blocks: 2602:feda:1b0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 13:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cb:2f:36:89:35:cc:14:cb:bb:28:e2:49:6f:2e:e9:50:4d:35:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:37 2026 GMT Not After : May 17 09:21:37 2027 GMT Subject: CN=AF3AD69564FD877C965D0EB0FBA66A9A2C3F08D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:b4:71:61:36:d6:b3:bc:ed:cd:11:0e:45: fc:a2:15:44:3b:1a:35:7c:8b:d8:8a:01:11:48:c5: f0:48:fe:52:08:60:63:74:9e:37:28:bb:40:b0:fc: 80:4b:1b:bb:01:9d:b2:df:2b:71:11:f7:ab:36:74: fa:ed:bb:ea:fc:cd:91:5e:e2:9b:63:50:93:70:ca: b8:0d:f6:24:c4:f8:9f:38:f3:3b:eb:9c:da:93:de: bd:4b:f2:7f:8d:32:52:c5:20:0e:78:26:33:28:d3: 0a:fa:8b:9f:77:ab:41:57:35:45:67:9a:70:83:0c: 80:80:60:ea:72:fd:f0:1f:50:6f:b5:01:64:50:07: 52:44:46:8d:2f:8e:cc:c8:78:52:21:24:54:2d:b8: 28:50:dd:a6:25:b5:fa:62:68:63:c2:e2:a9:79:e8: 82:50:96:e7:65:66:85:3c:05:64:53:a4:96:c1:70: 69:c5:27:f6:9a:25:74:d5:3c:f3:fe:bf:a9:79:2e: 73:9c:94:cf:87:ab:58:92:b9:c9:bc:16:39:f4:dd: c1:99:48:3a:9c:c0:ea:5c:d4:4f:0f:66:e9:3a:64: 01:76:be:e7:18:92:8d:30:bb:fb:e4:77:e4:90:bb: 3a:5e:58:c6:59:86:40:41:e5:b3:98:78:4b:d6:74: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3A:D6:95:64:FD:87:7C:96:5D:0E:B0:FB:A6:6A:9A:2C:3F:08:D1 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:1b0::/44 Signature Algorithm: sha256WithRSAEncryption 80:38:59:27:14:be:a1:fa:dc:6e:b7:39:e7:73:57:81:4e:60: db:f4:a7:98:f6:c6:e6:46:be:6d:0e:9a:9c:a6:55:65:06:4a: 15:a3:51:9c:6c:43:3f:91:cc:32:44:74:42:1e:c9:4f:72:23: 89:eb:90:18:26:5d:ea:83:c6:be:29:60:e9:43:78:81:d1:c4: d1:87:e7:f5:a7:f6:1b:f1:75:cc:5a:1e:fc:54:a6:ea:b5:ec: 76:c5:61:be:df:cc:1a:71:06:55:08:11:22:23:2e:c1:d1:5f: 60:b1:da:16:b8:a5:24:93:da:58:a2:1c:e1:18:85:23:f0:0b: 75:6d:ef:c1:7a:0c:55:e0:25:36:da:f4:c5:02:2f:d8:a7:47: 53:54:2e:5a:54:14:ad:0e:27:16:d7:27:11:06:12:d8:91:05: 49:70:51:de:3f:65:7c:f5:48:41:f3:4d:d7:66:75:d6:3f:34: 78:88:50:ca:8e:ce:52:d6:26:d6:c0:e7:ec:5d:83:32:9a:a2: 85:a8:fe:63:5b:03:20:87:c5:0b:19:b3:0c:7d:fd:7e:ab:26: 75:e9:ac:f9:4d:be:6a:62:f7:55:52:51:4c:82:58:ee:55:46: b1:73:f4:a9:42:54:55:f6:a7:1b:28:68:41:34:0e:e2:24:ec: a5:1f:6f:c4 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUKMsvNok1zBTLuyjiSW8u6VBNNTEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM3WhcNMjcwNTE3MDkyMTM3 WjAzMTEwLwYDVQQDEyhBRjNBRDY5NTY0RkQ4NzdDOTY1RDBFQjBGQkE2NkE5QTJD M0YwOEQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv60cWE21rO8 7c0RDkX8ohVEOxo1fIvYigERSMXwSP5SCGBjdJ43KLtAsPyASxu7AZ2y3ytxEfer NnT67bvq/M2RXuKbY1CTcMq4DfYkxPifOPM765zak969S/J/jTJSxSAOeCYzKNMK +oufd6tBVzVFZ5pwgwyAgGDqcv3wH1BvtQFkUAdSREaNL47MyHhSISRULbgoUN2m JbX6YmhjwuKpeeiCUJbnZWaFPAVkU6SWwXBpxSf2miV01Tzz/r+peS5znJTPh6tY krnJvBY59N3BmUg6nMDqXNRPD2bpOmQBdr7nGJKNMLv75HfkkLs6XljGWYZAQeWz mHhL1nS+iQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK861pVk/Yd8ll0OsPumapos PwjRMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzE2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzMzMzgzNDM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gGwMA0GCSqGSIb3DQEBCwUAA4IBAQCAOFknFL6h+txutznnc1eB TmDb9KeY9sbmRr5tDpqcplVlBkoVo1GcbEM/kcwyRHRCHslPciOJ65AYJl3qg8a+ KWDpQ3iB0cTRh+f1p/Yb8XXMWh78VKbqtex2xWG+38wacQZVCBEiIy7B0V9gsdoW uKUkk9pYohzhGIUj8At1be/BegxV4CU22vTFAi/Yp0dTVC5aVBStDicW1ycRBhLY kQVJcFHeP2V89UhB803XZnXWPzR4iFDKjs5S1ibWwOfsXYMymqKFqP5jWwMgh8UL GbMMff1+qyZ16az5Tb5qYvdVUlFMgljuVUaxc/SpQlRV9qcbKGhBNA7iJOylH2/E -----END CERTIFICATE-----Generated at Sat Jun 6 05:42:27 2026 by rpki-client