$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa File: 323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa (raw, json) Hash identifier: yhDrp3FkjK51+PTTZFKj6QBkwbrCDrp6jQSZR+WasUE= Subject key identifier: BB:2D:A3:4F:88:63:AE:37:9D:24:8C:BA:6C:76:A9:D6:EF:BB:56:32 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7AF402A9C14F1964004C62F2D0FD201565F7F245 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa Signing time: Mon 18 May 2026 09:21:36 +0000 ROA not before: Mon 18 May 2026 09:16:36 +0000 ROA not after: Mon 17 May 2027 09:21:36 +0000 asID: 137256 IP address blocks: 2602:feda:1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f4:02:a9:c1:4f:19:64:00:4c:62:f2:d0:fd:20:15:65:f7:f2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:36 2026 GMT Not After : May 17 09:21:36 2027 GMT Subject: CN=BB2DA34F8863AE379D248CBA6C76A9D6EFBB5632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:85:72:bf:2e:0d:d5:fc:4c:17:d1:a1:ca: 37:2a:64:5d:d4:06:da:37:53:9c:93:e5:8a:18:e8: 0a:7b:12:3d:30:dc:7e:65:8b:72:5d:e7:6a:33:90: 5b:d5:b9:16:52:ce:cc:7d:ed:67:40:f9:78:38:78: 82:7a:4e:07:c7:d9:40:e9:be:c2:bd:38:63:ec:7f: 68:f7:25:50:75:c5:8c:5c:57:44:a3:10:2a:46:f4: 0d:b6:2e:de:3b:b0:30:0f:82:9c:b0:b8:46:c8:2e: a9:e3:04:1e:41:4b:5e:18:41:94:84:35:9b:17:30: 8d:f0:6e:5e:09:21:41:5e:c0:c0:86:10:12:31:66: 11:91:a0:32:cd:6d:99:3e:b7:cf:c8:94:30:06:63: 5d:ae:ed:1d:3b:e8:94:38:d7:cc:32:f9:34:1e:7d: e3:e2:5e:6f:66:7c:e8:a1:ef:95:75:df:43:24:f7: c1:63:26:7f:7f:21:32:40:32:06:84:7c:90:fe:95: 3e:2e:dd:52:dd:2d:a5:f1:0b:74:17:e9:a5:89:44: 74:8e:ee:f3:8d:3f:3e:37:a6:ba:c7:c0:be:35:ab: 60:4a:95:d6:d1:3b:d1:2b:58:57:31:c7:66:86:b6: 66:75:35:a5:34:ce:01:ec:17:51:d3:7d:f7:ef:cd: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2D:A3:4F:88:63:AE:37:9D:24:8C:BA:6C:76:A9:D6:EF:BB:56:32 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:1d0::/44 Signature Algorithm: sha256WithRSAEncryption 55:52:a5:af:43:70:ef:ee:5c:ec:ff:87:44:17:77:5c:3b:0c: c0:66:08:bf:14:5a:7a:8b:47:16:fc:e2:c3:77:cf:27:14:b9: 26:bb:0c:99:4f:fe:d3:dd:e0:44:0e:fa:1b:93:30:22:03:a7: 19:e3:bb:32:bf:8d:d9:7f:08:54:fd:ba:cf:42:f0:d9:0c:39: 7e:eb:6f:e7:e8:e9:98:27:26:5f:0c:37:0f:00:44:97:d2:cf: 7e:3d:a5:72:f1:0f:69:f9:c1:65:96:d2:83:58:77:31:73:df: 4a:21:b9:67:75:2e:15:ff:75:e7:3f:fa:cf:8d:ce:be:ae:51: fb:2b:d7:24:9f:2d:11:ab:9a:9a:b1:29:f0:fa:3b:f5:89:db: 81:eb:ab:51:7c:9a:a7:b1:15:c5:3b:92:00:3c:92:00:50:fc: 52:f6:60:a1:b9:02:b5:56:34:ca:e4:fb:00:1c:e0:3d:5f:92: 18:99:ff:ec:18:72:17:d6:02:c5:15:33:87:88:52:e8:b7:2d: 91:ea:22:7b:22:37:21:9f:1f:cf:21:21:36:4c:42:4f:68:af: c3:4e:0a:c7:ba:65:39:26:7a:ca:6e:f0:be:9b:9f:b8:ae:f4: 05:e7:4b:59:22:6a:28:3a:23:e6:4d:41:8e:9f:5d:1a:3a:d9: 6b:4e:64:72 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUevQCqcFPGWQATGLy0P0gFWX38kUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM2WhcNMjcwNTE3MDkyMTM2 WjAzMTEwLwYDVQQDEyhCQjJEQTM0Rjg4NjNBRTM3OUQyNDhDQkE2Qzc2QTlENkVG QkI1NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvleFcr8uDdX8 TBfRoco3KmRd1AbaN1Ock+WKGOgKexI9MNx+ZYtyXedqM5Bb1bkWUs7Mfe1nQPl4 OHiCek4Hx9lA6b7CvThj7H9o9yVQdcWMXFdEoxAqRvQNti7eO7AwD4KcsLhGyC6p 4wQeQUteGEGUhDWbFzCN8G5eCSFBXsDAhhASMWYRkaAyzW2ZPrfPyJQwBmNdru0d O+iUONfMMvk0Hn3j4l5vZnzooe+Vdd9DJPfBYyZ/fyEyQDIGhHyQ/pU+Lt1S3S2l 8Qt0F+mliUR0ju7zjT8+N6a6x8C+NatgSpXW0TvRK1hXMcdmhrZmdTWlNM4B7BdR 0333782GtwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLsto0+IY643nSSMumx2qdbv u1YyMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzE2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM3MzIzNTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gHQMA0GCSqGSIb3DQEBCwUAA4IBAQBVUqWvQ3Dv7lzs/4dEF3dc OwzAZgi/FFp6i0cW/OLDd88nFLkmuwyZT/7T3eBEDvobkzAiA6cZ47syv43ZfwhU /brPQvDZDDl+62/n6OmYJyZfDDcPAESX0s9+PaVy8Q9p+cFlltKDWHcxc99KIbln dS4V/3XnP/rPjc6+rlH7K9ckny0Rq5qasSnw+jv1iduB66tRfJqnsRXFO5IAPJIA UPxS9mChuQK1VjTK5PsAHOA9X5IYmf/sGHIX1gLFFTOHiFLoty2R6iJ7Ijchnx/P ISE2TEJPaK/DTgrHumU5JnrKbvC+m5+4rvQF50tZImooOiPmTUGOn10aOtlrTmRy -----END CERTIFICATE-----Generated at Sat Jun 6 08:16:04 2026 by rpki-client