$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa File: 323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa (raw, json) Hash identifier: zrhfOiCGW0zXAI6GL3P2sxSZuYQ27+bSLUJ93K4qyds= Subject key identifier: BE:72:84:57:D5:DB:D1:A3:D1:C0:35:1C:EA:14:4B:CD:64:E9:9F:45 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1C8E8F59881796FE93EA6BF365E00C1F4C0D4A65 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa Signing time: Mon 18 May 2026 09:21:37 +0000 ROA not before: Mon 18 May 2026 09:16:37 +0000 ROA not after: Mon 17 May 2027 09:21:37 +0000 asID: 40916 IP address blocks: 2602:feda:3a0::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8e:8f:59:88:17:96:fe:93:ea:6b:f3:65:e0:0c:1f:4c:0d:4a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:37 2026 GMT Not After : May 17 09:21:37 2027 GMT Subject: CN=BE728457D5DBD1A3D1C0351CEA144BCD64E99F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:3f:aa:8c:95:57:ae:2a:1b:4e:32:53:b0: 0b:31:b7:16:06:0d:6f:0b:38:fa:32:67:c7:31:59: 0b:64:f9:d8:bd:fd:c2:c7:b7:30:46:6b:a9:07:57: 18:24:d3:bd:a3:3f:f5:d7:0e:23:3e:f8:d3:e7:27: 57:c0:64:35:fc:eb:48:db:d6:41:4e:2b:53:e2:2f: 1a:51:af:d0:41:83:98:c8:bb:a7:33:bf:c0:77:0d: 52:38:05:6c:c8:cc:4a:e5:38:62:1f:d8:1a:45:b5: 0e:dd:70:32:73:51:c0:4e:67:28:ed:3f:24:0a:82: 61:aa:60:72:ee:ed:01:ab:ab:00:ef:a2:76:d9:39: 48:83:75:b2:0d:65:9b:f5:7c:7c:4e:ca:5e:42:2e: a1:29:4d:91:5c:e7:81:92:b9:17:58:9c:d7:f4:02: e0:c6:f6:a6:f1:77:bf:4c:5a:f2:05:ea:8f:5f:30: 8b:97:ad:10:3b:2b:17:27:aa:b0:ee:82:a2:aa:c8: f3:3e:3e:6e:d4:a0:57:39:41:c3:8e:68:e8:22:62: 32:3d:c2:db:15:f4:75:81:85:50:8d:35:93:3e:e2: e5:86:25:90:e8:ef:00:ef:ba:1f:af:c1:ad:36:33: fd:4f:62:6e:66:ca:06:1f:8c:32:29:68:e6:38:09: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:84:57:D5:DB:D1:A3:D1:C0:35:1C:EA:14:4B:CD:64:E9:9F:45 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a0::/45 Signature Algorithm: sha256WithRSAEncryption aa:95:e6:67:b0:b2:b2:47:0b:8f:e1:05:f1:8c:d4:4c:55:b6: 52:8f:cd:4c:6c:45:d2:76:dd:b8:f0:36:9a:73:f8:6e:cb:60: 4e:37:1f:ba:e4:9a:88:07:81:57:23:a4:12:14:b3:b1:5a:88: cd:4b:8f:69:88:38:19:65:af:92:69:4e:84:04:19:86:40:5c: b6:c3:f9:39:5e:a6:78:d9:0b:f2:ea:f6:81:f9:23:d4:49:54: bf:c3:04:d1:e6:4d:54:49:eb:4e:9d:52:27:e7:63:cd:19:f0: 5d:47:19:72:d3:53:51:5a:24:04:23:12:df:d3:e9:b3:37:4e: af:e5:5f:c5:9a:df:82:d3:fc:3a:1c:b8:21:e2:46:a9:52:5f: 5f:03:f8:d3:eb:0b:0d:68:50:01:8a:0b:36:b0:1e:d9:d7:e6: 42:85:1c:a1:6a:3c:13:87:60:cf:31:18:3f:77:ac:ca:20:be: c0:36:49:3f:17:6a:aa:50:32:35:2c:f3:0e:cf:f6:14:15:2d: eb:ef:12:2e:56:0d:cd:0c:9a:bc:87:40:bd:a3:ac:33:41:6b: 37:84:75:67:be:5c:bc:bb:94:da:fb:51:38:5e:1c:96:01:23: 81:db:58:40:1a:00:8c:0f:73:2e:88:af:97:0b:df:c1:0f:1e: 54:2b:ac:b2 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUHI6PWYgXlv6T6mvzZeAMH0wNSmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM3WhcNMjcwNTE3MDkyMTM3 WjAzMTEwLwYDVQQDEyhCRTcyODQ1N0Q1REJEMUEzRDFDMDM1MUNFQTE0NEJDRDY0 RTk5RjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCA/qoyVV64q G04yU7ALMbcWBg1vCzj6MmfHMVkLZPnYvf3Cx7cwRmupB1cYJNO9oz/11w4jPvjT 5ydXwGQ1/OtI29ZBTitT4i8aUa/QQYOYyLunM7/Adw1SOAVsyMxK5ThiH9gaRbUO 3XAyc1HATmco7T8kCoJhqmBy7u0Bq6sA76J22TlIg3WyDWWb9Xx8TspeQi6hKU2R XOeBkrkXWJzX9ALgxvam8Xe/TFryBeqPXzCLl60QOysXJ6qw7oKiqsjzPj5u1KBX OUHDjmjoImIyPcLbFfR1gYVQjTWTPuLlhiWQ6O8A77ofr8GtNjP9T2JuZsoGH4wy KWjmOAm7sQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFL5yhFfV29Gj0cA1HOoUS81k 6Z9FMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez MzYxMzAzYTNhMmYzNDM1MmQzNDM4MjAzZDNlMjAzNDMwMzkzMTM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcDJgL+2gOgMA0GCSqGSIb3DQEBCwUAA4IBAQCqleZnsLKyRwuP4QXxjNRMVbZS j81MbEXSdt248Daac/huy2BONx+65JqIB4FXI6QSFLOxWojNS49piDgZZa+SaU6E BBmGQFy2w/k5XqZ42Qvy6vaB+SPUSVS/wwTR5k1USetOnVIn52PNGfBdRxly01NR WiQEIxLf0+mzN06v5V/Fmt+C0/w6HLgh4kapUl9fA/jT6wsNaFABigs2sB7Z1+ZC hRyhajwTh2DPMRg/d6zKIL7ANkk/F2qqUDI1LPMOz/YUFS3r7xIuVg3NDJq8h0C9 o6wzQWs3hHVnvly8u5Ta+1E4XhyWASOB21hAGgCMD3MuiK+XC9/BDx5UK6yy -----END CERTIFICATE-----Generated at Sat Jun 6 08:16:04 2026 by rpki-client