$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa File: 323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa (raw, json) Hash identifier: 48lB5Tj/e2T/67YXxrT0tPfxX3V2HqDL1mpYiw7xAZo= Subject key identifier: 67:A2:A4:B1:C4:5A:03:83:E0:CB:EE:0B:59:35:29:09:84:7D:5E:65 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1F17456E2A877F432B509B2DC5A546BB9A26C684 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa Signing time: Mon 18 May 2026 09:21:34 +0000 ROA not before: Mon 18 May 2026 09:16:34 +0000 ROA not after: Mon 17 May 2027 09:21:34 +0000 asID: 137256 IP address blocks: 2602:feda:3a8::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:17:45:6e:2a:87:7f:43:2b:50:9b:2d:c5:a5:46:bb:9a:26:c6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:34 2026 GMT Not After : May 17 09:21:34 2027 GMT Subject: CN=67A2A4B1C45A0383E0CBEE0B59352909847D5E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:de:bc:fb:33:e1:03:49:64:70:09:7b:b8: ed:77:9a:54:9e:01:c1:27:c8:af:57:ff:0d:66:48: b4:be:85:dc:c5:72:19:83:0e:2d:97:a6:5b:bd:33: e5:6d:53:a3:06:4e:ae:c8:2b:57:2f:11:d8:01:c1: 97:0d:0a:dd:71:d7:1c:6e:52:f7:05:57:85:a9:97: 2b:a0:72:f0:c3:d9:cf:c0:15:f5:31:2e:de:b5:0b: fd:c7:a5:93:d3:eb:24:d6:54:7e:d8:57:7a:a6:ba: 8e:fc:48:b6:eb:f5:aa:3e:a5:ba:01:4b:f2:b9:03: 45:42:1a:1f:38:3d:35:80:78:ba:89:9c:39:96:40: 07:e1:d3:ba:62:35:e7:3c:20:1f:08:2d:75:33:b9: 19:95:60:6d:a8:fc:45:c4:5f:35:7a:a3:76:eb:8c: 42:cc:e7:7b:7e:59:52:ac:a3:d3:6f:b0:1c:d2:5f: 22:cf:09:c0:2e:54:0f:6d:66:3a:fd:61:0d:d9:aa: e8:21:6e:6a:ae:a7:b8:43:07:07:a7:02:d1:20:ca: f6:87:5d:13:74:42:7a:35:cd:f1:67:23:93:06:8d: d1:cf:f9:a8:fb:f1:da:0b:95:27:a4:e8:95:69:e2: e6:c3:0c:c6:a7:d0:b5:7f:3d:97:41:8f:c6:3c:f0: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A2:A4:B1:C4:5A:03:83:E0:CB:EE:0B:59:35:29:09:84:7D:5E:65 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a8::/45 Signature Algorithm: sha256WithRSAEncryption 8b:71:a2:f5:65:b0:f8:c8:4e:ec:6d:12:0c:21:1e:74:74:54: 12:04:d3:99:f0:e1:45:0a:fa:f7:e9:e7:51:92:86:b1:d9:71: 46:26:b1:5f:ac:c6:84:95:b0:03:25:d7:84:db:73:58:29:d6: da:f3:69:a0:de:72:d0:51:97:dc:3e:73:53:43:fb:6d:a8:1c: 59:e5:08:97:05:b9:ff:e7:bf:c3:bf:7f:9d:d7:1a:dc:50:99: dd:72:0e:a1:08:13:85:6e:8b:8b:51:d2:01:75:b2:92:7a:26: 7e:02:8d:93:46:94:8a:1f:dc:18:50:a5:b9:4c:87:46:95:25: 3a:fa:ef:ea:d2:24:93:fc:d8:20:77:97:1d:09:b4:6d:5b:9c: a9:76:59:a1:c0:7e:86:72:c7:7b:f1:44:4c:22:95:bf:f4:bf: fa:fb:64:27:6e:be:a1:97:54:d7:3f:df:cb:d8:70:e2:d8:0f: b8:67:88:ea:52:b5:cf:bb:4b:f8:a8:2b:ae:db:6a:43:08:50: a5:07:ad:40:50:ec:1f:1b:2c:b9:90:0f:ab:b0:41:90:f9:e2: 69:ce:b1:8a:93:55:3c:4a:56:d0:89:8a:d7:6f:d2:1a:17:48: 91:16:f7:4d:b2:00:79:ac:79:7e:21:9c:f5:d9:35:35:fd:2e: fa:c5:06:29 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUHxdFbiqHf0MrUJstxaVGu5omxoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM0WhcNMjcwNTE3MDkyMTM0 WjAzMTEwLwYDVQQDEyg2N0EyQTRCMUM0NUEwMzgzRTBDQkVFMEI1OTM1MjkwOTg0 N0Q1RTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIzevPsz4QNJ ZHAJe7jtd5pUngHBJ8ivV/8NZki0voXcxXIZgw4tl6ZbvTPlbVOjBk6uyCtXLxHY AcGXDQrdcdccblL3BVeFqZcroHLww9nPwBX1MS7etQv9x6WT0+sk1lR+2Fd6prqO /Ei26/WqPqW6AUvyuQNFQhofOD01gHi6iZw5lkAH4dO6YjXnPCAfCC11M7kZlWBt qPxFxF81eqN264xCzOd7fllSrKPTb7Ac0l8izwnALlQPbWY6/WEN2aroIW5qrqe4 QwcHpwLRIMr2h10TdEJ6Nc3xZyOTBo3Rz/mo+/HaC5UnpOiVaeLmwwzGp9C1fz2X QY/GPPC4EwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGeipLHEWgOD4MvuC1k1KQmE fV5lMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MTM4M2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzEzMzM3MzIzNTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2gOoMA0GCSqGSIb3DQEBCwUAA4IBAQCLcaL1ZbD4yE7sbRIMIR50 dFQSBNOZ8OFFCvr36edRkoax2XFGJrFfrMaElbADJdeE23NYKdba82mg3nLQUZfc PnNTQ/ttqBxZ5QiXBbn/57/Dv3+d1xrcUJndcg6hCBOFbouLUdIBdbKSeiZ+Ao2T RpSKH9wYUKW5TIdGlSU6+u/q0iST/Nggd5cdCbRtW5ypdlmhwH6Gcsd78URMIpW/ 9L/6+2Qnbr6hl1TXP9/L2HDi2A+4Z4jqUrXPu0v4qCuu22pDCFClB61AUOwfGyy5 kA+rsEGQ+eJpzrGKk1U8SlbQiYrXb9IaF0iRFvdNsgB5rHl+IZz12TU1/S76xQYp -----END CERTIFICATE-----Generated at Sat Jun 6 08:16:05 2026 by rpki-client