$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa File: 323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa (raw, json) Hash identifier: TL1m3y1UsZhx/06NmXEdlKI6xqz8rZevJOH/shEBk4o= Subject key identifier: 04:E4:0A:5E:D1:D3:B5:65:0A:24:8C:05:CC:C5:B2:1C:22:1C:EB:9B Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0CCA35D9C6BC76623D8459282E627C063D95034A Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa Signing time: Mon 18 May 2026 09:21:34 +0000 ROA not before: Mon 18 May 2026 09:16:34 +0000 ROA not after: Mon 17 May 2027 09:21:34 +0000 asID: 140913 IP address blocks: 2602:feda:3a8::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ca:35:d9:c6:bc:76:62:3d:84:59:28:2e:62:7c:06:3d:95:03:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:34 2026 GMT Not After : May 17 09:21:34 2027 GMT Subject: CN=04E40A5ED1D3B5650A248C05CCC5B21C221CEB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:b3:1c:44:33:ab:94:ac:3e:d9:56:3f:79: 94:d2:9b:58:03:ef:42:54:e4:e6:e1:33:45:17:e4: 76:f1:ee:dd:0f:8b:d0:8f:9a:e7:b5:45:db:5e:78: 72:d9:f8:fa:0e:b4:6d:68:bb:08:0b:0f:01:ba:a9: 8f:89:53:f4:c0:b1:2e:56:5b:d8:0d:9d:c2:39:8a: 83:12:14:65:0f:b2:f3:04:b3:01:59:94:ed:69:c2: cb:d3:af:1a:06:02:58:67:c8:10:39:7f:43:ca:e0: 66:02:89:08:94:82:0a:3a:f1:a1:69:8f:31:80:61: f6:22:9a:6b:65:16:69:78:52:55:9f:51:eb:a3:ec: 1b:b7:7b:e6:b5:90:05:8d:85:9d:61:2a:f4:89:33: 6c:af:a7:44:0e:78:0a:32:b6:83:35:b2:1f:c0:00: 9f:12:79:a0:f8:fe:ec:bf:10:fc:c1:f5:b0:df:c8: e9:4b:75:fd:99:f0:cb:b2:24:fe:6b:a1:d5:07:fb: b4:7b:ae:3c:62:67:6a:de:ef:5f:da:07:ec:ba:dd: f9:fe:c0:99:96:c8:97:59:c1:1f:dc:82:4a:5c:40: 6b:78:5c:b9:4b:7e:15:29:51:31:94:5d:b5:08:bb: a4:23:43:be:cc:19:96:ab:32:96:69:d5:c3:4e:6d: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:0A:5E:D1:D3:B5:65:0A:24:8C:05:CC:C5:B2:1C:22:1C:EB:9B X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a8::/45 Signature Algorithm: sha256WithRSAEncryption 86:74:fa:b0:62:73:d9:5e:88:4a:eb:1b:22:ff:87:fb:e9:c9: 3a:e5:95:bf:c3:49:4c:04:49:05:c3:6d:25:6e:68:00:ad:15: 4f:17:a9:5e:b8:07:85:60:3c:5a:46:10:c5:5c:f7:57:07:b7: ab:b0:5b:d0:15:4a:23:f3:1a:59:01:39:29:9f:8b:9e:88:bc: 87:ca:4f:d2:e7:e9:02:67:dc:7d:ec:6c:fe:49:f5:9d:c7:76: 2d:3a:b6:8a:ab:8f:d1:4d:d5:40:35:8a:11:1e:c0:fb:e8:27: 7b:49:1b:be:c0:35:ae:7c:89:a9:d0:1a:b2:89:84:5c:ef:e5: b6:87:8f:b6:90:03:0d:c8:00:ea:7d:54:10:f3:6d:20:31:14: 47:70:5c:a7:0d:76:02:9f:ef:ea:22:05:56:8e:78:30:e1:2a: c1:bb:1c:1e:22:b2:fa:92:90:57:67:bf:c3:d9:a7:06:24:bf: dc:6d:06:f2:0c:b1:64:b3:c6:d8:e5:ad:92:3d:f0:ec:31:7f: c8:47:f5:46:9c:21:35:58:fd:8c:47:f1:3c:3a:87:c2:de:f8: f1:37:99:b7:92:aa:d8:36:de:27:7b:62:a9:4a:b5:e8:22:c6: 32:b3:5c:14:d8:8a:36:34:40:fa:5d:25:98:60:04:04:73:5a: 26:93:eb:26 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUDMo12ca8dmI9hFkoLmJ8Bj2VA0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM0WhcNMjcwNTE3MDkyMTM0 WjAzMTEwLwYDVQQDEygwNEU0MEE1RUQxRDNCNTY1MEEyNDhDMDVDQ0M1QjIxQzIy MUNFQjlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugyzHEQzq5Ss PtlWP3mU0ptYA+9CVOTm4TNFF+R28e7dD4vQj5rntUXbXnhy2fj6DrRtaLsICw8B uqmPiVP0wLEuVlvYDZ3COYqDEhRlD7LzBLMBWZTtacLL068aBgJYZ8gQOX9DyuBm AokIlIIKOvGhaY8xgGH2IpprZRZpeFJVn1Hro+wbt3vmtZAFjYWdYSr0iTNsr6dE DngKMraDNbIfwACfEnmg+P7svxD8wfWw38jpS3X9mfDLsiT+a6HVB/u0e648Ymdq 3u9f2gfsut35/sCZlsiXWcEf3IJKXEBreFy5S34VKVExlF21CLukI0O+zBmWqzKW adXDTm35IQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFATkCl7R07VlCiSMBczFshwi HOubMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MTM4M2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzEzNDMwMzkzMTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2gOoMA0GCSqGSIb3DQEBCwUAA4IBAQCGdPqwYnPZXohK6xsi/4f7 6ck65ZW/w0lMBEkFw20lbmgArRVPF6leuAeFYDxaRhDFXPdXB7ersFvQFUoj8xpZ ATkpn4ueiLyHyk/S5+kCZ9x97Gz+SfWdx3YtOraKq4/RTdVANYoRHsD76Cd7SRu+ wDWufImp0BqyiYRc7+W2h4+2kAMNyADqfVQQ820gMRRHcFynDXYCn+/qIgVWjngw 4SrBuxweIrL6kpBXZ7/D2acGJL/cbQbyDLFks8bY5a2SPfDsMX/IR/VGnCE1WP2M R/E8OofC3vjxN5m3kqrYNt4ne2KpSrXoIsYys1wU2Io2NED6XSWYYAQEc1omk+sm -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:15 2026 by rpki-client