$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa File: 323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa (raw, json) Hash identifier: PvZedzRNY5BpT3Mqc/UPs3kP2psy9kShiarOKEq35+4= Subject key identifier: 00:52:82:AD:8B:1F:1F:E6:77:08:25:FA:3D:C1:8B:DA:AC:CE:2E:A7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6F43CE23B3D5FD885D77D59D94380E270C71D928 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa Signing time: Mon 18 May 2026 09:21:30 +0000 ROA not before: Mon 18 May 2026 09:16:30 +0000 ROA not after: Mon 17 May 2027 09:21:30 +0000 asID: 134575 IP address blocks: 2602:feda:3b0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:ce:23:b3:d5:fd:88:5d:77:d5:9d:94:38:0e:27:0c:71:d9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:30 2026 GMT Not After : May 17 09:21:30 2027 GMT Subject: CN=005282AD8B1F1FE6770825FA3DC18BDAACCE2EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:40:55:aa:e3:3c:c5:af:b4:ba:86:96:90: b3:81:fe:cf:1a:e9:b1:68:d9:0b:e7:48:19:40:cd: da:03:83:85:3b:11:a3:f2:a1:83:85:e0:5f:ad:2a: a2:a6:7b:cc:7b:21:35:9c:08:fe:6e:87:d7:07:99: 97:dc:9c:6c:ef:fd:d7:01:87:09:78:9a:f1:ba:3a: 10:d9:02:44:17:dd:55:7d:95:cc:3f:e4:87:96:fe: 44:20:a3:43:3a:7d:fb:7b:cd:6a:a3:f5:03:f7:d9: be:cc:df:23:d1:f9:74:68:d6:67:9a:15:27:2d:7c: f2:d3:4f:39:88:03:95:b5:19:7c:bf:bd:c7:87:21: c3:ce:e7:85:0c:9f:ac:96:78:43:c5:65:0b:71:17: 3b:f1:6a:6e:5c:d3:16:73:c8:37:53:19:75:43:15: b6:04:30:42:cc:eb:e9:f9:d4:68:a0:86:f0:60:dd: 03:53:61:d4:06:d9:dd:79:05:6d:9a:dc:1f:e2:e1: 1c:b8:98:04:55:a0:95:7f:01:e2:37:73:f0:2a:1d: 0c:cd:47:d6:98:e3:6f:5e:7e:3f:fb:f4:fd:2a:b6: 37:24:ff:6d:4e:d8:d2:de:71:62:21:18:6c:ae:7b: 1b:8c:68:9f:06:4d:be:30:05:68:4e:d0:f0:5b:58: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:52:82:AD:8B:1F:1F:E6:77:08:25:FA:3D:C1:8B:DA:AC:CE:2E:A7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3b0::/44 Signature Algorithm: sha256WithRSAEncryption 42:8c:9b:5f:d5:82:43:65:1b:f1:c4:02:f0:d9:84:94:f5:a6: ec:ff:7b:be:31:39:fc:fb:11:43:58:f2:fd:4b:46:42:c8:7e: 8c:ba:c7:72:3e:de:50:d7:33:40:9f:75:eb:84:6b:f3:a1:2b: 05:50:90:77:d7:dd:6a:92:2a:66:96:d5:17:ae:a2:6a:61:98: d4:71:03:71:85:39:90:7c:60:9b:8c:84:81:5e:c2:87:a6:d0: 80:de:0f:53:a7:aa:71:d1:f1:b3:e5:2b:e5:3d:8b:e2:03:54: 7f:4d:71:c6:36:5b:57:3a:99:5d:68:c1:c6:b6:ea:cc:e4:c6: dc:d4:37:6b:55:a1:b7:f2:7d:8c:49:65:a5:88:2b:57:10:92: 97:21:61:b9:b8:94:ce:2d:ad:c8:36:70:9f:2d:3f:b7:0b:0e: 3b:c4:47:97:93:7a:92:2b:1d:c7:4d:13:b7:07:7a:af:f5:fd: 03:16:c7:3c:e1:7d:4b:e6:83:2b:6e:33:c9:38:59:5e:69:ed: a3:80:a6:32:0d:e8:fd:72:ed:79:5d:b3:67:47:0a:53:2b:5a: 24:d3:e6:2d:c7:d5:bc:c1:9e:1c:ae:ed:a7:49:2d:78:4b:ee: 27:85:75:b3:c9:b2:ad:70:40:d2:33:1c:df:50:83:0b:0e:ce: cd:fd:e4:0a -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUb0POI7PV/Yhdd9WdlDgOJwxx2SgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMwWhcNMjcwNTE3MDkyMTMw WjAzMTEwLwYDVQQDEygwMDUyODJBRDhCMUYxRkU2NzcwODI1RkEzREMxOEJEQUFD Q0UyRUE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwdAVarjPMWv tLqGlpCzgf7PGumxaNkL50gZQM3aA4OFOxGj8qGDheBfrSqipnvMeyE1nAj+bofX B5mX3Jxs7/3XAYcJeJrxujoQ2QJEF91VfZXMP+SHlv5EIKNDOn37e81qo/UD99m+ zN8j0fl0aNZnmhUnLXzy0085iAOVtRl8v73HhyHDzueFDJ+slnhDxWULcRc78Wpu XNMWc8g3Uxl1QxW2BDBCzOvp+dRooIbwYN0DU2HUBtndeQVtmtwf4uEcuJgEVaCV fwHiN3PwKh0MzUfWmONvXn4/+/T9KrY3JP9tTtjS3nFiIRhsrnsbjGifBk2+MAVo TtDwW1gyJQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFABSgq2LHx/mdwgl+j3Bi9qs zi6nMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM0MzUzNzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gOwMA0GCSqGSIb3DQEBCwUAA4IBAQBCjJtf1YJDZRvxxALw2YSU 9abs/3u+MTn8+xFDWPL9S0ZCyH6MusdyPt5Q1zNAn3XrhGvzoSsFUJB3191qkipm ltUXrqJqYZjUcQNxhTmQfGCbjISBXsKHptCA3g9Tp6px0fGz5SvlPYviA1R/TXHG NltXOpldaMHGturM5Mbc1DdrVaG38n2MSWWliCtXEJKXIWG5uJTOLa3INnCfLT+3 Cw47xEeXk3qSKx3HTRO3B3qv9f0DFsc84X1L5oMrbjPJOFleae2jgKYyDej9cu15 XbNnRwpTK1ok0+Ytx9W8wZ4cru2nSS14S+4nhXWzybKtcEDSMxzfUIMLDs7N/eQK -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:10 2026 by rpki-client