$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa File: 323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa (raw, json) Hash identifier: sULd1Ww9m3fiMhdw6KWjqGSAtXkP4Ktu8dEIJwe+I2g= Subject key identifier: B4:3E:54:CF:4C:15:30:9A:8E:EE:9D:79:11:6A:BE:89:7B:CE:5E:31 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 4248AC25C9DA3738078C3BDB7E43242D4D4608CE Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa Signing time: Mon 18 May 2026 09:21:37 +0000 ROA not before: Mon 18 May 2026 09:16:37 +0000 ROA not after: Mon 17 May 2027 09:21:37 +0000 asID: 207268 IP address blocks: 2602:feda:3c8::/46 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:48:ac:25:c9:da:37:38:07:8c:3b:db:7e:43:24:2d:4d:46:08:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:37 2026 GMT Not After : May 17 09:21:37 2027 GMT Subject: CN=B43E54CF4C15309A8EEE9D79116ABE897BCE5E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:21:38:27:7f:1d:69:3c:6e:a3:5d:90:11: 1d:4d:60:9b:c1:7e:b0:78:f5:5d:5e:2b:5b:02:6f: a8:77:4e:f2:e6:d7:82:75:e9:74:e3:8f:2d:d0:36: 34:74:64:50:51:61:17:aa:c2:3b:65:cd:4e:54:93: 6c:13:b6:e2:cb:e4:df:a0:b1:6e:45:18:4b:24:94: 19:a5:d1:43:67:f6:60:17:33:9e:67:62:e9:15:91: 0b:7e:95:8e:3b:77:56:c5:c0:b2:e6:78:9b:c2:87: 66:39:2e:97:b5:78:0f:43:7f:4f:35:a0:4b:03:84: 40:e3:cb:25:bb:3f:50:e3:ba:ca:a2:11:95:20:4f: 3d:4a:c9:74:57:ed:33:c0:97:4d:da:2a:ec:1c:6e: 81:20:11:02:3a:cf:ec:3d:61:ef:7b:7f:26:e3:88: 02:cc:0d:57:76:fb:2d:0c:89:0e:49:6a:6c:45:9b: 84:54:21:b1:ef:0b:68:d3:93:8e:19:d4:fe:26:d5: 40:44:56:49:0f:ee:74:b1:b0:13:86:a3:e9:9e:1c: 8c:80:22:de:19:e3:3e:8b:a0:2f:db:fa:72:93:96: 48:a0:92:c0:bd:46:d6:3d:10:15:fe:43:86:d2:3c: af:26:88:0f:82:b0:61:a1:ef:e3:be:c0:d6:fd:67: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3E:54:CF:4C:15:30:9A:8E:EE:9D:79:11:6A:BE:89:7B:CE:5E:31 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3c8::/46 Signature Algorithm: sha256WithRSAEncryption 4c:5e:d1:3f:a9:5e:2c:86:93:49:3d:20:59:26:1c:5f:37:3f: f3:a7:08:20:9c:88:3b:a9:e8:78:72:6b:dd:93:4e:a7:32:57: d3:62:48:f3:82:e0:36:e6:24:1a:8c:ee:42:32:1d:83:ba:20: a0:ea:2c:ef:06:90:57:04:70:74:f3:9a:fc:57:60:da:08:bc: d1:39:31:e2:28:bb:2f:42:e3:b5:70:73:8d:92:10:f6:d1:17: 04:8e:06:3a:34:fe:7b:88:d2:63:31:fb:a3:1f:5e:98:a6:36: 79:62:93:b4:8d:29:b3:5f:1b:9d:d8:1c:d5:0c:27:dd:d1:16: 86:f9:ce:e6:47:f8:c9:8c:ac:f3:c2:c5:62:47:a7:dd:26:c7: 1f:e2:f2:2d:17:e2:af:ac:97:0a:86:04:fb:bd:86:5e:73:1e: ae:46:06:7d:e5:0c:a5:87:1d:97:82:92:72:3b:96:bd:df:7c: a7:a6:b9:92:0b:81:1b:2d:93:a1:b8:fa:dc:78:25:d5:a7:83: 2d:f1:f0:26:3e:2c:d7:d8:e9:c9:23:37:c7:b8:f9:6c:08:8f: 9c:31:f0:df:0b:bb:04:4a:b0:00:20:62:13:8f:e9:87:29:a1: 58:04:a6:ca:e0:c4:ca:af:d5:01:2d:33:f1:82:2b:2d:cc:c6: 71:06:7a:24 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUQkisJcnaNzgHjDvbfkMkLU1GCM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM3WhcNMjcwNTE3MDkyMTM3 WjAzMTEwLwYDVQQDEyhCNDNFNTRDRjRDMTUzMDlBOEVFRTlENzkxMTZBQkU4OTdC Q0U1RTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG0hOCd/HWk8 bqNdkBEdTWCbwX6wePVdXitbAm+od07y5teCdel0448t0DY0dGRQUWEXqsI7Zc1O VJNsE7biy+TfoLFuRRhLJJQZpdFDZ/ZgFzOeZ2LpFZELfpWOO3dWxcCy5nibwodm OS6XtXgPQ39PNaBLA4RA48sluz9Q47rKohGVIE89Ssl0V+0zwJdN2irsHG6BIBEC Os/sPWHve38m44gCzA1XdvstDIkOSWpsRZuEVCGx7wto05OOGdT+JtVARFZJD+50 sbAThqPpnhyMgCLeGeM+i6Av2/pyk5ZIoJLAvUbWPRAV/kOG0jyvJogPgrBhoe/j vsDW/WdV0QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLQ+VM9MFTCaju6deRFqvol7 zl4xMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MzM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIzMDM3MzIzNjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcCJgL+2gPIMA0GCSqGSIb3DQEBCwUAA4IBAQBMXtE/qV4shpNJPSBZJhxf Nz/zpwggnIg7qeh4cmvdk06nMlfTYkjzguA25iQajO5CMh2DuiCg6izvBpBXBHB0 85r8V2DaCLzROTHiKLsvQuO1cHONkhD20RcEjgY6NP57iNJjMfujH16YpjZ5YpO0 jSmzXxud2BzVDCfd0RaG+c7mR/jJjKzzwsViR6fdJscf4vItF+KvrJcKhgT7vYZe cx6uRgZ95Qylhx2XgpJyO5a933ynprmSC4EbLZOhuPrceCXVp4Mt8fAmPizX2OnJ IzfHuPlsCI+cMfDfC7sESrAAIGITj+mHKaFYBKbK4MTKr9UBLTPxgistzMZxBnok -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:10 2026 by rpki-client