$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa File: 323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa (raw, json) Hash identifier: hWXCvPgOgSDcdbvFg6HT0Q55B9osBpV6/eh+gdeSSak= Subject key identifier: 3B:60:F4:91:70:A4:47:75:18:CA:57:DB:00:29:9E:D8:D9:F6:0D:CC Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2CF6448D230317DBB8A36C535B2164317B3059A8 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa Signing time: Mon 18 May 2026 09:21:37 +0000 ROA not before: Mon 18 May 2026 09:16:37 +0000 ROA not after: Mon 17 May 2027 09:21:37 +0000 asID: 213361 IP address blocks: 2602:feda:3d0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f6:44:8d:23:03:17:db:b8:a3:6c:53:5b:21:64:31:7b:30:59:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:37 2026 GMT Not After : May 17 09:21:37 2027 GMT Subject: CN=3B60F49170A4477518CA57DB00299ED8D9F60DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:71:57:c7:49:47:db:0f:01:c5:79:6a:0c: 00:97:b3:04:f1:cb:d9:5f:3b:71:79:9b:06:32:99: 7f:3c:3e:f9:69:1d:cb:89:78:db:b6:20:4c:44:84: 1f:29:81:4f:0a:14:1f:1a:e7:8e:f7:8d:21:c0:37: 00:71:39:8d:df:83:8d:ec:1c:23:5e:e4:0f:c0:7c: ff:7b:de:ae:85:7d:ea:c6:f1:f2:13:1c:a3:54:39: 23:d9:21:28:9e:e7:9b:50:af:63:67:78:67:ca:ba: 69:fe:56:99:6f:2a:49:bc:52:c8:d8:7f:ad:f1:d7: 45:34:a4:e8:55:c2:51:17:d3:cd:bf:1b:72:df:b9: 1b:b7:06:ea:99:3c:c1:06:7f:d2:a1:8e:9d:86:e6: 4f:d7:ca:d3:94:fe:f5:02:a5:6c:f1:44:4e:50:0b: d4:1e:29:f2:3b:4e:1c:c7:22:d7:eb:92:29:bd:2e: 31:ec:b3:4b:52:fb:9f:8e:55:ad:e2:b6:cb:d5:26: 16:5e:2a:d3:1a:f2:93:78:a6:77:ab:68:2b:f8:c2: 76:0b:5d:bc:77:60:81:79:7d:19:91:c9:9f:7e:ee: 29:e4:82:da:91:94:c0:94:f3:d1:dd:9a:53:85:d6: 94:e2:91:5e:85:bb:c2:62:b2:52:05:ee:f1:b6:36: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:F4:91:70:A4:47:75:18:CA:57:DB:00:29:9E:D8:D9:F6:0D:CC X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3d0::/44 Signature Algorithm: sha256WithRSAEncryption ac:57:27:03:47:eb:e8:8e:0e:f2:52:1e:74:8a:76:1f:f7:ec: 45:4c:2a:9e:28:22:04:a9:d6:67:ec:9d:f5:d6:07:bc:4e:0c: 53:ca:fc:2f:62:be:b6:aa:1a:18:82:1d:4b:14:14:58:8b:cc: d8:96:fb:95:b3:28:ee:b4:58:9f:72:e3:63:74:d0:e5:c3:e8: 41:56:43:2e:96:06:23:40:fa:4e:49:18:1d:16:ab:26:18:f9: 94:cc:58:a1:2e:e7:fb:32:d4:a1:1e:21:39:c7:72:ad:ef:6b: 61:06:89:f0:b8:f1:8d:1b:fa:1d:cc:50:9d:2a:48:4f:15:ea: 29:2a:88:3f:3d:e2:f0:90:62:a7:95:45:8e:9d:31:64:76:ae: 17:24:f7:74:a5:04:64:55:75:fe:dc:17:cb:c3:aa:bc:15:13: 70:2b:f6:ec:5f:d8:97:d0:b1:e7:4f:50:98:db:2a:b1:8d:fe: ea:74:de:eb:bd:1b:3a:4c:3e:86:e7:38:3b:60:2c:db:95:2e: d7:66:c3:82:39:9a:ec:4e:8d:fd:8d:44:33:9e:d3:0d:35:da: a4:c7:24:eb:6d:37:27:cf:88:8b:8d:0a:e2:a5:98:64:fd:0c: 82:58:33:0a:8d:93:33:d6:5a:7c:37:c2:e8:2a:db:36:a5:ed: f0:f5:e7:cb -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIULPZEjSMDF9u4o2xTWyFkMXswWagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM3WhcNMjcwNTE3MDkyMTM3 WjAzMTEwLwYDVQQDEygzQjYwRjQ5MTcwQTQ0Nzc1MThDQTU3REIwMDI5OUVEOEQ5 RjYwRENDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk9xV8dJR9sP AcV5agwAl7ME8cvZXztxeZsGMpl/PD75aR3LiXjbtiBMRIQfKYFPChQfGueO940h wDcAcTmN34ON7BwjXuQPwHz/e96uhX3qxvHyExyjVDkj2SEonuebUK9jZ3hnyrpp /laZbypJvFLI2H+t8ddFNKToVcJRF9PNvxty37kbtwbqmTzBBn/SoY6dhuZP18rT lP71AqVs8UROUAvUHinyO04cxyLX65IpvS4x7LNLUvufjlWt4rbL1SYWXirTGvKT eKZ3q2gr+MJ2C128d2CBeX0Zkcmffu4p5ILakZTAlPPR3ZpThdaU4pFehbvCYrJS Be7xtjY99wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDtg9JFwpEd1GMpX2wApntjZ 9g3MMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMzMzMzNjMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gPQMA0GCSqGSIb3DQEBCwUAA4IBAQCsVycDR+vojg7yUh50inYf 9+xFTCqeKCIEqdZn7J311ge8TgxTyvwvYr62qhoYgh1LFBRYi8zYlvuVsyjutFif cuNjdNDlw+hBVkMulgYjQPpOSRgdFqsmGPmUzFihLuf7MtShHiE5x3Kt72thBonw uPGNG/odzFCdKkhPFeopKog/PeLwkGKnlUWOnTFkdq4XJPd0pQRkVXX+3BfLw6q8 FRNwK/bsX9iX0LHnT1CY2yqxjf7qdN7rvRs6TD6G5zg7YCzblS7XZsOCOZrsTo39 jUQzntMNNdqkxyTrbTcnz4iLjQripZhk/QyCWDMKjZMz1lp8N8LoKts2pe3w9efL -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:57 2026 by rpki-client