$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa File: 323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa (raw, json) Hash identifier: 2z7kkyq13YHdJwVQ0ZtgZhaoENS2jP/tpFOiQXKiU8w= Subject key identifier: C1:24:4F:F1:D4:3C:FD:D3:1A:22:47:DB:D7:34:17:C6:77:CE:4A:99 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7AF6646642911319F024F3842F4E16C00DA08E0C Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa Signing time: Mon 18 May 2026 09:21:37 +0000 ROA not before: Mon 18 May 2026 09:16:37 +0000 ROA not after: Mon 17 May 2027 09:21:37 +0000 asID: 396303 IP address blocks: 2602:feda:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f6:64:66:42:91:13:19:f0:24:f3:84:2f:4e:16:c0:0d:a0:8e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:37 2026 GMT Not After : May 17 09:21:37 2027 GMT Subject: CN=C1244FF1D43CFDD31A2247DBD73417C677CE4A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:f0:1a:12:23:26:57:0c:ce:b8:48:01:64: 78:bd:fe:4e:0b:c6:aa:f7:5f:35:0e:4a:89:de:4c: 7a:1b:be:28:6f:5b:14:12:bb:a8:7e:6d:16:af:d6: c4:f9:66:3b:67:5f:18:4f:a3:e9:55:a5:19:1d:4e: 71:23:65:7b:33:fa:19:07:3d:1b:ec:c4:20:9e:39: ab:30:d6:ec:22:a3:10:3f:c9:57:23:87:3a:03:2b: 30:d4:bc:f4:fe:f2:59:3c:e4:47:92:b5:ff:6a:bd: 3a:f1:d4:44:9c:67:ff:3d:99:03:46:04:b3:5a:cb: 1f:b8:2a:79:70:5f:9b:dd:bc:ab:4e:74:2e:a6:22: 77:5e:c7:99:59:5d:49:53:f0:ae:5a:54:d9:ac:51: 16:45:07:3a:3e:22:d1:23:eb:2d:3b:2f:ec:10:2b: 3b:36:4a:ec:43:b0:1c:0c:32:45:6d:2b:ee:d8:bd: 69:e1:ff:fe:72:27:0f:0a:dc:0e:f8:cf:ec:fc:a5: 78:9b:7b:62:3f:53:13:b4:5d:dd:c1:9c:ec:cb:c8: 1a:af:ad:90:d0:92:f6:7a:be:63:d2:73:70:6e:de: a4:47:0e:d6:b1:0e:0a:bd:70:e0:5c:5f:fc:f9:37: 9f:27:0e:f3:6e:50:f8:83:25:cc:7a:81:0b:bb:3f: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:4F:F1:D4:3C:FD:D3:1A:22:47:DB:D7:34:17:C6:77:CE:4A:99 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:a4::/48 Signature Algorithm: sha256WithRSAEncryption 73:82:09:06:0c:74:77:7b:cd:c7:ea:68:be:5d:ee:4b:1f:e0: fa:7a:a8:58:a1:ee:e6:cf:e5:49:51:8f:f4:78:ef:a3:98:d1: ea:52:d8:a8:b7:58:27:8b:c1:9a:39:43:87:4d:0c:47:fc:4b: a9:d1:3b:67:d6:90:90:85:a5:ef:f3:86:15:3c:49:55:8b:b6: 43:0d:4b:65:65:16:60:c5:b6:aa:3e:af:13:a5:97:97:f3:a9: 43:b9:12:75:65:f6:0a:63:29:4b:05:69:59:25:68:1b:c4:50: 43:cd:ae:b7:fe:00:26:77:11:02:28:d6:31:75:4d:c3:49:01: f2:27:3d:36:9b:ea:72:de:6e:fc:03:78:d0:ca:b0:e3:e9:32: 16:65:68:d5:ac:53:ac:e3:ca:2f:be:1b:8c:5c:9c:92:52:e7: a3:c5:8b:78:05:48:75:a8:b3:05:c7:d6:56:83:90:ea:7f:96: 11:f1:78:7a:22:26:9a:64:6e:fa:98:27:7b:7f:54:10:3c:a5: 87:ae:af:ec:94:96:24:1a:68:66:bd:c3:2c:38:91:88:e0:89: e5:96:b7:e6:7f:28:93:d7:02:e8:92:52:fb:ee:5a:a7:3a:e9: f4:f8:dd:9e:0c:17:86:83:c4:7d:b9:0e:9d:cf:5d:21:33:08: a3:34:82:85 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUevZkZkKRExnwJPOEL04WwA2gjgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM3WhcNMjcwNTE3MDkyMTM3 WjAzMTEwLwYDVQQDEyhDMTI0NEZGMUQ0M0NGREQzMUEyMjQ3REJENzM0MTdDNjc3 Q0U0QTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1/wGhIjJlcM zrhIAWR4vf5OC8aq9181DkqJ3kx6G74ob1sUEruofm0Wr9bE+WY7Z18YT6PpVaUZ HU5xI2V7M/oZBz0b7MQgnjmrMNbsIqMQP8lXI4c6Aysw1Lz0/vJZPORHkrX/ar06 8dREnGf/PZkDRgSzWssfuCp5cF+b3byrTnQupiJ3XseZWV1JU/CuWlTZrFEWRQc6 PiLRI+stOy/sECs7NkrsQ7AcDDJFbSvu2L1p4f/+cicPCtwO+M/s/KV4m3tiP1MT tF3dwZzsy8gar62Q0JL2er5j0nNwbt6kRw7WsQ4KvXDgXF/8+TefJw7zblD4gyXM eoELuz89XQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFMEkT/HUPP3TGiJH29c0F8Z3 zkqZMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzMDMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2gCkMA0GCSqGSIb3DQEBCwUAA4IBAQBzggkGDHR3e83H6mi+Xe5LH+D6 eqhYoe7mz+VJUY/0eO+jmNHqUtiot1gni8GaOUOHTQxH/Eup0Ttn1pCQhaXv84YV PElVi7ZDDUtlZRZgxbaqPq8TpZeX86lDuRJ1ZfYKYylLBWlZJWgbxFBDza63/gAm dxECKNYxdU3DSQHyJz02m+py3m78A3jQyrDj6TIWZWjVrFOs48ovvhuMXJySUuej xYt4BUh1qLMFx9ZWg5Dqf5YR8Xh6IiaaZG76mCd7f1QQPKWHrq/slJYkGmhmvcMs OJGI4InllrfmfyiT1wLoklL77lqnOun0+N2eDBeGg8R9uQ6dz10hMwijNIKF -----END CERTIFICATE-----Generated at Sat Jun 6 08:15:45 2026 by rpki-client