$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa File: 323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa (raw, json) Hash identifier: jo03COCTULGudelY8jquz6vXmIHHipVPYiFwlbZ6t6s= Subject key identifier: E9:6A:3C:1F:3A:58:43:03:B6:14:58:58:16:BA:19:84:39:F2:ED:21 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2A89C0EA3B0D1654A74E3AE8D11C282DABE31926 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa Signing time: Mon 18 May 2026 09:21:35 +0000 ROA not before: Mon 18 May 2026 09:16:35 +0000 ROA not after: Mon 17 May 2027 09:21:35 +0000 asID: 142634 IP address blocks: 2602:feda:ab0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 11:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:89:c0:ea:3b:0d:16:54:a7:4e:3a:e8:d1:1c:28:2d:ab:e3:19:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:35 2026 GMT Not After : May 17 09:21:35 2027 GMT Subject: CN=E96A3C1F3A584303B614585816BA198439F2ED21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:5f:e9:bc:92:0a:67:29:58:af:99:68:bd: 46:8c:ae:4e:81:4a:46:e0:8a:9d:86:46:0f:5b:8a: 16:83:23:46:63:ef:0a:e7:18:f1:f2:59:65:ac:9e: 37:2b:98:8a:38:07:20:b2:f7:81:52:ad:fe:83:73: 83:5d:32:91:57:8a:dd:18:56:4d:d9:5c:9b:90:c0: 2b:c0:56:4e:51:db:9e:c6:a6:6c:17:6a:79:f1:70: cd:41:26:0b:ac:31:11:52:35:4e:1b:63:b5:0c:8d: e7:02:66:f8:c5:63:47:a5:cf:8f:df:ef:eb:dd:2f: 5b:bd:a2:92:d4:e5:d7:cc:31:0c:53:f4:ea:57:47: 47:92:a0:0a:f0:89:fe:55:00:96:fb:c5:4c:e4:15: 29:93:69:27:6b:62:00:75:c9:9d:df:94:48:10:e0: d6:c7:be:f6:70:93:e9:67:76:fa:96:3a:92:b2:13: 55:44:09:90:e4:9d:4a:e6:e7:15:bf:12:84:5b:fa: 39:ef:cf:c7:07:db:f7:80:6e:5f:b6:b3:04:5e:d7: 12:63:1a:2e:56:32:0e:42:5d:68:84:f5:69:81:8f: 28:02:dd:0b:1a:2f:64:62:7a:da:07:70:29:00:70: 09:d6:f8:5b:e4:1d:9b:0c:5d:ca:87:06:4b:06:63: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6A:3C:1F:3A:58:43:03:B6:14:58:58:16:BA:19:84:39:F2:ED:21 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ab0::/44 Signature Algorithm: sha256WithRSAEncryption 75:a0:09:d2:85:f9:ed:2d:80:00:60:a1:32:06:c4:80:ac:7f: 55:f9:ed:a1:bd:63:33:80:ee:e3:53:19:e2:27:2d:90:d0:11: eb:08:d6:1f:32:8f:5e:c1:9c:54:ba:fe:e8:92:85:0f:99:c0: 4d:d6:31:0d:80:3d:96:60:f2:11:81:d8:a2:a7:79:ac:41:c3: 3d:75:64:5e:d5:6e:cf:44:c0:2c:40:c3:c6:41:35:18:e0:bf: df:6e:ea:cc:25:56:d9:7a:a8:7e:25:33:7d:d5:ca:f7:b4:51: 09:87:72:bb:ad:38:99:8d:c4:cd:65:fc:a7:e7:2b:28:3b:17: 28:5e:84:07:f7:c4:94:8d:31:ee:e3:49:fa:d4:76:24:98:c7: 24:bc:a5:55:10:c9:e8:8d:17:09:6d:a6:1f:94:52:87:03:2a: 53:ca:26:e6:9b:3f:8a:56:13:c3:11:29:d5:56:c1:c6:16:d8: b8:35:62:a7:c4:7e:f3:18:05:4d:a7:fd:5b:8c:95:5c:78:7d: c5:4f:fe:c1:39:16:fb:40:0d:1e:14:bc:14:7a:ec:31:61:1e: a0:0b:b6:cb:0e:aa:18:bc:7e:1a:fa:a4:d4:07:de:fa:9a:db: 1a:c5:8a:f4:f7:e3:7d:03:79:ac:5a:31:c1:98:04:13:5e:ff: 77:07:af:44 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUKonA6jsNFlSnTjro0RwoLavjGSYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM1WhcNMjcwNTE3MDkyMTM1 WjAzMTEwLwYDVQQDEyhFOTZBM0MxRjNBNTg0MzAzQjYxNDU4NTgxNkJBMTk4NDM5 RjJFRDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJFf6bySCmcp WK+ZaL1GjK5OgUpG4IqdhkYPW4oWgyNGY+8K5xjx8lllrJ43K5iKOAcgsveBUq3+ g3ODXTKRV4rdGFZN2VybkMArwFZOUduexqZsF2p58XDNQSYLrDERUjVOG2O1DI3n Amb4xWNHpc+P3+/r3S9bvaKS1OXXzDEMU/TqV0dHkqAK8In+VQCW+8VM5BUpk2kn a2IAdcmd35RIEODWx772cJPpZ3b6ljqSshNVRAmQ5J1K5ucVvxKEW/o578/HB9v3 gG5ftrMEXtcSYxouVjIOQl1ohPVpgY8oAt0LGi9kYnraB3ApAHAJ1vhb5B2bDF3K hwZLBmPsLwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOlqPB86WEMDthRYWBa6GYQ5 8u0hMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzYzMzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gqwMA0GCSqGSIb3DQEBCwUAA4IBAQB1oAnShfntLYAAYKEyBsSA rH9V+e2hvWMzgO7jUxniJy2Q0BHrCNYfMo9ewZxUuv7okoUPmcBN1jENgD2WYPIR gdiip3msQcM9dWRe1W7PRMAsQMPGQTUY4L/fburMJVbZeqh+JTN91cr3tFEJh3K7 rTiZjcTNZfyn5ysoOxcoXoQH98SUjTHu40n61HYkmMckvKVVEMnojRcJbaYflFKH AypTyibmmz+KVhPDESnVVsHGFti4NWKnxH7zGAVNp/1bjJVceH3FT/7BORb7QA0e FLwUeuwxYR6gC7bLDqoYvH4a+qTUB976mtsaxYr09+N9A3msWjHBmAQTXv93B69E -----END CERTIFICATE-----Generated at Tue Jun 2 22:12:41 2026 by rpki-client