$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa File: 323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa (raw, json) Hash identifier: d3bdJ3lzfy/08Agqblw0Sf9esbhdM5FzrIQ2TxBlffg= Subject key identifier: D5:95:09:B6:EF:B7:8B:CD:B1:B5:4F:7D:00:CB:A6:8C:FA:9C:96:13 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 68C54928F96C16A0ED017C3D20CAE196DA45C96E Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa Signing time: Mon 18 May 2026 09:21:34 +0000 ROA not before: Mon 18 May 2026 09:16:34 +0000 ROA not after: Mon 17 May 2027 09:21:34 +0000 asID: 140974 IP address blocks: 2602:feda:ac0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c5:49:28:f9:6c:16:a0:ed:01:7c:3d:20:ca:e1:96:da:45:c9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:34 2026 GMT Not After : May 17 09:21:34 2027 GMT Subject: CN=D59509B6EFB78BCDB1B54F7D00CBA68CFA9C9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:66:bb:9c:30:67:9c:07:b0:40:74:da:e9: 62:c4:c8:d1:87:32:c7:3b:75:da:72:3b:d0:69:62: ab:65:d7:8a:89:bc:44:b1:21:03:e2:f6:82:9d:77: 59:6e:18:b2:f8:05:5e:25:46:d7:49:3a:ca:bc:4e: d6:04:4c:2b:38:63:4b:7c:f2:11:15:4c:19:ac:36: 1c:de:5a:07:df:76:5a:bf:17:af:0b:7b:c8:95:e9: 84:d2:00:ff:58:3e:b3:46:b8:96:e2:6f:87:5a:39: c6:0f:b7:1d:0b:0e:16:46:0e:b9:46:d6:7b:72:3f: 27:d6:56:b5:7d:63:f3:15:eb:d8:68:08:59:5a:69: a9:eb:b6:fe:8e:fc:56:83:27:56:30:12:48:bb:9f: b3:90:b8:95:67:42:fb:e6:ff:6e:49:8d:a9:1d:b1: 31:a2:20:bb:ab:15:a7:c9:5d:26:02:68:72:96:ea: 7c:52:63:94:5c:8b:f8:7f:c0:f0:35:a7:a3:00:aa: 3d:49:66:fe:01:e5:81:18:7d:56:5b:2d:c4:ed:a3: 69:e5:61:cf:14:dd:b9:20:44:78:21:18:fa:f9:71: 11:62:e7:b4:a7:eb:70:cf:a0:e1:5d:b1:a2:08:4f: 5b:6d:f2:a2:cc:11:04:51:24:ed:20:2d:f2:96:8f: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:09:B6:EF:B7:8B:CD:B1:B5:4F:7D:00:CB:A6:8C:FA:9C:96:13 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ac0::/44 Signature Algorithm: sha256WithRSAEncryption 9f:5c:d6:c5:6f:4b:8d:52:c0:19:f4:74:cb:2b:62:39:fa:ce: 6e:4d:98:0b:6f:e1:a4:32:9a:31:57:e8:91:1d:a4:e3:49:d4: 93:8c:ae:60:ce:95:b2:d1:6c:70:08:15:73:02:18:53:49:9a: 37:14:a8:2b:1d:8d:74:95:0f:72:91:44:5c:80:09:45:b3:f0: a5:2f:7f:c6:1e:a6:b8:3e:08:45:a0:da:0e:de:5b:bd:09:8b: 0c:98:6d:09:7a:7a:2e:12:c0:fa:f5:ee:e5:db:85:de:84:15: 2e:d8:2b:02:51:6b:ef:b7:6d:e2:56:53:e2:6d:b2:15:09:40: 83:55:54:5f:7f:0f:73:9f:42:c8:00:26:4e:d1:9e:12:95:4d: 9c:74:6b:a5:51:c4:d4:22:95:a1:fa:04:26:ba:e5:88:0f:42: ae:77:0d:67:7a:ad:18:19:20:24:e3:8d:2c:67:ae:a4:ee:43: c6:e1:e8:f8:43:e1:1e:b6:33:cd:89:f0:fe:a6:4b:5d:01:a3: 44:87:84:3c:c6:a7:9e:47:f6:bb:45:a5:62:02:80:25:6d:d1: cc:14:25:c6:35:56:be:15:6b:e3:d5:90:63:73:1c:92:df:06: 7e:5f:cd:52:a7:9d:c1:e8:08:17:e3:91:c9:8f:a2:c0:c7:12: ca:ae:61:4c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUaMVJKPlsFqDtAXw9IMrhltpFyW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM0WhcNMjcwNTE3MDkyMTM0 WjAzMTEwLwYDVQQDEyhENTk1MDlCNkVGQjc4QkNEQjFCNTRGN0QwMENCQTY4Q0ZB OUM5NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOZmu5wwZ5wH sEB02ulixMjRhzLHO3XacjvQaWKrZdeKibxEsSED4vaCnXdZbhiy+AVeJUbXSTrK vE7WBEwrOGNLfPIRFUwZrDYc3loH33ZavxevC3vIlemE0gD/WD6zRriW4m+HWjnG D7cdCw4WRg65RtZ7cj8n1la1fWPzFevYaAhZWmmp67b+jvxWgydWMBJIu5+zkLiV Z0L75v9uSY2pHbExoiC7qxWnyV0mAmhylup8UmOUXIv4f8DwNaejAKo9SWb+AeWB GH1WWy3E7aNp5WHPFN25IER4IRj6+XERYue0p+twz6DhXbGiCE9bbfKizBEEUSTt IC3ylo9O0QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNWVCbbvt4vNsbVPfQDLpoz6 nJYTMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMwMzkzNzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2grAMA0GCSqGSIb3DQEBCwUAA4IBAQCfXNbFb0uNUsAZ9HTLK2I5 +s5uTZgLb+GkMpoxV+iRHaTjSdSTjK5gzpWy0WxwCBVzAhhTSZo3FKgrHY10lQ9y kURcgAlFs/ClL3/GHqa4PghFoNoO3lu9CYsMmG0JenouEsD69e7l24XehBUu2CsC UWvvt23iVlPibbIVCUCDVVRffw9zn0LIACZO0Z4SlU2cdGulUcTUIpWh+gQmuuWI D0Kudw1neq0YGSAk440sZ66k7kPG4ej4Q+EetjPNifD+pktdAaNEh4Q8xqeeR/a7 RaViAoAlbdHMFCXGNVa+FWvj1ZBjcxyS3wZ+X81Sp53B6AgX45HJj6LAxxLKrmFM -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:14 2026 by rpki-client