$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa File: 323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa (raw, json) Hash identifier: bjmIDKRvTsSsNoyBfL7v8QbnPrkaj6evwZRKM3rhlb4= Subject key identifier: AB:47:F1:4C:98:1C:F7:90:53:E4:35:85:98:46:18:0B:DF:6C:3C:DB Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 76ACB5EE366BA3C72AE1C4585FFBA42A5B7B5A46 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa Signing time: Mon 18 May 2026 09:21:35 +0000 ROA not before: Mon 18 May 2026 09:16:35 +0000 ROA not after: Mon 17 May 2027 09:21:35 +0000 asID: 41255 IP address blocks: 2602:feda:ae4::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ac:b5:ee:36:6b:a3:c7:2a:e1:c4:58:5f:fb:a4:2a:5b:7b:5a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:35 2026 GMT Not After : May 17 09:21:35 2027 GMT Subject: CN=AB47F14C981CF79053E435859846180BDF6C3CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:d0:17:b6:bb:ba:71:cd:91:5d:73:dc:92: c8:23:a5:95:bd:7f:b3:91:d3:b8:b6:5f:e7:4f:a5: 67:8b:d6:a9:0e:01:14:9a:60:ec:1c:8b:d9:f2:6a: df:47:83:77:38:85:7e:8d:d7:24:cc:87:b0:4c:9c: ec:7b:38:13:74:e5:8e:fe:8e:4d:51:a9:01:7c:b2: fa:dc:68:02:52:92:0b:d6:77:4f:9d:b9:1d:04:3b: 02:1a:57:61:ad:c3:55:53:e6:95:c5:7e:77:2a:bd: f7:11:46:d5:60:3e:f5:2d:fe:68:ec:7b:ad:a4:67: 60:e5:72:08:09:c0:12:f4:fb:10:c4:14:23:bc:a4: b4:7d:55:8d:03:87:76:a4:63:b1:50:db:37:9c:33: 3f:24:ad:2b:7d:8d:bd:a6:43:15:c7:a3:f0:d0:53: 52:82:45:55:0e:67:0d:5b:2e:cf:08:ff:a6:a6:a8: 98:41:d7:c5:e8:e8:9b:23:5e:be:15:b4:0e:2b:97: 3d:2c:00:04:b6:07:25:50:d2:44:4d:55:20:93:3f: 4a:7c:c4:bc:4f:69:8d:40:58:4b:16:7c:a8:39:51: d4:76:15:86:bc:c7:d4:28:de:78:f2:b1:2d:ce:b1: 3d:35:3c:e4:9b:1a:36:95:c8:d3:6f:21:86:b7:4d: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:47:F1:4C:98:1C:F7:90:53:E4:35:85:98:46:18:0B:DF:6C:3C:DB X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae4::/48 Signature Algorithm: sha256WithRSAEncryption 99:e3:84:cd:93:d8:0d:11:99:87:bb:89:8e:f2:5b:68:77:a9: dd:2d:57:89:1f:04:8a:fe:09:83:a9:6c:09:68:5a:c0:98:ae: c5:39:b3:14:10:fb:3a:61:da:96:7a:1f:9f:95:5a:6d:e0:28: bd:b0:e1:b6:5d:25:eb:5d:f3:a7:a3:a4:5b:07:35:4b:61:e5: 01:ec:5e:1b:59:3c:a2:5c:4d:d5:bb:e8:4b:fd:11:22:25:26: f7:7b:18:b6:e4:53:f9:39:aa:90:b8:02:06:c9:59:11:d7:51: 9b:cc:a4:93:23:ef:91:b5:e5:06:83:c8:36:c1:1b:84:67:62: d7:96:4b:63:7a:40:dd:76:77:7d:69:7a:15:3a:6b:f5:cc:d7: 77:16:d7:e8:34:1d:54:36:d6:fa:c0:74:c0:53:81:32:05:69: c5:c3:5b:3b:5b:72:89:08:ff:be:56:0a:b7:7b:75:d5:f9:ad: 24:2b:91:1a:7d:ef:a0:0d:d3:09:77:4f:af:07:bb:96:90:a3: bb:d9:40:28:b5:90:04:b7:dd:1e:07:b8:6d:f5:d4:00:93:d1: 18:b1:0c:6e:f7:e2:31:92:bd:46:69:3e:04:8c:a8:d3:af:dd: 51:27:8b:ac:82:da:f0:24:f1:67:38:44:16:c8:22:e7:c8:6f: e3:ee:af:64 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUdqy17jZro8cq4cRYX/ukKlt7WkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM1WhcNMjcwNTE3MDkyMTM1 WjAzMTEwLwYDVQQDEyhBQjQ3RjE0Qzk4MUNGNzkwNTNFNDM1ODU5ODQ2MTgwQkRG NkMzQ0RCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlHQF7a7unHN kV1z3JLII6WVvX+zkdO4tl/nT6Vni9apDgEUmmDsHIvZ8mrfR4N3OIV+jdckzIew TJzsezgTdOWO/o5NUakBfLL63GgCUpIL1ndPnbkdBDsCGldhrcNVU+aVxX53Kr33 EUbVYD71Lf5o7HutpGdg5XIICcAS9PsQxBQjvKS0fVWNA4d2pGOxUNs3nDM/JK0r fY29pkMVx6Pw0FNSgkVVDmcNWy7PCP+mpqiYQdfF6OibI16+FbQOK5c9LAAEtgcl UNJETVUgkz9KfMS8T2mNQFhLFnyoOVHUdhWGvMfUKN548rEtzrE9NTzkmxo2lcjT byGGt02joQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFKtH8UyYHPeQU+Q1hZhGGAvf bDzbMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTY1MzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMxMzIzNTM1LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2grkMA0GCSqGSIb3DQEBCwUAA4IBAQCZ44TNk9gNEZmHu4mO8ltod6nd LVeJHwSK/gmDqWwJaFrAmK7FObMUEPs6YdqWeh+flVpt4Ci9sOG2XSXrXfOno6Rb BzVLYeUB7F4bWTyiXE3Vu+hL/REiJSb3exi25FP5OaqQuAIGyVkR11GbzKSTI++R teUGg8g2wRuEZ2LXlktjekDddnd9aXoVOmv1zNd3FtfoNB1UNtb6wHTAU4EyBWnF w1s7W3KJCP++Vgq3e3XV+a0kK5Eafe+gDdMJd0+vB7uWkKO72UAotZAEt90eB7ht 9dQAk9EYsQxu9+Ixkr1GaT4EjKjTr91RJ4usgtrwJPFnOEQWyCLnyG/j7q9k -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:10 2026 by rpki-client