$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa File: 323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa (raw, json) Hash identifier: ELUXyGGiO2Ok4ng4awheoEPQFenN/1Q2VWc4U8vlsT0= Subject key identifier: 4A:55:91:79:1C:06:85:A9:65:F1:75:54:A1:83:5B:DC:C5:C2:6F:5F Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 64EB4041947B168AF5C50FD36A9A61EA519C0792 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa Signing time: Mon 18 May 2026 09:21:41 +0000 ROA not before: Mon 18 May 2026 09:16:41 +0000 ROA not after: Mon 17 May 2027 09:21:41 +0000 asID: 38008 IP address blocks: 2602:feda:ae5::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:eb:40:41:94:7b:16:8a:f5:c5:0f:d3:6a:9a:61:ea:51:9c:07:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:41 2026 GMT Not After : May 17 09:21:41 2027 GMT Subject: CN=4A5591791C0685A965F17554A1835BDCC5C26F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:87:74:90:9e:ff:75:e3:4d:92:ff:b6:75: ff:17:68:3c:67:c4:7c:b0:43:f2:ee:ad:c9:8f:af: f7:67:7e:5c:b3:aa:b5:cf:49:24:a3:35:a6:dc:8c: 9f:58:98:fa:76:e9:97:eb:e1:0c:71:73:0d:4c:91: 38:71:3b:59:7c:ad:aa:c1:c0:59:d5:ba:27:40:bb: b2:d3:b0:b7:29:ab:a1:79:88:0a:40:d5:f8:9f:10: d5:80:a3:0e:f5:5a:1d:fa:69:7d:a8:bf:19:08:28: 1e:35:bc:37:de:8c:ba:1e:99:57:a2:3e:8e:02:77: 50:50:64:79:16:9b:19:6e:43:07:a1:b0:50:7e:c0: 15:13:aa:58:53:15:64:c2:91:db:83:c7:08:08:3e: df:39:42:32:91:31:e0:59:a7:e6:2d:a3:50:db:1f: 03:12:8f:73:01:2e:14:5b:ee:9c:c7:4b:66:2c:53: ca:3e:4f:9d:f7:cf:29:88:c1:70:2d:57:37:96:5a: 31:79:48:3c:76:8f:57:bf:2a:14:0e:21:c9:c9:e6: 1f:07:61:d9:43:31:ef:65:76:5b:07:55:f2:f6:6e: db:61:db:05:d6:be:97:9b:21:f3:56:43:27:76:f7: 28:d7:b7:18:7e:c2:8c:90:09:cb:d7:1c:b0:9d:7d: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:55:91:79:1C:06:85:A9:65:F1:75:54:A1:83:5B:DC:C5:C2:6F:5F X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae5::/48 Signature Algorithm: sha256WithRSAEncryption 93:d9:85:a8:fb:d0:a4:07:0c:90:90:96:f2:60:f7:b0:d8:e9: 0c:1c:1e:05:92:49:ba:fe:02:67:eb:a4:2f:9c:2b:91:70:47: c3:7f:e9:1f:07:c8:f0:f6:a7:35:06:47:47:9b:21:a6:1c:fc: 86:c1:34:37:ad:cb:98:f9:f5:b3:88:08:e1:b1:6f:2e:ee:7f: 60:7f:fe:47:a7:5d:af:cd:be:0f:ea:db:1b:fa:ca:4d:8b:1e: 8a:ad:7d:8e:e5:e2:4f:e8:e1:be:2e:d5:47:70:2a:f7:ff:4d: 97:69:a9:6c:40:b2:6c:99:d7:93:ac:4f:b1:4c:7f:29:a9:d0: e3:ef:36:62:6a:0b:14:4a:9f:6c:3d:6f:fa:5b:3c:10:af:0e: 02:1a:b0:4c:da:e1:8d:1b:2f:b6:1c:c2:36:58:87:7d:3e:52: 9a:82:0d:b6:fd:fb:00:75:16:93:b8:f2:35:1c:1f:80:b6:e9: b0:57:cc:de:8b:d1:ac:94:45:6a:20:4c:90:bf:3e:03:87:d5: 4e:23:65:13:23:6f:c1:75:a7:2e:57:25:94:44:05:c6:0b:87: 55:7a:e3:2c:32:ef:0f:03:16:f7:8a:50:21:c7:f6:8d:34:eb: c7:18:68:fe:da:03:75:fb:3d:50:0b:9a:ac:d9:41:09:78:95: 43:de:37:32 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUZOtAQZR7For1xQ/Tapph6lGcB5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQxWhcNMjcwNTE3MDkyMTQx WjAzMTEwLwYDVQQDEyg0QTU1OTE3OTFDMDY4NUE5NjVGMTc1NTRBMTgzNUJEQ0M1 QzI2RjVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqiHdJCe/3Xj TZL/tnX/F2g8Z8R8sEPy7q3Jj6/3Z35cs6q1z0kkozWm3IyfWJj6dumX6+EMcXMN TJE4cTtZfK2qwcBZ1bonQLuy07C3KauheYgKQNX4nxDVgKMO9Vod+ml9qL8ZCCge Nbw33oy6HplXoj6OAndQUGR5FpsZbkMHobBQfsAVE6pYUxVkwpHbg8cICD7fOUIy kTHgWafmLaNQ2x8DEo9zAS4UW+6cx0tmLFPKPk+d988piMFwLVc3lloxeUg8do9X vyoUDiHJyeYfB2HZQzHvZXZbB1Xy9m7bYdsF1r6XmyHzVkMndvco17cYfsKMkAnL 1xywnX32mwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFEpVkXkcBoWpZfF1VKGDW9zF wm9fMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTY1MzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzAzMDM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2grlMA0GCSqGSIb3DQEBCwUAA4IBAQCT2YWo+9CkBwyQkJbyYPew2OkM HB4Fkkm6/gJn66QvnCuRcEfDf+kfB8jw9qc1BkdHmyGmHPyGwTQ3rcuY+fWziAjh sW8u7n9gf/5Hp12vzb4P6tsb+spNix6KrX2O5eJP6OG+LtVHcCr3/02XaalsQLJs mdeTrE+xTH8pqdDj7zZiagsUSp9sPW/6WzwQrw4CGrBM2uGNGy+2HMI2WId9PlKa gg22/fsAdRaTuPI1HB+AtumwV8zei9GslEVqIEyQvz4Dh9VOI2UTI2/BdacuVyWU RAXGC4dVeuMsMu8PAxb3ilAhx/aNNOvHGGj+2gN1+z1QC5qs2UEJeJVD3jcy -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:11 2026 by rpki-client