$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa File: 323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa (raw, json) Hash identifier: 1jhHE0KTLepMZskerw2vvM3K3vz/ZsAeRYVqFxRA9zc= Subject key identifier: 45:04:AA:F1:BC:27:A0:3E:8B:6E:39:AD:F0:F4:C6:90:96:A1:8F:84 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 44352B36A102B22D4EF9335AFE31D54D14A39D63 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa Signing time: Mon 18 May 2026 09:21:30 +0000 ROA not before: Mon 18 May 2026 09:16:30 +0000 ROA not after: Mon 17 May 2027 09:21:30 +0000 asID: 140913 IP address blocks: 2602:feda:ae6::/47 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:35:2b:36:a1:02:b2:2d:4e:f9:33:5a:fe:31:d5:4d:14:a3:9d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:30 2026 GMT Not After : May 17 09:21:30 2027 GMT Subject: CN=4504AAF1BC27A03E8B6E39ADF0F4C69096A18F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:0d:e7:6d:6b:31:ad:2d:4d:ca:95:7d:d2: c5:45:b3:cd:cb:5d:20:1a:bc:dc:0c:d1:b6:8c:e8: 20:5c:e2:46:4f:33:56:f2:f8:ac:11:f9:be:31:b5: 4a:48:65:80:a4:ff:75:e2:e7:5d:bb:2d:e2:d1:bb: cb:3a:56:b1:9e:b9:94:bc:4a:46:ce:00:99:d8:9e: f4:1d:31:d7:b8:b1:71:9a:40:98:c8:f6:a2:75:57: 19:36:bb:1e:f6:4b:1b:e6:a1:f6:9b:1e:ae:b3:4d: 76:4d:2e:1c:8c:ad:54:a2:a0:d8:8b:bf:44:92:5b: be:e3:2d:63:b4:7d:94:d9:76:52:0c:16:47:73:80: 58:cc:43:b1:00:aa:8c:0e:ff:fc:43:64:e3:5c:10: f8:45:97:cc:70:26:27:15:95:22:78:16:7e:85:51: 84:11:39:42:33:f8:00:21:a3:5b:49:bb:03:96:81: e0:e8:f9:d4:f9:57:02:f9:16:93:80:0e:b4:1c:d3: 26:5d:1e:99:a4:67:52:31:5a:ac:fb:ea:11:d7:11: b2:b8:59:a2:7a:7f:58:56:df:a5:3f:1e:c9:f0:1c: 7f:c0:3a:a3:27:98:9c:f6:a4:84:14:2a:4b:3a:20: 15:ce:75:90:f2:66:27:54:a3:cb:2e:32:f1:48:ee: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:AA:F1:BC:27:A0:3E:8B:6E:39:AD:F0:F4:C6:90:96:A1:8F:84 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae6::/47 Signature Algorithm: sha256WithRSAEncryption 3a:da:97:dd:8b:fb:e9:66:3c:bf:ee:74:8c:7e:fa:92:ac:60: ba:e2:b2:4c:7d:59:ff:f5:9d:9a:b9:c0:e9:e4:64:62:66:84: 0d:05:57:c2:89:2a:2f:00:53:68:05:9d:5d:09:0d:dc:2e:ef: 08:cb:bb:1b:d4:85:30:94:fb:7c:5f:f8:eb:38:d3:93:c1:b2: 6f:2c:71:1e:84:f7:1a:a8:7c:0d:82:c4:80:07:33:ab:f6:e1: 5a:fe:74:c6:40:00:e4:62:57:46:b9:5f:73:72:56:06:21:d9: 36:f9:d5:45:9b:ff:33:ce:39:9a:f3:2b:05:c2:dd:05:1c:fe: 42:cb:68:27:3f:e5:06:c0:c7:ad:34:b1:68:0d:e0:2c:76:e8: 32:66:e5:d3:b9:b2:62:21:df:d5:78:79:07:9b:56:e8:11:e8: 62:83:eb:b2:28:2e:df:15:a5:c2:95:da:de:98:af:50:d5:f9: 63:da:36:95:c0:55:86:c7:63:e1:63:4e:48:b7:1a:d0:21:03: f6:00:2c:e5:ac:4d:1f:10:1a:d8:66:1a:9a:01:38:be:99:93: 6f:94:4c:67:ac:33:44:64:b9:f9:83:78:61:cc:67:63:33:68: 39:ae:64:26:17:47:5b:12:10:02:d0:df:cf:64:d8:81:8c:6c: 6a:d8:2a:8b -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIURDUrNqECsi1O+TNa/jHVTRSjnWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMwWhcNMjcwNTE3MDkyMTMw WjAzMTEwLwYDVQQDEyg0NTA0QUFGMUJDMjdBMDNFOEI2RTM5QURGMEY0QzY5MDk2 QTE4Rjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+YN521rMa0t TcqVfdLFRbPNy10gGrzcDNG2jOggXOJGTzNW8visEfm+MbVKSGWApP914udduy3i 0bvLOlaxnrmUvEpGzgCZ2J70HTHXuLFxmkCYyPaidVcZNrse9ksb5qH2mx6us012 TS4cjK1UoqDYi79Eklu+4y1jtH2U2XZSDBZHc4BYzEOxAKqMDv/8Q2TjXBD4RZfM cCYnFZUieBZ+hVGEETlCM/gAIaNbSbsDloHg6PnU+VcC+RaTgA60HNMmXR6ZpGdS MVqs++oR1xGyuFmien9YVt+lPx7J8Bx/wDqjJ5ic9qSEFCpLOiAVznWQ8mYnVKPL LjLxSO6/6wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEUEqvG8J6A+i245rfD0xpCW oY+EMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NTM2M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzNDMwMzkzMTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcBJgL+2grmMA0GCSqGSIb3DQEBCwUAA4IBAQA62pfdi/vpZjy/7nSMfvqS rGC64rJMfVn/9Z2aucDp5GRiZoQNBVfCiSovAFNoBZ1dCQ3cLu8Iy7sb1IUwlPt8 X/jrONOTwbJvLHEehPcaqHwNgsSABzOr9uFa/nTGQADkYldGuV9zclYGIdk2+dVF m/8zzjma8ysFwt0FHP5Cy2gnP+UGwMetNLFoDeAsdugyZuXTubJiId/VeHkHm1bo Eehig+uyKC7fFaXCldremK9Q1flj2jaVwFWGx2PhY05ItxrQIQP2ACzlrE0fEBrY ZhqaATi+mZNvlExnrDNEZLn5g3hhzGdjM2g5rmQmF0dbEhAC0N/PZNiBjGxq2CqL -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:57 2026 by rpki-client