$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa File: 323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa (raw, json) Hash identifier: zPu3Z7bcxyI2fCej0yLIy3YOvFrdAcffEzsuoOL40/4= Subject key identifier: CD:2E:88:94:3C:2F:DF:51:E0:B6:8E:7D:DF:96:21:02:9E:22:6B:96 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 667F096C7C61BF32A38C81E823759CFF476ABD85 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa Signing time: Mon 18 May 2026 09:21:31 +0000 ROA not before: Mon 18 May 2026 09:16:31 +0000 ROA not after: Mon 17 May 2027 09:21:31 +0000 asID: 140727 IP address blocks: 2602:feda:afa::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7f:09:6c:7c:61:bf:32:a3:8c:81:e8:23:75:9c:ff:47:6a:bd:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:31 2026 GMT Not After : May 17 09:21:31 2027 GMT Subject: CN=CD2E88943C2FDF51E0B68E7DDF9621029E226B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:80:56:22:68:54:06:91:40:71:a9:14:7e: 9f:37:b4:96:f1:34:53:5e:ba:b9:46:39:31:57:e0: ae:da:23:09:d3:a1:c6:db:4c:c1:e5:cd:3f:7f:c7: 79:36:f0:7b:fb:9b:72:6a:cd:0f:58:d7:f4:89:da: dc:72:f3:7d:b3:01:2c:8d:8b:f0:00:de:5c:61:52: b9:2c:70:cc:2a:dc:d4:3d:01:b6:4b:31:6d:19:49: c9:b1:ec:39:bb:43:d7:97:51:88:3c:6a:3c:72:90: bb:61:05:03:1b:9b:96:e7:02:86:63:9e:c9:88:4a: fd:96:11:8a:db:d0:a5:b9:e3:32:24:a8:3b:ab:a9: 21:c0:1a:41:d2:ba:69:d1:c7:1d:77:e4:f5:4d:30: 67:a7:7f:2c:b6:db:b1:69:3c:80:d6:1e:0c:64:a1: 95:4d:8a:bf:09:29:67:36:a3:33:e1:32:de:79:7a: 20:57:f7:85:b6:f0:b3:b5:8b:01:06:ec:41:14:d2: dd:f0:d3:50:9c:bf:e3:07:05:fe:03:79:35:5c:c3: 71:f5:85:d6:e8:7a:b6:f6:f7:87:2b:a6:a2:5d:5f: 0f:08:9d:c2:b0:0d:63:1c:13:72:36:eb:f4:f2:91: 42:74:1e:c8:35:46:86:30:ff:51:e8:69:b9:27:ca: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2E:88:94:3C:2F:DF:51:E0:B6:8E:7D:DF:96:21:02:9E:22:6B:96 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:afa::/48 Signature Algorithm: sha256WithRSAEncryption 62:18:2a:c7:ed:b7:0b:7e:01:90:be:43:a7:dc:2a:54:9c:3d: fb:15:71:49:bf:ff:da:ff:1f:91:14:84:0d:37:07:24:62:f6: 1f:5c:a8:d2:a8:7a:88:58:81:ac:8f:a8:68:4a:ca:b9:46:58: b7:a8:d7:dc:08:b3:3f:78:69:92:1f:0d:52:92:9d:a1:70:93: 93:5a:7d:87:d1:8e:f9:2e:91:f1:64:c2:93:59:c9:4b:9f:e4: 19:c9:d8:5c:dd:93:9f:97:d4:34:67:bf:9e:e8:ce:81:cb:00: f6:8a:ea:0b:4e:f4:87:8a:47:37:1c:2c:e4:dd:f1:cf:ce:39: 79:5b:7e:16:80:12:f3:a3:e5:ce:11:86:7f:69:d2:b7:13:45: 83:2f:72:70:44:46:e6:2a:6e:8b:31:4a:50:20:fe:3f:96:e3: fc:1f:54:7a:00:94:75:b5:67:1c:40:31:f0:bf:25:83:03:60: 50:c6:d5:c4:e0:ee:38:c0:fd:65:28:5f:31:7c:c1:27:ab:8b: bd:ba:da:23:ef:cf:2e:a8:18:e7:af:df:a8:86:5e:04:20:8f: 9b:70:b1:93:93:d5:e4:70:01:ed:9e:0e:74:1f:0d:11:2b:97: 05:46:90:0a:60:b3:e0:54:21:7f:40:d4:f8:48:76:dd:a1:23: bd:4a:79:d0 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUZn8JbHxhvzKjjIHoI3Wc/0dqvYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMxWhcNMjcwNTE3MDkyMTMx WjAzMTEwLwYDVQQDEyhDRDJFODg5NDNDMkZERjUxRTBCNjhFN0RERjk2MjEwMjlF MjI2Qjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoGAViJoVAaR QHGpFH6fN7SW8TRTXrq5RjkxV+Cu2iMJ06HG20zB5c0/f8d5NvB7+5tyas0PWNf0 idrccvN9swEsjYvwAN5cYVK5LHDMKtzUPQG2SzFtGUnJsew5u0PXl1GIPGo8cpC7 YQUDG5uW5wKGY57JiEr9lhGK29ClueMyJKg7q6khwBpB0rpp0ccdd+T1TTBnp38s ttuxaTyA1h4MZKGVTYq/CSlnNqMz4TLeeXogV/eFtvCztYsBBuxBFNLd8NNQnL/j BwX+A3k1XMNx9YXW6Hq29veHK6aiXV8PCJ3CsA1jHBNyNuv08pFCdB7INUaGMP9R 6Gm5J8rtvQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFM0uiJQ8L99R4LaOfd+WIQKe ImuWMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NjYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzczMjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gr6MA0GCSqGSIb3DQEBCwUAA4IBAQBiGCrH7bcLfgGQvkOn3CpU nD37FXFJv//a/x+RFIQNNwckYvYfXKjSqHqIWIGsj6hoSsq5Rli3qNfcCLM/eGmS Hw1Skp2hcJOTWn2H0Y75LpHxZMKTWclLn+QZydhc3ZOfl9Q0Z7+e6M6BywD2iuoL TvSHikc3HCzk3fHPzjl5W34WgBLzo+XOEYZ/adK3E0WDL3JwREbmKm6LMUpQIP4/ luP8H1R6AJR1tWccQDHwvyWDA2BQxtXE4O44wP1lKF8xfMEnq4u9utoj788uqBjn r9+ohl4EII+bcLGTk9XkcAHtng50Hw0RK5cFRpAKYLPgVCF/QNT4SHbdoSO9SnnQ -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:15 2026 by rpki-client