$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa File: 323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa (raw, json) Hash identifier: 4nTQRtVUEmNLv6wEyr2jjDAZVMNghnM/NyQ4ERb/nAc= Subject key identifier: 6C:B5:3E:CA:82:D0:ED:32:08:70:D3:30:7F:FC:5D:27:12:64:E7:28 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 40FD68DDCF542EAF1D87C87166B9E5E94855EBAA Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa Signing time: Mon 18 May 2026 09:21:30 +0000 ROA not before: Mon 18 May 2026 09:16:30 +0000 ROA not after: Mon 17 May 2027 09:21:30 +0000 asID: 142130 IP address blocks: 2602:feda:b42::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fd:68:dd:cf:54:2e:af:1d:87:c8:71:66:b9:e5:e9:48:55:eb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:30 2026 GMT Not After : May 17 09:21:30 2027 GMT Subject: CN=6CB53ECA82D0ED320870D3307FFC5D271264E728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:92:e7:8f:95:09:dc:f5:72:51:3f:f2:6b: 07:8c:fd:d4:79:f5:45:73:f6:a5:28:97:78:5f:f7: 73:f3:ad:07:7a:e2:32:cd:41:14:f6:a1:c4:72:5c: 25:bf:ac:36:c2:6e:29:b2:45:11:de:db:bb:84:93: dd:eb:8a:61:8e:7b:66:00:23:da:d2:cc:62:29:15: fb:ac:f9:87:1a:76:24:13:06:8c:1e:8f:a3:48:b2: d7:a7:9c:a0:08:b0:b4:ec:b4:06:ef:ed:f0:24:5b: 9b:63:70:b8:37:ca:3f:d2:76:aa:b1:8e:84:8a:42: f3:08:db:38:c4:e7:ee:8e:0a:f0:7e:2e:8b:f5:11: d0:36:6b:26:96:a3:43:e6:2f:cf:f6:3a:64:63:75: 40:bf:6c:a2:88:89:a8:df:22:77:26:87:cb:fa:34: 2e:5f:60:b1:fe:6e:d6:68:6e:d3:34:42:03:29:c6: dd:82:8e:70:4f:d5:10:86:4c:fa:69:34:47:a2:7b: ba:62:f7:0f:50:7a:9e:8d:8e:64:da:ed:af:33:dd: c5:da:33:74:27:f6:c8:99:dd:f1:ec:20:0c:db:f7: 01:0b:c6:ae:8e:36:43:cd:e9:3d:53:01:67:3c:65: f1:04:0f:b0:13:c4:7e:3f:7b:47:04:3f:da:92:72: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B5:3E:CA:82:D0:ED:32:08:70:D3:30:7F:FC:5D:27:12:64:E7:28 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b42::/48 Signature Algorithm: sha256WithRSAEncryption 01:ab:9c:20:1d:cf:7b:df:25:9f:31:b6:80:d2:be:23:26:56: 31:c1:ff:da:a7:f1:14:7f:b0:9c:0c:44:40:aa:f4:b6:71:07: c7:6d:a7:e7:f0:8e:fc:65:66:79:23:a3:83:fa:ec:29:b1:cf: 9c:9e:a0:9c:6c:a6:49:48:69:9d:a1:1a:dd:93:ac:84:6d:d0: 6d:9f:e9:b5:2c:b4:08:3a:ba:fb:ee:b4:ac:07:69:73:e9:99: 72:b9:c7:0e:f7:44:26:a5:c7:38:c8:71:79:44:47:d7:69:f4: e3:a9:b6:c5:54:16:6b:a5:ad:98:b9:2d:a8:e8:a1:c0:f4:d5: c8:ec:4f:3b:ab:1f:8e:5e:b1:aa:81:c3:36:0c:e1:ab:ff:5a: 0e:8c:31:98:21:78:3c:7f:76:26:a2:95:a8:40:a4:73:54:03: 20:6b:4b:b7:51:b7:08:b3:f6:a2:2a:7f:a0:57:51:56:85:bb: d3:c6:10:d0:8d:f2:92:8b:0b:97:1c:de:7b:62:06:04:36:5d: 5f:2b:e6:3c:03:f5:fa:6b:95:4b:57:fb:7d:70:3c:26:f6:fa: 68:1e:1d:b9:ab:b7:14:6d:b1:0b:19:d5:2f:58:61:5c:6e:68: fb:b9:07:85:3f:fc:1c:47:da:d5:e6:ca:5f:d9:76:9f:cf:47: f5:31:2e:00 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUQP1o3c9ULq8dh8hxZrnl6UhV66owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMwWhcNMjcwNTE3MDkyMTMw WjAzMTEwLwYDVQQDEyg2Q0I1M0VDQTgyRDBFRDMyMDg3MEQzMzA3RkZDNUQyNzEy NjRFNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8aS54+VCdz1 clE/8msHjP3UefVFc/alKJd4X/dz860HeuIyzUEU9qHEclwlv6w2wm4pskUR3tu7 hJPd64phjntmACPa0sxiKRX7rPmHGnYkEwaMHo+jSLLXp5ygCLC07LQG7+3wJFub Y3C4N8o/0naqsY6EikLzCNs4xOfujgrwfi6L9RHQNmsmlqND5i/P9jpkY3VAv2yi iImo3yJ3JofL+jQuX2Cx/m7WaG7TNEIDKcbdgo5wT9UQhkz6aTRHonu6YvcPUHqe jY5k2u2vM93F2jN0J/bImd3x7CAM2/cBC8aujjZDzek9UwFnPGXxBA+wE8R+P3tH BD/aknJMWQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGy1PsqC0O0yCHDTMH/8XScS ZOcoMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzNDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzEzMzMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gtCMA0GCSqGSIb3DQEBCwUAA4IBAQABq5wgHc973yWfMbaA0r4j JlYxwf/ap/EUf7CcDERAqvS2cQfHbafn8I78ZWZ5I6OD+uwpsc+cnqCcbKZJSGmd oRrdk6yEbdBtn+m1LLQIOrr77rSsB2lz6ZlyuccO90Qmpcc4yHF5REfXafTjqbbF VBZrpa2YuS2o6KHA9NXI7E87qx+OXrGqgcM2DOGr/1oOjDGYIXg8f3YmopWoQKRz VAMga0u3UbcIs/aiKn+gV1FWhbvTxhDQjfKSiwuXHN57YgYENl1fK+Y8A/X6a5VL V/t9cDwm9vpoHh25q7cUbbELGdUvWGFcbmj7uQeFP/wcR9rV5spf2Xafz0f1MS4A -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:57 2026 by rpki-client