$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa File: 323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa (raw, json) Hash identifier: nA9Q0zH+yGKMsbEt6vSNvd0GI2XzOj5R6fgvzW2aZc4= Subject key identifier: C5:4A:C2:C9:49:B3:70:E5:84:BF:73:57:A0:86:25:77:08:58:38:6C Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 05C1DBBB0D03198DEAA55673C1DD3F6BE6218CAB Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa Signing time: Mon 18 May 2026 09:21:38 +0000 ROA not before: Mon 18 May 2026 09:16:38 +0000 ROA not after: Mon 17 May 2027 09:21:38 +0000 asID: 146950 IP address blocks: 2602:feda:b60::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 May 2026 18:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:db:bb:0d:03:19:8d:ea:a5:56:73:c1:dd:3f:6b:e6:21:8c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:38 2026 GMT Not After : May 17 09:21:38 2027 GMT Subject: CN=C54AC2C949B370E584BF7357A08625770858386C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:0d:45:03:87:35:e7:37:f5:1e:bd:43:12: bd:af:84:52:d8:49:06:10:24:3c:a1:70:40:9c:e3: 8a:01:d5:0c:7d:7d:d9:5b:0d:75:03:e3:2d:e2:11: b2:1a:a0:f9:82:a0:7b:f3:68:66:2f:ce:05:04:d5: af:d1:e3:b4:1f:74:e7:de:d8:b2:07:d3:f1:1c:08: b5:21:9a:23:41:e1:fc:28:01:7d:25:65:40:55:14: 4b:fe:d0:d7:98:7a:7c:88:0f:af:22:4c:9d:a0:e3: 22:33:ce:f1:81:73:50:71:a0:15:69:6e:ea:06:5a: da:08:b3:6f:f9:cb:c5:65:52:61:29:a3:66:6e:06: 7c:a3:62:b9:55:37:8b:ed:ad:d5:f1:9f:8f:2f:ba: fe:f1:08:c7:be:bd:1b:1c:1e:ff:f7:9d:15:12:0f: cc:c5:d7:54:75:61:90:39:ec:77:27:38:2e:80:10: ed:6f:23:6b:0f:30:86:fe:c6:8b:0f:5f:8e:a0:12: 8b:a2:f3:7f:10:cc:bd:29:f0:c7:8c:02:2e:62:e7: ce:d3:99:af:63:b9:d8:d3:16:78:36:9b:3c:af:13: 03:2a:60:f9:f0:ce:d1:cd:82:39:46:b6:d6:ae:1a: 60:ac:c6:80:33:b9:eb:36:a6:17:85:14:fd:f4:82: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4A:C2:C9:49:B3:70:E5:84:BF:73:57:A0:86:25:77:08:58:38:6C X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b60::/44 Signature Algorithm: sha256WithRSAEncryption 60:99:dc:9a:8d:96:db:e0:28:33:0f:8f:a7:a1:9a:51:fa:23: 4a:29:62:70:98:2b:1d:24:92:2b:20:3d:f5:45:fa:bd:c9:34: cc:00:bb:d8:d0:2c:4e:5e:74:35:af:e8:ea:4a:88:cf:a5:8f: 01:91:ab:07:56:66:cf:f2:54:e4:3c:5b:a9:d4:86:cd:37:7b: 46:dd:36:6e:65:ed:97:4b:1e:79:40:f2:13:ea:eb:9b:11:33: c4:8b:a4:52:c8:87:31:b6:a2:03:81:77:cc:bc:ca:1e:79:e1: dc:05:8b:69:96:c1:2e:91:2d:77:74:d0:a0:27:5d:fe:e8:2b: d9:5b:ea:d9:97:28:09:8c:af:2c:82:74:6a:6e:ca:bb:98:eb: 6f:ca:c8:9e:d5:0a:3c:76:ea:70:ff:f4:f7:62:78:d2:4b:f4: 25:c2:29:fa:da:4b:ab:88:98:1a:aa:d0:0d:c9:ae:ba:bb:78: 1d:12:7b:09:78:46:3a:3b:09:bd:3a:f6:00:dd:56:41:67:13: b9:05:d5:7a:51:34:ce:8a:31:24:1e:a5:53:03:6a:9e:8a:ab: a5:46:ef:8f:2b:39:3c:67:46:b7:6d:2d:f0:08:8a:67:35:5e: c8:b4:02:07:97:88:c9:db:93:a8:9d:63:45:55:e5:39:6d:50: 77:bf:4a:c2 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUBcHbuw0DGY3qpVZzwd0/a+YhjKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM4WhcNMjcwNTE3MDkyMTM4 WjAzMTEwLwYDVQQDEyhDNTRBQzJDOTQ5QjM3MEU1ODRCRjczNTdBMDg2MjU3NzA4 NTgzODZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw98NRQOHNec3 9R69QxK9r4RS2EkGECQ8oXBAnOOKAdUMfX3ZWw11A+Mt4hGyGqD5gqB782hmL84F BNWv0eO0H3Tn3tiyB9PxHAi1IZojQeH8KAF9JWVAVRRL/tDXmHp8iA+vIkydoOMi M87xgXNQcaAVaW7qBlraCLNv+cvFZVJhKaNmbgZ8o2K5VTeL7a3V8Z+PL7r+8QjH vr0bHB7/950VEg/MxddUdWGQOex3JzgugBDtbyNrDzCG/saLD1+OoBKLovN/EMy9 KfDHjAIuYufO05mvY7nY0xZ4Nps8rxMDKmD58M7RzYI5RrbWrhpgrMaAM7nrNqYX hRT99IIwmwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMVKwslJs3DlhL9zV6CGJXcI WDhsMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM2MzkzNTMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gtgMA0GCSqGSIb3DQEBCwUAA4IBAQBgmdyajZbb4CgzD4+noZpR +iNKKWJwmCsdJJIrID31Rfq9yTTMALvY0CxOXnQ1r+jqSojPpY8BkasHVmbP8lTk PFup1IbNN3tG3TZuZe2XSx55QPIT6uubETPEi6RSyIcxtqIDgXfMvMoeeeHcBYtp lsEukS13dNCgJ13+6CvZW+rZlygJjK8sgnRqbsq7mOtvysie1Qo8dupw//T3YnjS S/Qlwin62kuriJgaqtANya66u3gdEnsJeEY6Owm9OvYA3VZBZxO5BdV6UTTOijEk HqVTA2qeiqulRu+PKzk8Z0a3bS3wCIpnNV7ItAIHl4jJ25OonWNFVeU5bVB3v0rC -----END CERTIFICATE-----Generated at Wed May 27 18:40:05 2026 by rpki-client