$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa File: 323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa (raw, json) Hash identifier: 0MOLY0FXxcGpe6xsKU8OIjPVZZzeHke3a6lu8aXwjJI= Subject key identifier: 9D:B9:ED:35:11:B5:0C:66:77:BB:77:7F:59:7E:71:E1:E5:0A:21:FD Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3F241BD8510BBC9C947FCFCE32489CA4358BDE32 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa Signing time: Mon 18 May 2026 09:21:38 +0000 ROA not before: Mon 18 May 2026 09:16:38 +0000 ROA not after: Mon 17 May 2027 09:21:38 +0000 asID: 200334 IP address blocks: 2602:feda:b8c::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:24:1b:d8:51:0b:bc:9c:94:7f:cf:ce:32:48:9c:a4:35:8b:de:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:38 2026 GMT Not After : May 17 09:21:38 2027 GMT Subject: CN=9DB9ED3511B50C6677BB777F597E71E1E50A21FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:97:5c:33:ae:35:c4:da:dd:fc:5e:56:05: f2:3c:76:d3:12:29:07:13:72:e9:e9:d0:32:37:8d: 03:b6:c1:bd:3a:5e:09:83:0a:b0:9b:97:60:8e:c2: 85:b6:80:83:f9:03:eb:d2:dd:81:0c:ee:15:e4:43: ae:a3:c2:2d:57:6a:0b:03:3b:3d:ce:d5:61:9e:c7: 5d:21:78:79:81:e5:ac:e0:84:63:2b:e3:e4:d9:1e: 06:5d:b7:c2:c4:34:47:06:43:76:d4:7d:5e:45:74: 6a:00:45:97:80:a7:96:b2:ba:c7:98:06:3e:8d:57: b9:d2:7b:fa:e8:8a:81:df:cc:0a:31:41:9f:65:44: 8a:f3:f9:4f:3c:5e:73:e1:b1:67:76:d0:e1:9d:0d: 5a:5d:9f:8d:f5:85:39:e3:4d:6c:82:65:82:a7:99: 7c:9f:bb:9b:f5:d2:0d:0d:ce:d5:86:9b:76:44:49: b2:ea:a5:86:5f:e8:36:b5:06:52:b9:ec:6b:06:f9: b2:27:a6:2d:6c:20:01:bb:9e:03:da:4a:a6:7e:2e: 1f:7c:b6:e8:0d:57:cf:04:5c:d2:8c:56:49:80:a2: 82:09:71:07:50:c7:46:b9:ea:11:ef:9b:26:94:ce: 17:bb:80:b1:e0:71:4e:d3:d7:52:84:f3:5a:99:f3: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B9:ED:35:11:B5:0C:66:77:BB:77:7F:59:7E:71:E1:E5:0A:21:FD X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b8c::/48 Signature Algorithm: sha256WithRSAEncryption ae:01:49:42:20:81:79:d6:62:e7:e5:a6:05:30:5d:a6:4c:0c: ba:f9:87:63:c5:a1:8d:7e:32:84:bd:a9:6d:26:df:4b:c9:a2: c9:3f:25:ca:f9:c3:fc:79:d4:50:5c:b5:b8:5d:4b:68:ef:7b: 8e:83:97:f3:2f:53:2e:73:3b:fe:72:bf:a6:1b:60:76:79:fd: ee:1f:37:79:53:a6:c6:fa:f8:63:b5:26:e0:75:b0:a7:5e:8a: 57:11:76:33:ee:e5:22:9f:6d:63:8f:57:0b:dd:d7:84:f4:a7: be:f8:95:c0:2e:9b:73:b5:3d:c3:07:55:43:15:7a:cb:db:c6: a2:2d:b9:11:7b:90:b5:c5:4f:2a:08:a0:6d:25:13:02:90:6c: 99:cb:25:eb:4f:08:43:a5:62:d0:ee:ed:c4:dd:af:b4:c8:0b: 8b:3d:08:c4:41:78:84:05:4b:27:32:04:c5:a0:f2:c4:3f:f5: d8:b1:ac:0a:d3:07:68:e2:e9:17:b0:5e:5b:28:dc:5e:45:ca: 6e:31:5c:8e:59:3b:02:42:96:37:86:96:5b:be:49:2a:bb:33: f6:4d:f6:db:36:9b:a8:67:d8:dd:32:a1:78:c7:e3:81:0a:c0: 13:31:93:6d:93:ad:fb:71:ee:e8:57:22:b8:cd:98:b9:9e:e0: 3c:74:62:58 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUPyQb2FELvJyUf8/OMkicpDWL3jIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM4WhcNMjcwNTE3MDkyMTM4 WjAzMTEwLwYDVQQDEyg5REI5RUQzNTExQjUwQzY2NzdCQjc3N0Y1OTdFNzFFMUU1 MEEyMUZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OCXXDOuNcTa 3fxeVgXyPHbTEikHE3Lp6dAyN40DtsG9Ol4Jgwqwm5dgjsKFtoCD+QPr0t2BDO4V 5EOuo8ItV2oLAzs9ztVhnsddIXh5geWs4IRjK+Pk2R4GXbfCxDRHBkN21H1eRXRq AEWXgKeWsrrHmAY+jVe50nv66IqB38wKMUGfZUSK8/lPPF5z4bFndtDhnQ1aXZ+N 9YU5401sgmWCp5l8n7ub9dINDc7Vhpt2REmy6qWGX+g2tQZSuexrBvmyJ6YtbCAB u54D2kqmfi4ffLboDVfPBFzSjFZJgKKCCXEHUMdGueoR75smlM4Xu4Cx4HFO09dS hPNamfOe+wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJ257TURtQxmd7t3f1l+ceHl CiH9MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzMzMzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2guMMA0GCSqGSIb3DQEBCwUAA4IBAQCuAUlCIIF51mLn5aYFMF2m TAy6+YdjxaGNfjKEvaltJt9LyaLJPyXK+cP8edRQXLW4XUto73uOg5fzL1Muczv+ cr+mG2B2ef3uHzd5U6bG+vhjtSbgdbCnXopXEXYz7uUin21jj1cL3deE9Ke++JXA LptztT3DB1VDFXrL28aiLbkRe5C1xU8qCKBtJRMCkGyZyyXrTwhDpWLQ7u3E3a+0 yAuLPQjEQXiEBUsnMgTFoPLEP/XYsawK0wdo4ukXsF5bKNxeRcpuMVyOWTsCQpY3 hpZbvkkquzP2TfbbNpuoZ9jdMqF4x+OBCsATMZNtk637ce7oVyK4zZi5nuA8dGJY -----END CERTIFICATE-----Generated at Sat Jun 6 08:16:05 2026 by rpki-client