$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa File: 323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa (raw, json) Hash identifier: Q+qEwFwdVlt25r5LCoSyf+tvYJ1Di0nFNbUWSVT+9IQ= Subject key identifier: C1:0E:C8:24:68:62:71:1C:85:F7:B3:46:66:80:19:45:79:31:EA:B5 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1BBCBAFEB11FB7EC44FBE92C1DDF134905D25E04 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa Signing time: Mon 18 May 2026 09:21:40 +0000 ROA not before: Mon 18 May 2026 09:16:40 +0000 ROA not after: Mon 17 May 2027 09:21:40 +0000 asID: 211935 IP address blocks: 2602:feda:b8e::/48 maxlen: 56 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bc:ba:fe:b1:1f:b7:ec:44:fb:e9:2c:1d:df:13:49:05:d2:5e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:40 2026 GMT Not After : May 17 09:21:40 2027 GMT Subject: CN=C10EC8246862711C85F7B346668019457931EAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:56:35:57:a1:64:6a:4c:d3:c0:02:e5:26: 5a:2d:1b:be:f6:3a:2f:81:67:40:4b:0f:89:dd:07: 0c:8c:36:91:62:c3:b5:29:2a:73:1a:91:13:c8:46: 55:27:88:7a:d2:eb:1f:3f:fa:2d:32:d0:f2:46:36: b7:c5:f3:c6:36:01:76:f8:48:14:58:61:c2:6e:a3: ea:95:b2:4b:16:25:0e:cc:1b:a3:14:7f:47:c8:19: 99:87:6f:84:48:22:4d:88:ec:bd:3b:55:1b:6d:0c: 9b:b9:c9:86:09:a3:ab:ea:f8:92:f4:7f:78:68:cc: 3e:13:01:08:da:c9:a5:cf:7d:dc:b0:1a:0d:99:af: c8:16:ae:c5:c4:3a:0f:4d:9a:84:84:a6:f2:37:a3: be:7e:ad:82:cd:cc:b7:2b:46:eb:18:86:42:8e:c9: a7:b5:32:3e:8f:55:91:d7:db:a0:bf:65:7e:2c:16: 6e:2d:59:a1:97:93:f1:a7:a8:0c:92:44:7e:37:5d: b1:5c:8a:36:e6:6e:75:f8:41:72:1b:99:9a:ec:78: 03:61:ac:58:38:bb:33:0d:59:95:f5:a4:d1:51:1d: 32:3d:cd:68:33:15:b3:38:51:bb:58:cf:2d:70:f7: 6b:b3:19:83:81:88:4c:8a:88:3d:8f:86:21:45:6d: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0E:C8:24:68:62:71:1C:85:F7:B3:46:66:80:19:45:79:31:EA:B5 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b8e::/48 Signature Algorithm: sha256WithRSAEncryption 79:e7:6e:41:c2:73:5e:d7:de:81:7f:b4:a7:2e:e6:2c:ae:c3: e3:17:2a:56:81:3e:2d:f8:cd:f9:c3:96:87:9b:f0:ba:81:91: 02:c7:8a:86:72:98:d3:37:05:af:55:dc:51:0c:ea:ac:d9:48: ea:f5:ec:70:96:c7:e5:b2:21:ba:68:a5:34:c8:01:5d:d0:fd: a1:a7:6e:31:73:ae:04:80:4b:35:80:79:21:3f:1c:6d:97:4b: c0:19:31:ee:24:f1:a9:6c:1e:13:6e:8d:9f:f8:b1:11:ec:38: 6f:70:d6:49:72:44:63:c4:d2:3c:6b:d1:5a:e5:16:85:c2:de: ee:a9:19:07:f5:ca:4a:59:2d:c4:27:e1:61:8b:e5:d2:b4:99: b2:2f:9d:9b:22:80:03:60:69:7d:3f:21:11:c0:0c:0f:ac:74: fd:9c:69:83:6a:0b:be:d3:24:2d:50:bc:e4:68:48:44:6f:70: 23:63:43:72:9c:f7:cf:6b:7f:52:e1:d3:5e:44:24:0b:ae:0c: 54:9b:6d:d0:30:6c:4a:0a:48:b0:01:a2:27:aa:9c:88:eb:dc: 70:ad:26:a8:a3:30:9a:2f:8f:76:be:c9:78:16:23:65:d5:d1: ef:5f:4a:8d:c9:a6:8d:a1:16:69:0a:8e:53:5d:d9:f9:64:01: 1c:cb:4a:57 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUG7y6/rEft+xE++ksHd8TSQXSXgQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQwWhcNMjcwNTE3MDkyMTQw WjAzMTEwLwYDVQQDEyhDMTBFQzgyNDY4NjI3MTFDODVGN0IzNDY2NjgwMTk0NTc5 MzFFQUI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFWNVehZGpM 08AC5SZaLRu+9jovgWdASw+J3QcMjDaRYsO1KSpzGpETyEZVJ4h60usfP/otMtDy Rja3xfPGNgF2+EgUWGHCbqPqlbJLFiUOzBujFH9HyBmZh2+ESCJNiOy9O1UbbQyb ucmGCaOr6viS9H94aMw+EwEI2smlz33csBoNma/IFq7FxDoPTZqEhKbyN6O+fq2C zcy3K0brGIZCjsmntTI+j1WR19ugv2V+LBZuLVmhl5Pxp6gMkkR+N12xXIo25m51 +EFyG5ma7HgDYaxYOLszDVmV9aTRUR0yPc1oMxWzOFG7WM8tcPdrsxmDgYhMiog9 j4YhRW3lfQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMEOyCRoYnEchfezRmaAGUV5 Meq1MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODY1M2EzYTJmMzQzODJkMzUzNjIwM2QzZTIwMzIzMTMxMzkzMzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2guOMA0GCSqGSIb3DQEBCwUAA4IBAQB5525BwnNe196Bf7SnLuYs rsPjFypWgT4t+M35w5aHm/C6gZECx4qGcpjTNwWvVdxRDOqs2Ujq9exwlsflsiG6 aKU0yAFd0P2hp24xc64EgEs1gHkhPxxtl0vAGTHuJPGpbB4Tbo2f+LER7DhvcNZJ ckRjxNI8a9Fa5RaFwt7uqRkH9cpKWS3EJ+Fhi+XStJmyL52bIoADYGl9PyERwAwP rHT9nGmDagu+0yQtULzkaEhEb3AjY0NynPfPa39S4dNeRCQLrgxUm23QMGxKCkiw AaInqpyI69xwrSaoozCaL492vsl4FiNl1dHvX0qNyaaNoRZpCo5TXdn5ZAEcy0pX -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:15 2026 by rpki-client