$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa File: 323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa (raw, json) Hash identifier: 0Gp75IyFq1y8vFydRIm1OLFc+1LN0ECrEmtrbOSp8s0= Subject key identifier: B9:12:DB:7D:D4:80:6E:DE:67:FC:FF:DE:49:ED:83:04:78:1B:C8:7A Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 06A6E111DD2B99978328B07204F80AD319EDFB36 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa Signing time: Mon 18 May 2026 09:21:40 +0000 ROA not before: Mon 18 May 2026 09:16:40 +0000 ROA not after: Mon 17 May 2027 09:21:40 +0000 asID: 212995 IP address blocks: 2602:feda:b90::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 17:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a6:e1:11:dd:2b:99:97:83:28:b0:72:04:f8:0a:d3:19:ed:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:40 2026 GMT Not After : May 17 09:21:40 2027 GMT Subject: CN=B912DB7DD4806EDE67FCFFDE49ED8304781BC87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:e6:46:9d:23:80:39:d6:24:08:87:62:4f: 4f:4d:9a:ae:fe:97:65:f1:5f:48:78:17:56:43:39: 81:4e:2d:48:6c:59:b2:ce:59:df:6b:b6:10:e6:d6: e1:0d:ef:5a:30:3e:dd:1e:bb:b3:91:ec:4d:3c:e4: fb:46:0f:9c:e7:96:f7:fe:5f:9e:f7:5c:e0:fd:0d: ae:d1:be:10:f5:19:6e:3e:1b:53:6d:22:aa:42:93: 4c:52:4c:20:8f:0e:47:1c:22:5d:53:ad:35:8f:b1: f1:b4:8d:6e:d9:48:f1:06:17:82:b2:6a:30:3b:f9: 24:83:80:1a:ab:d8:d8:79:a3:64:d9:e2:3a:e1:96: 99:e2:05:b9:d1:70:77:33:c8:33:f3:5c:d7:ea:00: fa:4d:ed:7d:3b:97:79:d2:da:0e:80:cd:2d:1f:44: 3e:f2:98:5f:89:2f:5b:bd:15:0d:36:b7:4d:ff:27: fe:35:20:23:6a:cc:eb:9c:95:84:0d:c7:44:2d:76: e6:91:a7:9f:9b:34:4e:2a:72:d5:13:df:29:b8:a7: 66:d6:a0:49:d7:e2:c5:9c:de:5b:97:01:12:76:25: 3d:5f:ea:ef:13:0a:6a:3c:46:7e:98:fc:ee:f1:4e: d2:dc:ad:61:19:ec:52:83:57:15:30:ad:1b:62:ce: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:DB:7D:D4:80:6E:DE:67:FC:FF:DE:49:ED:83:04:78:1B:C8:7A X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b90::/44 Signature Algorithm: sha256WithRSAEncryption 87:95:18:ca:4b:d2:75:44:22:f0:d5:a4:32:a4:a3:02:a8:03: a1:1a:7e:08:5f:7c:f3:72:ba:cd:31:31:ba:26:7c:2e:43:d1: 1d:35:4a:25:2f:3e:53:de:6c:f5:ff:f5:5f:d3:c5:90:19:a9: 23:35:61:a9:f2:61:56:e6:29:15:66:ec:75:73:db:c3:2a:77: d0:99:d9:9b:e6:db:f5:3f:3c:be:8e:86:8c:2a:0f:78:b5:e6: 1f:e6:df:dc:eb:73:53:d1:e0:96:c5:80:89:f3:de:c8:5b:b8: 1a:83:fb:a7:d3:08:bf:f2:fa:7f:3f:b0:d4:99:53:a9:eb:3c: 71:4a:d5:63:af:10:39:aa:1e:eb:4d:23:d0:78:fb:9a:1d:28: b4:a2:c6:44:9c:cf:e8:e5:8d:0f:37:4b:56:50:08:06:56:9a: 9b:e3:4f:5c:1b:3d:0c:54:4c:19:d8:62:69:5e:5c:ba:d8:77: 34:87:ce:7a:ea:8e:9c:40:35:c2:f7:e1:3b:e9:79:c2:ac:aa: b0:88:8f:df:89:51:83:ca:c6:8a:e2:c1:07:d6:36:ed:b4:70: 4b:43:d7:1b:35:94:16:79:70:63:4a:90:58:94:97:59:0d:a1: 9e:62:03:9a:de:01:78:9b:96:65:09:da:42:3c:b8:27:9f:1f: 2b:4c:60:b1 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUBqbhEd0rmZeDKLByBPgK0xnt+zYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQwWhcNMjcwNTE3MDkyMTQw WjAzMTEwLwYDVQQDEyhCOTEyREI3REQ0ODA2RURFNjdGQ0ZGREU0OUVEODMwNDc4 MUJDODdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyELmRp0jgDnW JAiHYk9PTZqu/pdl8V9IeBdWQzmBTi1IbFmyzlnfa7YQ5tbhDe9aMD7dHruzkexN POT7Rg+c55b3/l+e91zg/Q2u0b4Q9RluPhtTbSKqQpNMUkwgjw5HHCJdU601j7Hx tI1u2UjxBheCsmowO/kkg4Aaq9jYeaNk2eI64ZaZ4gW50XB3M8gz81zX6gD6Te19 O5d50toOgM0tH0Q+8phfiS9bvRUNNrdN/yf+NSAjaszrnJWEDcdELXbmkaefmzRO KnLVE98puKdm1qBJ1+LFnN5blwESdiU9X+rvEwpqPEZ+mPzu8U7S3K1hGexSg1cV MK0bYs7W1QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLkS233UgG7eZ/z/3kntgwR4 G8h6MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzOTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzkzOTM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2guQMA0GCSqGSIb3DQEBCwUAA4IBAQCHlRjKS9J1RCLw1aQypKMC qAOhGn4IX3zzcrrNMTG6JnwuQ9EdNUolLz5T3mz1//Vf08WQGakjNWGp8mFW5ikV Zux1c9vDKnfQmdmb5tv1Pzy+joaMKg94teYf5t/c63NT0eCWxYCJ897IW7gag/un 0wi/8vp/P7DUmVOp6zxxStVjrxA5qh7rTSPQePuaHSi0osZEnM/o5Y0PN0tWUAgG Vpqb409cGz0MVEwZ2GJpXly62Hc0h8566o6cQDXC9+E76XnCrKqwiI/fiVGDysaK 4sEH1jbttHBLQ9cbNZQWeXBjSpBYlJdZDaGeYgOa3gF4m5ZlCdpCPLgnnx8rTGCx -----END CERTIFICATE-----Generated at Sun May 31 09:58:49 2026 by rpki-client