$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa File: 323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa (raw, json) Hash identifier: FzIhGoHUfYTjp9tUdiSW+itDeOjglaOjuJu12/Qlcjc= Subject key identifier: 37:CC:8D:87:C5:0A:14:8C:97:5F:EE:FC:68:E4:9A:E3:3B:BA:8B:BE Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3F5613DD5FC03646FF0A44B573F72D4CBC417F7D Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa Signing time: Mon 18 May 2026 09:21:39 +0000 ROA not before: Mon 18 May 2026 09:16:39 +0000 ROA not after: Mon 17 May 2027 09:21:39 +0000 asID: 209297 IP address blocks: 2602:feda:bc0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:56:13:dd:5f:c0:36:46:ff:0a:44:b5:73:f7:2d:4c:bc:41:7f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:39 2026 GMT Not After : May 17 09:21:39 2027 GMT Subject: CN=37CC8D87C50A148C975FEEFC68E49AE33BBA8BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:b0:dc:2f:b4:5b:0b:ee:21:7a:e4:bc:b7: a0:f1:3e:3a:3a:09:ca:e2:f6:71:1e:bb:e4:c3:b7: 9c:95:fa:eb:94:de:45:ae:c2:fe:13:a1:2f:75:ce: 24:38:0f:89:37:59:de:fa:af:e2:e9:71:0e:e4:c7: b5:b5:0f:a7:be:7c:43:b5:2e:43:08:11:12:47:08: 96:da:ec:21:50:20:d8:2d:9c:17:ff:92:3b:c8:10: e8:75:64:fe:ee:f6:4d:c4:f5:7b:7f:39:78:6c:7f: b7:8d:24:1f:27:a2:85:5e:f0:27:bd:22:f7:4a:d7: c9:b4:2e:f0:cd:04:4d:b9:39:28:16:62:b8:4b:6e: d9:c8:23:d6:54:96:4c:d4:85:cb:51:f0:48:17:f5: 6b:7b:4a:4f:d1:fd:07:00:93:b8:c8:37:7c:c9:62: ba:2d:a5:3e:33:6b:df:2d:87:3b:99:d2:d7:ae:83: 2b:3b:2e:37:11:e5:b3:ac:33:4c:2f:dc:31:d1:47: fb:c6:ea:ed:82:8e:43:a8:ae:8a:c6:47:6b:08:35: 82:e1:3a:37:fa:4f:b3:cd:29:80:ab:dc:af:ce:6d: 93:99:8e:0c:e0:fd:2d:93:a0:d8:dc:cc:96:11:c9: 6e:29:85:33:76:7a:dd:53:f6:0b:b4:0d:8c:b0:97: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CC:8D:87:C5:0A:14:8C:97:5F:EE:FC:68:E4:9A:E3:3B:BA:8B:BE X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:bc0::/44 Signature Algorithm: sha256WithRSAEncryption 4e:3f:0d:15:53:da:e7:03:64:16:bf:48:b4:5d:c4:3a:54:17: 99:c5:e8:cb:1a:dd:c4:dc:01:92:da:ca:33:c6:70:99:29:3e: 24:ca:93:7d:fd:3a:fe:af:78:93:0b:17:ea:e2:9c:4f:75:54: 12:6e:d6:a4:9a:cb:7c:f2:59:2f:e1:a1:41:75:27:13:5d:37: 4a:13:1c:57:f7:25:9b:e5:51:92:e9:2d:7b:c7:90:35:93:4f: 46:2a:7e:54:df:0a:33:fa:9a:de:dd:49:2c:3f:df:36:36:76: 4f:a2:e2:47:ad:a9:15:81:92:c7:54:ea:dd:ee:d0:84:1c:b6: 1f:e6:69:ee:fd:37:c9:ee:ba:12:9c:c7:79:88:72:10:27:c9: 7d:74:99:b6:e9:29:8c:41:e6:6b:f1:34:02:ea:16:30:94:67: 08:d6:43:32:22:4c:22:4f:e1:e9:73:92:89:58:6c:3c:c5:16: 09:6e:5f:21:b5:7a:a9:f0:1e:26:68:f9:56:33:6a:46:38:b1: 7d:86:74:bf:15:7c:2c:e9:d3:b8:46:3d:f4:0e:0f:d5:d8:af: 8a:dc:42:3b:ac:6f:d6:85:13:48:3c:8f:20:70:6c:cf:b3:23: b8:06:8e:06:1a:42:65:86:09:90:e3:54:65:97:ee:a8:86:83: 80:8f:06:cf -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUP1YT3V/ANkb/CkS1c/ctTLxBf30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM5WhcNMjcwNTE3MDkyMTM5 WjAzMTEwLwYDVQQDEygzN0NDOEQ4N0M1MEExNDhDOTc1RkVFRkM2OEU0OUFFMzNC QkE4QkJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTiw3C+0Wwvu IXrkvLeg8T46OgnK4vZxHrvkw7eclfrrlN5FrsL+E6Evdc4kOA+JN1ne+q/i6XEO 5Me1tQ+nvnxDtS5DCBESRwiW2uwhUCDYLZwX/5I7yBDodWT+7vZNxPV7fzl4bH+3 jSQfJ6KFXvAnvSL3StfJtC7wzQRNuTkoFmK4S27ZyCPWVJZM1IXLUfBIF/Vre0pP 0f0HAJO4yDd8yWK6LaU+M2vfLYc7mdLXroMrOy43EeWzrDNML9wx0Uf7xurtgo5D qK6KxkdrCDWC4To3+k+zzSmAq9yvzm2TmY4M4P0tk6DY3MyWEcluKYUzdnrdU/YL tA2MsJclJQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDfMjYfFChSMl1/u/GjkmuM7 uou+MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjI2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM5MzIzOTM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gvAMA0GCSqGSIb3DQEBCwUAA4IBAQBOPw0VU9rnA2QWv0i0XcQ6 VBeZxejLGt3E3AGS2sozxnCZKT4kypN9/Tr+r3iTCxfq4pxPdVQSbtakmst88lkv 4aFBdScTXTdKExxX9yWb5VGS6S17x5A1k09GKn5U3woz+pre3UksP982NnZPouJH rakVgZLHVOrd7tCEHLYf5mnu/TfJ7roSnMd5iHIQJ8l9dJm26SmMQeZr8TQC6hYw lGcI1kMyIkwiT+Hpc5KJWGw8xRYJbl8htXqp8B4maPlWM2pGOLF9hnS/FXws6dO4 Rj30Dg/V2K+K3EI7rG/WhRNIPI8gcGzPsyO4Bo4GGkJlhgmQ41Rll+6ohoOAjwbP -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:11 2026 by rpki-client