$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa File: 323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa (raw, json) Hash identifier: DbHYPu2ma2/Ic5QYLoaj4gZiKeL6660chxBmPFn9wVo= Subject key identifier: 6A:30:5E:B5:9D:C9:C5:F1:92:7E:5D:49:B9:63:86:AE:8C:0F:A8:09 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3C8366CF853E12658599F118B0D7263E2DD6276B Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa Signing time: Mon 18 May 2026 09:21:34 +0000 ROA not before: Mon 18 May 2026 09:16:34 +0000 ROA not after: Mon 17 May 2027 09:21:34 +0000 asID: 7721 IP address blocks: 2602:feda:be0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:83:66:cf:85:3e:12:65:85:99:f1:18:b0:d7:26:3e:2d:d6:27:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:34 2026 GMT Not After : May 17 09:21:34 2027 GMT Subject: CN=6A305EB59DC9C5F1927E5D49B96386AE8C0FA809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:bb:39:8c:13:0f:f7:4c:93:48:79:b8:a7: 50:a8:ec:f5:eb:e0:1a:7d:0a:ad:fc:1e:de:d3:60: c1:25:77:68:86:5e:a0:c6:40:fe:23:28:09:aa:ce: 93:fe:f2:2d:f6:12:9d:ac:6d:5c:c3:bd:35:60:f5: ba:b3:ef:89:59:ba:1f:f9:99:c5:b3:ab:63:7c:d5: 31:fb:f0:92:af:a5:65:79:a5:b6:0b:02:90:54:67: 44:52:32:a3:22:aa:44:4e:55:e3:05:b0:55:12:4f: de:5f:d6:11:d3:11:56:5c:fd:3c:8a:2a:37:40:8a: 16:fe:44:96:9b:a9:c5:11:7d:02:ec:80:8b:b8:3b: 25:8f:da:41:eb:ca:13:1f:45:0a:de:68:cf:66:21: 39:e2:c7:a9:48:82:24:12:4a:b6:51:7e:e3:ab:e4: 04:3f:30:1b:a3:f5:f0:8c:fa:cf:97:33:9c:f8:79: d1:1a:2c:e9:cb:a5:00:4b:12:62:b1:da:bf:87:57: 6b:42:b5:c7:a6:fe:d9:03:c2:7a:f8:c0:5e:84:4e: 15:24:79:4a:a6:ea:0b:fd:01:9d:cf:15:96:67:86: e0:13:a5:86:dd:5f:59:76:df:66:5d:7f:c6:2d:6f: 7d:73:89:68:07:e2:c9:1f:2c:2d:88:52:00:00:85: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:5E:B5:9D:C9:C5:F1:92:7E:5D:49:B9:63:86:AE:8C:0F:A8:09 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:be0::/44 Signature Algorithm: sha256WithRSAEncryption c4:a5:4b:94:44:0c:82:95:68:c7:79:9d:f8:18:99:75:35:f9: 83:6a:80:d8:5f:f4:ea:86:9d:35:62:3b:b0:60:bb:ea:38:e3: 24:0f:5a:59:f5:21:d2:4c:07:38:f1:9a:82:e1:19:60:74:d1: e0:be:a4:51:95:90:f2:c4:13:1a:87:1f:27:da:22:b4:30:70: bb:da:91:c5:8a:0f:fc:25:dc:b4:4c:85:30:9a:6a:9c:8e:a3: e3:88:54:e4:5e:b5:7d:57:1b:6f:e8:b6:d4:9f:88:2a:a2:21: c9:b8:28:d4:d1:05:bb:c1:a0:b5:3a:b4:a5:49:97:5f:7f:90: 78:4d:b7:a2:7d:4e:a0:45:c8:38:14:8d:9f:45:60:fb:c4:86: 66:93:57:f6:0a:30:51:5b:f5:83:4f:72:36:91:1a:1e:f9:b4: a8:9f:88:cd:ee:f4:43:a9:75:a9:c9:cd:b7:9f:c1:e0:c9:f9: 8b:d6:03:8b:85:9d:a2:dd:8c:c3:3c:ac:75:70:be:31:17:bd: ce:56:0a:9e:6e:ba:dc:2f:ca:ec:27:35:ed:9c:57:5f:1d:87: c2:ea:97:56:c0:00:10:16:1f:ba:90:ab:9b:fc:df:05:3c:1f: d3:b5:2b:af:9b:34:c4:06:4a:91:68:41:c5:4f:c0:78:de:44: 3e:16:79:dc -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUPINmz4U+EmWFmfEYsNcmPi3WJ2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM0WhcNMjcwNTE3MDkyMTM0 WjAzMTEwLwYDVQQDEyg2QTMwNUVCNTlEQzlDNUYxOTI3RTVENDlCOTYzODZBRThD MEZBODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhO7OYwTD/dM k0h5uKdQqOz16+AafQqt/B7e02DBJXdohl6gxkD+IygJqs6T/vIt9hKdrG1cw701 YPW6s++JWbof+ZnFs6tjfNUx+/CSr6VleaW2CwKQVGdEUjKjIqpETlXjBbBVEk/e X9YR0xFWXP08iio3QIoW/kSWm6nFEX0C7ICLuDslj9pB68oTH0UK3mjPZiE54sep SIIkEkq2UX7jq+QEPzAbo/XwjPrPlzOc+HnRGizpy6UASxJisdq/h1drQrXHpv7Z A8J6+MBehE4VJHlKpuoL/QGdzxWWZ4bgE6WG3V9Zdt9mXX/GLW99c4loB+LJHywt iFIAAIUw5wIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFGowXrWdycXxkn5dSbljhq6M D6gJMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MjY1MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNzM3MzIzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH BCYC/toL4DANBgkqhkiG9w0BAQsFAAOCAQEAxKVLlEQMgpVox3md+BiZdTX5g2qA 2F/06oadNWI7sGC76jjjJA9aWfUh0kwHOPGaguEZYHTR4L6kUZWQ8sQTGocfJ9oi tDBwu9qRxYoP/CXctEyFMJpqnI6j44hU5F61fVcbb+i21J+IKqIhybgo1NEFu8Gg tTq0pUmXX3+QeE23on1OoEXIOBSNn0Vg+8SGZpNX9gowUVv1g09yNpEaHvm0qJ+I ze70Q6l1qcnNt5/B4Mn5i9YDi4Wdot2MwzysdXC+MRe9zlYKnm663C/K7Cc17ZxX Xx2HwuqXVsAAEBYfupCrm/zfBTwf07Urr5s0xAZKkWhBxU/AeN5EPhZ53A== -----END CERTIFICATE-----Generated at Sat Jun 6 08:15:45 2026 by rpki-client