$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa File: 323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa (raw, json) Hash identifier: 6dqoTqJfZvieYxrXmgZonQpJqbeo/KJVwL4lh9kmIDk= Subject key identifier: 2D:9D:0C:C8:60:83:DB:05:1B:20:93:2F:8C:2E:1E:D7:73:F1:C5:25 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 54F49EF1B5C2C6A5841AD7F35DE35D0B9EA29A2E Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa Signing time: Mon 18 May 2026 09:21:31 +0000 ROA not before: Mon 18 May 2026 09:16:31 +0000 ROA not after: Mon 17 May 2027 09:21:31 +0000 asID: 139328 IP address blocks: 2602:feda:bf0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 04:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f4:9e:f1:b5:c2:c6:a5:84:1a:d7:f3:5d:e3:5d:0b:9e:a2:9a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:31 2026 GMT Not After : May 17 09:21:31 2027 GMT Subject: CN=2D9D0CC86083DB051B20932F8C2E1ED773F1C525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:ad:4f:ec:6f:ac:9b:71:0f:e5:55:de:c5: 96:1f:df:aa:f1:23:71:c9:e2:b8:75:61:4e:36:4e: 36:fd:cf:f0:9d:f8:b9:8e:fc:ab:b7:d0:54:46:08: 87:10:5f:90:00:f8:ce:50:16:cf:3c:8e:fa:03:2c: ae:e5:f9:93:af:23:b4:fb:07:a9:da:58:62:9d:a6: 56:4f:81:0b:f0:b5:a1:cb:b8:3d:a3:91:f0:67:de: 32:d1:44:3a:73:2c:4e:ed:29:88:49:2b:b7:6b:fa: 03:45:32:22:78:3c:5e:9a:48:10:30:89:65:c8:5d: 30:d3:ab:c1:a8:ed:ae:62:fd:b6:af:23:5c:88:e8: 65:b3:26:f6:f3:af:90:99:22:30:18:9f:87:89:ad: a3:07:f0:ad:d7:aa:72:d9:ac:23:60:f9:e1:96:e5: f9:42:44:60:f0:c9:fa:57:a7:29:11:f3:f5:af:cf: da:3f:42:0f:8a:e1:86:cd:a0:1c:76:ef:b1:eb:ec: ea:16:ec:e1:0e:f3:32:45:4e:78:7c:86:40:e4:b0: 9a:13:5b:06:ce:72:b5:11:a5:0c:62:34:02:cf:c8: f2:62:00:67:fb:ff:0d:6d:9d:46:3f:74:43:6c:5d: c7:27:24:6b:bf:4c:eb:f8:42:04:f4:40:ae:12:bd: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:0C:C8:60:83:DB:05:1B:20:93:2F:8C:2E:1E:D7:73:F1:C5:25 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:bf0::/44 Signature Algorithm: sha256WithRSAEncryption 67:0a:da:62:09:62:fa:c3:56:d6:d4:f9:d1:87:1a:21:e1:3d: 73:55:84:21:5e:d3:72:39:44:dc:ac:ea:f9:92:17:7c:85:0d: 57:03:08:d7:ff:9d:2b:a9:02:f1:30:72:53:43:23:18:7c:52: 4e:d1:40:ff:d9:e8:0b:39:40:90:1e:22:c6:a0:f6:eb:a5:6e: 08:d6:7d:cc:3e:27:7c:8d:9c:86:a9:12:c5:8c:85:af:e7:13: ba:9e:01:20:6f:b5:1b:8f:e7:69:c9:ce:4d:fd:05:1f:02:c7: 92:ec:21:48:c3:69:47:14:b4:12:ce:3f:2b:92:0d:66:4b:7a: f6:b0:8d:ef:f6:a5:bc:19:a6:2c:bc:be:c4:2c:44:d0:a8:f1: dd:e2:56:7d:88:bd:18:ac:86:f7:27:1f:36:29:29:1b:3e:4a: 92:b5:c6:aa:60:18:53:ef:11:e2:23:a2:17:82:06:0c:ff:c4: 05:20:78:32:b6:b2:95:89:5a:9b:25:eb:9b:ea:4b:96:87:0e: e8:30:02:71:66:8c:d1:3c:6c:91:04:1c:7e:a6:68:b9:41:aa: 70:80:d2:10:31:d4:14:d8:5c:20:5d:ab:f4:f5:fa:eb:22:49: 75:fd:69:b4:8f:13:31:f7:23:c4:a0:7b:6a:7d:48:16:72:c6: a9:cf:02:1b -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUVPSe8bXCxqWEGtfzXeNdC56imi4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMxWhcNMjcwNTE3MDkyMTMx WjAzMTEwLwYDVQQDEygyRDlEMENDODYwODNEQjA1MUIyMDkzMkY4QzJFMUVENzcz RjFDNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsmtT+xvrJtx D+VV3sWWH9+q8SNxyeK4dWFONk42/c/wnfi5jvyrt9BURgiHEF+QAPjOUBbPPI76 Ayyu5fmTryO0+wep2lhinaZWT4EL8LWhy7g9o5HwZ94y0UQ6cyxO7SmISSu3a/oD RTIieDxemkgQMIllyF0w06vBqO2uYv22ryNciOhlsyb286+QmSIwGJ+Hia2jB/Ct 16py2awjYPnhluX5QkRg8Mn6V6cpEfP1r8/aP0IPiuGGzaAcdu+x6+zqFuzhDvMy RU54fIZA5LCaE1sGznK1EaUMYjQCz8jyYgBn+/8NbZ1GP3RDbF3HJyRrv0zr+EIE 9ECuEr0rZQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC2dDMhgg9sFGyCTL4wuHtdz 8cUlMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjI2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM5MzMzMjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gvwMA0GCSqGSIb3DQEBCwUAA4IBAQBnCtpiCWL6w1bW1PnRhxoh 4T1zVYQhXtNyOUTcrOr5khd8hQ1XAwjX/50rqQLxMHJTQyMYfFJO0UD/2egLOUCQ HiLGoPbrpW4I1n3MPid8jZyGqRLFjIWv5xO6ngEgb7Ubj+dpyc5N/QUfAseS7CFI w2lHFLQSzj8rkg1mS3r2sI3v9qW8GaYsvL7ELETQqPHd4lZ9iL0YrIb3Jx82KSkb PkqStcaqYBhT7xHiI6IXggYM/8QFIHgytrKViVqbJeub6kuWhw7oMAJxZozRPGyR BBx+pmi5QapwgNIQMdQU2FwgXav09frrIkl1/Wm0jxMx9yPEoHtqfUgWcsapzwIb -----END CERTIFICATE-----Generated at Sat May 23 20:12:55 2026 by rpki-client