$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa File: 323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa (raw, json) Hash identifier: dOoUCFcxvLA+WzV4HgrxNksZlU+Vis7rmG2ld6M6SnY= Subject key identifier: C8:96:C8:98:C7:F7:52:7B:7D:1C:EE:11:40:A8:15:4F:5E:B6:AD:F1 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 5BAEF943B1A4D10646AB9922FF0C1424193457AA Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa Signing time: Mon 18 May 2026 09:21:34 +0000 ROA not before: Mon 18 May 2026 09:16:34 +0000 ROA not after: Mon 17 May 2027 09:21:34 +0000 asID: 212359 IP address blocks: 2602:feda:c10::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ae:f9:43:b1:a4:d1:06:46:ab:99:22:ff:0c:14:24:19:34:57:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:34 2026 GMT Not After : May 17 09:21:34 2027 GMT Subject: CN=C896C898C7F7527B7D1CEE1140A8154F5EB6ADF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:0d:e2:6f:f0:cd:e6:a2:e2:a6:22:0a:68: 25:91:70:b0:8c:d1:fa:ea:34:4e:a9:c5:1e:f6:de: 4c:16:e1:52:08:fe:b0:8b:a5:93:e6:38:86:8a:26: 23:66:a5:46:34:f9:96:b2:b0:7c:95:65:3e:bc:b7: 5d:7b:f2:6d:4d:46:cf:e9:1a:27:9d:8a:68:aa:27: 7e:3d:65:39:de:56:93:a6:3f:36:b9:c1:99:65:e4: 49:75:b3:af:6d:bd:9b:d1:b6:d4:de:48:b4:38:9f: 42:76:fd:e1:45:e6:59:ae:8a:97:51:44:0e:f3:2e: 75:ba:f1:2e:b8:5b:30:67:59:cf:db:cc:ef:d7:68: 79:74:ef:86:2c:25:3d:2f:0d:79:f5:65:a2:4d:f0: 70:75:b6:1d:b6:22:cd:8f:6e:01:bd:a4:60:03:fe: 55:f4:08:ea:4b:cf:18:b0:ee:13:73:54:e3:53:cf: 95:e1:42:0e:d4:ab:8d:30:84:cc:2d:ae:bd:aa:0d: a4:1f:de:2b:04:1b:98:f3:17:ae:5c:10:0d:65:f7: 4e:bb:c8:17:5d:8a:bc:cc:0c:4c:b3:7e:67:cc:d4: f2:83:a2:3a:51:4b:18:86:8b:4c:66:9a:09:70:27: 56:25:dc:26:d0:2b:44:c4:64:19:ac:d7:35:9c:3c: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:96:C8:98:C7:F7:52:7B:7D:1C:EE:11:40:A8:15:4F:5E:B6:AD:F1 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c10::/44 Signature Algorithm: sha256WithRSAEncryption a7:74:66:e3:0b:39:03:fc:78:d2:8d:e4:28:78:61:69:9e:6c: dc:35:1c:ac:2e:98:68:8a:c2:d0:d2:58:6e:8c:ab:fc:69:5e: 7b:da:74:04:92:63:61:54:84:85:c6:e5:99:a9:43:91:1c:73: c9:70:ce:10:08:be:4b:8d:86:08:a9:eb:a4:60:67:96:d5:dc: bf:b9:5d:a2:28:92:e0:8a:38:f6:d2:df:23:96:9d:f0:d1:78: d5:26:8e:9e:c5:47:5b:c0:2d:26:01:57:3e:7f:27:b7:83:db: c3:05:53:8c:9e:71:64:53:14:97:28:a4:22:7c:65:0e:4b:05: 2e:cf:f7:0d:6f:d0:d9:9b:4c:c9:83:ec:bc:00:81:99:da:08: 97:43:5b:0c:7f:f9:f8:22:7c:81:1f:ea:fe:6f:38:c3:4b:49: ac:8f:e7:45:d7:ba:70:2b:1b:28:b9:19:a2:65:45:7e:8d:f4: 46:fe:0b:da:02:72:8c:6a:fc:8b:55:c4:20:46:e0:9e:24:c2: 3e:3e:c3:b7:2e:f5:fb:0d:38:14:6e:c7:79:e8:5f:68:5b:d0: a4:81:fe:53:3a:cf:02:52:6d:08:f3:42:aa:18:f3:54:31:16: 0d:09:bb:b8:71:ed:53:4d:cc:d2:44:7a:b6:3f:4a:3e:75:c8: 9d:84:68:48 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUW675Q7Gk0QZGq5ki/wwUJBk0V6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM0WhcNMjcwNTE3MDkyMTM0 WjAzMTEwLwYDVQQDEyhDODk2Qzg5OEM3Rjc1MjdCN0QxQ0VFMTE0MEE4MTU0RjVF QjZBREYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9sN4m/wzeai 4qYiCmglkXCwjNH66jROqcUe9t5MFuFSCP6wi6WT5jiGiiYjZqVGNPmWsrB8lWU+ vLdde/JtTUbP6RonnYpoqid+PWU53laTpj82ucGZZeRJdbOvbb2b0bbU3ki0OJ9C dv3hReZZroqXUUQO8y51uvEuuFswZ1nP28zv12h5dO+GLCU9Lw159WWiTfBwdbYd tiLNj24BvaRgA/5V9AjqS88YsO4Tc1TjU8+V4UIO1KuNMITMLa69qg2kH94rBBuY 8xeuXBANZfdOu8gXXYq8zAxMs35nzNTyg6I6UUsYhotMZpoJcCdWJdwm0CtExGQZ rNc1nDxawwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMiWyJjH91J7fRzuEUCoFU9e tq3xMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzMzNTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gwQMA0GCSqGSIb3DQEBCwUAA4IBAQCndGbjCzkD/HjSjeQoeGFp nmzcNRysLphoisLQ0lhujKv8aV572nQEkmNhVISFxuWZqUORHHPJcM4QCL5LjYYI qeukYGeW1dy/uV2iKJLgijj20t8jlp3w0XjVJo6exUdbwC0mAVc+fye3g9vDBVOM nnFkUxSXKKQifGUOSwUuz/cNb9DZm0zJg+y8AIGZ2giXQ1sMf/n4InyBH+r+bzjD S0msj+dF17pwKxsouRmiZUV+jfRG/gvaAnKMavyLVcQgRuCeJMI+PsO3LvX7DTgU bsd56F9oW9Ckgf5TOs8CUm0I80KqGPNUMRYNCbu4ce1TTczSRHq2P0o+dcidhGhI -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:58 2026 by rpki-client