$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa File: 323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa (raw, json) Hash identifier: 98pGEvlaZpAYqU5f7ihXvwpGzz4/+g5Ca3zn1eE1GWE= Subject key identifier: DD:C1:FA:11:E1:8B:82:49:D3:A4:4E:4A:C0:62:2C:95:B7:61:A0:6E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2397E6420F216F42831AD0E8B599DF608C98E2AA Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa Signing time: Mon 18 May 2026 09:21:42 +0000 ROA not before: Mon 18 May 2026 09:16:42 +0000 ROA not after: Mon 17 May 2027 09:21:42 +0000 asID: 212580 IP address blocks: 2602:feda:c40::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 17:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:97:e6:42:0f:21:6f:42:83:1a:d0:e8:b5:99:df:60:8c:98:e2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:42 2026 GMT Not After : May 17 09:21:42 2027 GMT Subject: CN=DDC1FA11E18B8249D3A44E4AC0622C95B761A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:4c:17:4d:2d:bd:c4:14:c4:e2:fd:28:c0: 15:db:0a:bf:c2:5e:f9:ad:c6:b4:09:71:f5:d5:61: 32:75:64:4d:40:d3:f6:d0:fe:c2:0a:41:87:c1:d7: 53:33:ce:ed:6a:16:7d:33:d3:a4:c7:a2:79:52:7f: ca:35:95:e6:a4:26:5c:b2:ee:a0:1c:ba:47:83:f7: b2:54:36:de:f5:2e:b7:85:26:3e:b6:ab:2a:63:59: a3:41:96:52:b8:43:5f:24:a5:2d:03:6e:57:fb:6f: 22:94:64:9f:0f:74:56:be:04:a9:be:93:05:6c:2b: f8:69:3e:7f:45:ce:62:3c:cb:d9:05:50:e1:6f:61: 0f:96:50:86:16:56:72:63:21:43:20:3b:0c:af:75: fd:2a:3b:67:b5:cb:75:1d:cd:01:93:34:8d:26:53: 77:d7:53:f0:ed:23:7d:3e:4b:19:8d:3d:0e:f3:e0: 18:8a:87:43:bd:c9:6a:2e:b5:6e:50:d9:da:cd:f0: 0e:1e:39:19:42:21:d8:86:cd:e6:47:6c:fc:f4:f0: dc:96:54:78:59:28:71:4c:db:88:ca:82:99:86:0b: cb:6f:21:b0:8c:80:04:df:75:53:f3:91:cf:fb:65: f7:b2:c7:67:41:0a:2b:1c:13:d3:b0:13:e3:98:30: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C1:FA:11:E1:8B:82:49:D3:A4:4E:4A:C0:62:2C:95:B7:61:A0:6E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c40::/44 Signature Algorithm: sha256WithRSAEncryption a9:45:5a:9a:d5:2a:e8:a6:05:01:53:f4:51:73:69:72:36:09: 3c:d4:ca:72:39:3f:e9:e9:8f:0a:4a:c3:bf:c6:e7:fa:a5:31: 1c:f0:b0:16:ab:69:0e:86:95:91:bf:2b:6f:de:1f:99:68:e7: 8a:3f:f2:40:24:14:63:10:eb:24:60:17:21:2a:e2:65:e9:d0: 8d:09:04:73:fd:6e:47:08:77:6c:bf:7e:0e:4a:69:14:94:c6: ed:47:b5:2c:b6:ac:a6:07:9d:cc:82:d1:fa:df:c7:f4:32:2f: 31:a7:1e:68:dd:84:9c:9b:b7:3e:bb:06:97:ef:8c:9f:97:31: 0b:ff:d0:b6:c1:cf:a0:21:c1:08:1d:ee:8a:79:aa:fc:ce:7c: 11:6f:e0:10:34:f9:4b:9b:c3:0a:04:30:4a:c8:26:15:fb:75: 2c:d3:4c:11:73:be:be:9b:e1:5f:40:b8:f8:72:f3:be:c1:18: 7c:f8:75:9b:6a:39:0a:a1:31:92:53:7d:d3:5d:e1:66:a0:3d: eb:18:8f:8f:de:79:b0:06:cb:e1:27:e5:65:52:75:7a:82:bf: d0:ba:e0:ec:9d:26:3a:7c:04:d2:47:11:03:bb:b1:c4:be:45: c9:52:45:18:65:5d:8e:c6:91:71:ea:ef:74:31:19:97:c3:f2: 1b:ad:e7:97 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUI5fmQg8hb0KDGtDotZnfYIyY4qowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQyWhcNMjcwNTE3MDkyMTQy WjAzMTEwLwYDVQQDEyhEREMxRkExMUUxOEI4MjQ5RDNBNDRFNEFDMDYyMkM5NUI3 NjFBMDZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5hMF00tvcQU xOL9KMAV2wq/wl75rca0CXH11WEydWRNQNP20P7CCkGHwddTM87tahZ9M9Okx6J5 Un/KNZXmpCZcsu6gHLpHg/eyVDbe9S63hSY+tqsqY1mjQZZSuENfJKUtA25X+28i lGSfD3RWvgSpvpMFbCv4aT5/Rc5iPMvZBVDhb2EPllCGFlZyYyFDIDsMr3X9Kjtn tct1Hc0BkzSNJlN311Pw7SN9PksZjT0O8+AYiodDvclqLrVuUNnazfAOHjkZQiHY hs3mR2z89PDcllR4WShxTNuIyoKZhgvLbyGwjIAE33VT85HP+2X3ssdnQQorHBPT sBPjmDDb1QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFN3B+hHhi4JJ06ROSsBiLJW3 YaBuMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzUzODMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxAMA0GCSqGSIb3DQEBCwUAA4IBAQCpRVqa1SropgUBU/RRc2ly Ngk81MpyOT/p6Y8KSsO/xuf6pTEc8LAWq2kOhpWRvytv3h+ZaOeKP/JAJBRjEOsk YBchKuJl6dCNCQRz/W5HCHdsv34OSmkUlMbtR7UstqymB53MgtH638f0Mi8xpx5o 3YScm7c+uwaX74yflzEL/9C2wc+gIcEIHe6Kear8znwRb+AQNPlLm8MKBDBKyCYV +3Us00wRc76+m+FfQLj4cvO+wRh8+HWbajkKoTGSU33TXeFmoD3rGI+P3nmwBsvh J+VlUnV6gr/QuuDsnSY6fATSRxEDu7HEvkXJUkUYZV2OxpFx6u90MRmXw/IbreeX -----END CERTIFICATE-----Generated at Sun May 31 10:02:37 2026 by rpki-client