$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa File: 323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa (raw, json) Hash identifier: npgMU4QLRTDqhkBVmuNpWUj4cfYMBvlvfoxhcq2fGMw= Subject key identifier: E2:64:7F:72:4A:EF:42:4E:69:4D:EF:D0:19:DF:85:D2:1B:BA:A5:61 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 57DC52A4AADAAAB09A7275C629BE48E8C4AE005D Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa Signing time: Mon 18 May 2026 09:21:42 +0000 ROA not before: Mon 18 May 2026 09:16:42 +0000 ROA not after: Mon 17 May 2027 09:21:42 +0000 asID: 212279 IP address blocks: 2602:feda:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:dc:52:a4:aa:da:aa:b0:9a:72:75:c6:29:be:48:e8:c4:ae:00:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:42 2026 GMT Not After : May 17 09:21:42 2027 GMT Subject: CN=E2647F724AEF424E694DEFD019DF85D21BBAA561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:45:8c:d9:f5:3e:ba:44:96:9a:3f:e8:84: 82:ff:64:ac:c0:9a:91:8f:96:36:9c:d6:66:29:6b: af:30:08:05:bf:10:a7:9f:ce:7a:d5:00:93:6f:4e: 61:6d:5a:6f:21:78:75:79:c2:c5:b0:bc:a1:37:4b: 62:5f:93:a2:6f:ad:3b:04:b0:0f:c6:25:07:75:48: a0:f9:0c:d8:71:74:41:21:b8:fb:8b:83:dc:34:d1: dc:ab:c3:dc:83:84:0a:42:12:49:42:08:00:61:54: 4a:3f:d0:e0:9d:02:aa:f9:4e:0a:df:75:e3:23:6a: 7e:08:ec:22:cd:3f:89:6d:42:cb:68:13:a2:0c:95: 9e:44:8d:aa:ef:bf:1a:dd:fe:55:0b:77:ac:03:01: 50:b6:61:33:5d:58:c8:9c:3a:f9:50:ff:89:0f:11: 83:91:54:be:cc:83:d4:f1:b6:e3:fd:a4:cd:d1:d4: 52:20:2a:20:59:19:de:29:41:8c:89:09:2e:ea:fd: f5:19:e6:56:e4:b3:f2:7b:8a:e0:61:98:2f:42:e9: d9:17:d3:13:ce:e1:05:18:61:85:63:7f:6d:6e:d2: 37:8b:80:b6:22:dc:64:6a:83:73:86:dd:bd:cb:79: eb:58:0c:7a:2d:ef:c8:0f:60:b7:56:05:7a:49:d6: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:64:7F:72:4A:EF:42:4E:69:4D:EF:D0:19:DF:85:D2:1B:BA:A5:61 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c50::/44 Signature Algorithm: sha256WithRSAEncryption 4a:08:4b:6c:b1:53:b7:31:d8:71:b9:22:f1:ef:73:f7:e7:8c: 36:3a:85:2d:a5:92:21:c4:96:95:68:63:a2:60:5a:77:d2:bc: 0d:74:f5:2e:94:93:b0:25:7a:28:aa:73:87:f5:4f:11:80:3f: 51:4c:aa:e9:91:8f:54:9f:c4:47:47:b7:06:54:3e:f7:76:61: a2:b7:cc:34:e1:79:4f:56:cd:3c:55:75:64:81:3b:fc:c0:a5: a0:7f:42:6e:c1:8a:52:42:b5:87:bb:a2:ba:dc:50:1b:a4:74: f0:bc:a3:89:41:fe:e7:b9:17:3f:3c:7c:b0:ee:60:65:1a:40: eb:13:20:0b:a3:b6:b4:fb:ac:98:e6:b5:9d:51:e4:74:ca:d0: c7:a9:98:83:2c:12:91:ce:4c:bd:88:1e:72:0c:61:58:e4:7a: a6:db:b1:05:d6:69:d7:27:72:39:50:3f:6f:b5:40:7e:9b:41: c3:f6:2c:2c:44:d3:e7:0a:4f:e4:8a:09:f4:16:41:ef:82:fb: 94:39:d8:68:a5:63:6e:d9:ff:2f:f7:a5:33:7f:4f:0b:84:66: 9b:23:53:ef:1b:6f:83:35:35:04:2e:eb:23:c3:42:16:9c:3c: d6:42:ea:b9:c1:4f:bc:88:b6:7b:5d:75:d7:ae:15:65:de:ec: bd:42:f4:8a -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUV9xSpKraqrCacnXGKb5I6MSuAF0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQyWhcNMjcwNTE3MDkyMTQy WjAzMTEwLwYDVQQDEyhFMjY0N0Y3MjRBRUY0MjRFNjk0REVGRDAxOURGODVEMjFC QkFBNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HxFjNn1PrpE lpo/6ISC/2SswJqRj5Y2nNZmKWuvMAgFvxCnn8561QCTb05hbVpvIXh1ecLFsLyh N0tiX5Oib607BLAPxiUHdUig+QzYcXRBIbj7i4PcNNHcq8Pcg4QKQhJJQggAYVRK P9DgnQKq+U4K33XjI2p+COwizT+JbULLaBOiDJWeRI2q778a3f5VC3esAwFQtmEz XVjInDr5UP+JDxGDkVS+zIPU8bbj/aTN0dRSICogWRneKUGMiQku6v31GeZW5LPy e4rgYZgvQunZF9MTzuEFGGGFY39tbtI3i4C2ItxkaoNzht29y3nrWAx6Le/ID2C3 VgV6SdZj+wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOJkf3JK70JOaU3v0BnfhdIb uqVhMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzIzNzM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxQMA0GCSqGSIb3DQEBCwUAA4IBAQBKCEtssVO3MdhxuSLx73P3 54w2OoUtpZIhxJaVaGOiYFp30rwNdPUulJOwJXooqnOH9U8RgD9RTKrpkY9Un8RH R7cGVD73dmGit8w04XlPVs08VXVkgTv8wKWgf0JuwYpSQrWHu6K63FAbpHTwvKOJ Qf7nuRc/PHyw7mBlGkDrEyALo7a0+6yY5rWdUeR0ytDHqZiDLBKRzky9iB5yDGFY 5Hqm27EF1mnXJ3I5UD9vtUB+m0HD9iwsRNPnCk/kign0FkHvgvuUOdhopWNu2f8v 96Uzf08LhGabI1PvG2+DNTUELusjw0IWnDzWQuq5wU+8iLZ7XXXXrhVl3uy9QvSK -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:14 2026 by rpki-client