$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa File: 323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa (raw, json) Hash identifier: Qsrj4K+CuAytoe2vEcNbxSE/Eh6trBRpfyegyosDjN8= Subject key identifier: 65:7B:AE:E5:2B:54:15:55:6D:AD:35:4F:24:93:FA:3E:1D:B8:74:D7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2BA4E65F12B3684BC97320DC2F3F8EC70D885975 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa Signing time: Mon 18 May 2026 09:21:35 +0000 ROA not before: Mon 18 May 2026 09:16:35 +0000 ROA not after: Mon 17 May 2027 09:21:35 +0000 asID: 212237 IP address blocks: 2602:feda:d20::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a4:e6:5f:12:b3:68:4b:c9:73:20:dc:2f:3f:8e:c7:0d:88:59:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:35 2026 GMT Not After : May 17 09:21:35 2027 GMT Subject: CN=657BAEE52B5415556DAD354F2493FA3E1DB874D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:84:2f:ce:81:18:a8:89:53:f1:2b:2c:8a: 23:c3:10:9a:23:e2:0a:f3:89:6f:43:d7:1c:a0:48: 7c:2c:c0:08:a8:de:01:f4:2e:82:ab:5f:ad:83:f6: 1b:81:19:95:e4:80:de:10:dc:12:60:5c:a9:3b:d8: d0:25:9a:92:39:86:59:8b:68:c8:25:35:27:70:fc: d5:cf:63:b8:74:e8:69:4c:da:2a:17:56:61:ad:38: 84:96:3b:3b:7f:75:9e:de:6d:a7:f8:50:9a:bc:2c: b9:f2:62:72:2a:ae:6f:52:29:aa:11:3c:33:44:ca: 9f:59:01:f6:bb:91:3f:fb:91:6f:4f:5c:ce:b2:9b: f0:64:c6:4f:18:b9:40:31:fa:4b:3a:97:ab:0b:3b: 9a:2f:16:c0:71:79:33:a1:61:08:50:91:f4:7e:69: 0a:ba:d9:f7:7a:04:97:b7:a0:17:34:b1:71:82:8b: d0:c5:40:b5:6a:5d:f7:18:09:3e:d9:d4:7b:af:4a: d0:fb:5b:05:87:a5:ee:f0:14:0c:46:91:63:64:83: 74:17:62:14:fc:89:4f:f2:6b:3f:6a:de:5d:be:eb: c1:72:33:21:10:dc:be:e9:7c:0b:0f:8e:cd:f3:b3: ee:ba:28:5b:21:9f:97:7a:27:28:d6:7a:9f:8a:61: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:AE:E5:2B:54:15:55:6D:AD:35:4F:24:93:FA:3E:1D:B8:74:D7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:d20::/45 Signature Algorithm: sha256WithRSAEncryption 44:46:d4:60:f8:b8:61:47:7b:e6:fc:41:b6:27:66:76:82:7a: c5:1f:8f:e0:36:be:45:12:d8:92:26:54:10:82:79:c4:48:62: 95:3d:5c:57:34:4e:b8:cc:5f:4e:ce:d4:88:02:42:77:d0:9c: c2:6f:ee:ef:40:35:2c:14:02:53:30:23:83:eb:d2:62:65:1b: d1:b9:e8:b3:03:87:ef:6e:65:c6:3a:12:37:cd:f1:65:1f:cc: ac:05:ec:73:6b:43:2b:f8:19:db:c0:c7:95:57:74:9e:dc:76: 01:e0:0f:fd:6f:da:7f:e3:22:31:b1:03:44:e9:60:8e:76:0c: d3:54:03:17:ce:5c:80:69:2a:f7:76:c1:35:a3:be:fe:2b:18: f9:26:ac:c2:3e:f7:b0:63:c5:4a:e4:29:40:50:a2:5e:c9:21: 54:b7:23:1e:f8:7a:8b:ee:19:50:ad:cb:6f:d5:5a:50:5d:e1: 7f:29:54:51:bf:08:1a:c1:43:2d:09:7d:2d:7c:9e:1c:b5:69: d9:76:9d:1e:4a:7c:4b:5a:f5:fc:02:b5:fb:c7:c5:35:71:95: 7a:e1:55:fc:08:2f:a8:23:d1:cb:f2:f1:d2:af:82:33:68:5f: 0a:eb:b8:97:2b:4d:a7:63:d1:c9:3a:b1:ee:70:33:d0:09:cf: a0:93:fb:95 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUK6TmXxKzaEvJcyDcLz+Oxw2IWXUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM1WhcNMjcwNTE3MDkyMTM1 WjAzMTEwLwYDVQQDEyg2NTdCQUVFNTJCNTQxNTU1NkRBRDM1NEYyNDkzRkEzRTFE Qjg3NEQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlSEL86BGKiJ U/ErLIojwxCaI+IK84lvQ9ccoEh8LMAIqN4B9C6Cq1+tg/YbgRmV5IDeENwSYFyp O9jQJZqSOYZZi2jIJTUncPzVz2O4dOhpTNoqF1ZhrTiEljs7f3We3m2n+FCavCy5 8mJyKq5vUimqETwzRMqfWQH2u5E/+5FvT1zOspvwZMZPGLlAMfpLOperCzuaLxbA cXkzoWEIUJH0fmkKutn3egSXt6AXNLFxgovQxUC1al33GAk+2dR7r0rQ+1sFh6Xu 8BQMRpFjZIN0F2IU/IlP8ms/at5dvuvBcjMhENy+6XwLD47N87PuuihbIZ+Xeico 1nqfimGn6QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGV7ruUrVBVVba01TyST+j4d uHTXMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQzMjMwM2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzIzMTMyMzIzMzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2g0gMA0GCSqGSIb3DQEBCwUAA4IBAQBERtRg+LhhR3vm/EG2J2Z2 gnrFH4/gNr5FEtiSJlQQgnnESGKVPVxXNE64zF9OztSIAkJ30JzCb+7vQDUsFAJT MCOD69JiZRvRueizA4fvbmXGOhI3zfFlH8ysBexza0Mr+BnbwMeVV3Se3HYB4A/9 b9p/4yIxsQNE6WCOdgzTVAMXzlyAaSr3dsE1o77+Kxj5JqzCPvewY8VK5ClAUKJe ySFUtyMe+HqL7hlQrctv1VpQXeF/KVRRvwgawUMtCX0tfJ4ctWnZdp0eSnxLWvX8 ArX7x8U1cZV64VX8CC+oI9HL8vHSr4IzaF8K67iXK02nY9HJOrHucDPQCc+gk/uV -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:57 2026 by rpki-client