$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa File: 323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa (raw, json) Hash identifier: /tItymp5oMdqm2otfc05YNbJOUlbV6V6KBuTd0GbFGg= Subject key identifier: 3E:F1:99:E0:7F:D6:E3:BA:88:45:89:A7:FD:A5:B2:12:92:CA:DF:04 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 51D80FA10B2CF317BB3420F797CF39C93F75D53F Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa Signing time: Mon 18 May 2026 09:21:33 +0000 ROA not before: Mon 18 May 2026 09:16:33 +0000 ROA not after: Mon 17 May 2027 09:21:33 +0000 asID: 142055 IP address blocks: 2602:feda:da0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d8:0f:a1:0b:2c:f3:17:bb:34:20:f7:97:cf:39:c9:3f:75:d5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:33 2026 GMT Not After : May 17 09:21:33 2027 GMT Subject: CN=3EF199E07FD6E3BA884589A7FDA5B21292CADF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:c2:ed:32:b3:5e:37:ad:3d:10:12:d1:79: cc:1e:aa:0a:6d:60:0c:54:56:c7:a8:fb:4a:16:ab: 0f:dd:06:52:2b:0d:37:3c:1b:a4:bb:5b:cb:80:4c: bb:c9:5c:0a:e8:01:ec:9a:b3:54:82:b1:fe:ab:e0: 60:1c:95:d4:bb:ae:ff:0e:9c:6c:b3:75:ca:fb:a1: ac:3e:4f:4f:ca:68:52:a5:bd:c3:44:d6:f5:b2:25: bd:9e:fb:87:86:5d:c4:fa:5e:b5:f8:6c:31:fc:fe: cc:77:4a:68:36:bc:aa:ad:44:56:7d:db:04:11:b3: 2d:f8:96:79:57:41:00:7a:34:12:24:f6:ac:11:eb: b3:69:e5:85:4f:c6:8b:65:76:46:15:4c:3e:be:4c: c1:cb:60:fe:88:12:6e:e5:0f:60:c1:45:18:71:0a: e7:fd:3a:a1:0d:3b:a1:35:14:ef:d2:6c:be:eb:50: 7f:da:6d:8c:73:16:b9:94:73:ad:71:cf:59:46:e6: 61:91:36:54:6c:48:bf:76:21:ed:d5:a4:de:bd:22: 10:f6:50:dc:32:45:be:59:72:3a:7a:48:97:ae:9e: 38:1d:ae:97:e4:01:53:58:4f:d1:d2:66:3b:ee:fe: 68:11:51:fb:4b:86:af:25:5a:d1:f7:5f:11:b9:fe: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F1:99:E0:7F:D6:E3:BA:88:45:89:A7:FD:A5:B2:12:92:CA:DF:04 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:da0::/44 Signature Algorithm: sha256WithRSAEncryption 7a:2d:d0:04:d4:23:3a:95:9d:79:7e:ef:2e:40:1b:79:3f:75: 3d:1b:71:08:a2:40:2e:75:92:f9:d3:ca:35:ce:64:fd:cf:df: 5d:b6:d1:14:b6:2c:fd:a0:a7:f7:2b:0f:16:71:94:ce:48:6e: 13:49:da:09:6b:c6:13:b4:ed:17:f1:1d:cf:9c:f3:d1:13:45: 06:4c:4a:99:f7:c0:6e:36:04:c5:35:3d:d5:d9:ec:a8:f4:f9: cd:91:45:c7:27:5d:7a:26:44:54:cf:d1:38:fc:35:49:52:9a: 78:40:74:f6:80:60:68:e5:df:6b:47:bd:70:4e:ca:88:b3:f7: 5e:3f:6a:af:31:ee:c1:d8:ef:6b:c8:c6:78:ea:5c:d6:30:a7: d9:6b:d1:08:ef:de:01:9f:35:3a:e8:07:19:44:75:e5:7c:e2: 3d:0d:af:dc:c7:70:f8:a0:7a:90:32:41:be:1f:80:62:e0:89: f7:25:2e:6a:f3:d4:e1:c7:53:f4:63:57:58:7b:d2:2f:31:6e: f2:ad:df:ee:70:1d:50:36:dd:c4:b2:52:d2:14:c3:c4:5a:55: e3:23:85:9f:c4:7b:96:18:6d:7f:c3:7d:72:f1:ed:30:58:b2: 21:93:2d:46:92:d3:0c:03:59:f1:63:89:f4:69:35:95:7f:d9: 3e:21:a0:9c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUUdgPoQss8xe7NCD3l885yT911T8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMzWhcNMjcwNTE3MDkyMTMz WjAzMTEwLwYDVQQDEygzRUYxOTlFMDdGRDZFM0JBODg0NTg5QTdGREE1QjIxMjky Q0FERjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrzC7TKzXjet PRAS0XnMHqoKbWAMVFbHqPtKFqsP3QZSKw03PBuku1vLgEy7yVwK6AHsmrNUgrH+ q+BgHJXUu67/Dpxss3XK+6GsPk9PymhSpb3DRNb1siW9nvuHhl3E+l61+Gwx/P7M d0poNryqrURWfdsEEbMt+JZ5V0EAejQSJPasEeuzaeWFT8aLZXZGFUw+vkzBy2D+ iBJu5Q9gwUUYcQrn/TqhDTuhNRTv0my+61B/2m2Mcxa5lHOtcc9ZRuZhkTZUbEi/ diHt1aTevSIQ9lDcMkW+WXI6ekiXrp44Ha6X5AFTWE/R0mY77v5oEVH7S4avJVrR 918Ruf7JcQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFD7xmeB/1uO6iEWJp/2lshKS yt8EMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjQ2MTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzAzNTM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g2gMA0GCSqGSIb3DQEBCwUAA4IBAQB6LdAE1CM6lZ15fu8uQBt5 P3U9G3EIokAudZL508o1zmT9z99dttEUtiz9oKf3Kw8WcZTOSG4TSdoJa8YTtO0X 8R3PnPPRE0UGTEqZ98BuNgTFNT3V2eyo9PnNkUXHJ116JkRUz9E4/DVJUpp4QHT2 gGBo5d9rR71wTsqIs/deP2qvMe7B2O9ryMZ46lzWMKfZa9EI794BnzU66AcZRHXl fOI9Da/cx3D4oHqQMkG+H4Bi4In3JS5q89Thx1P0Y1dYe9IvMW7yrd/ucB1QNt3E slLSFMPEWlXjI4WfxHuWGG1/w31y8e0wWLIhky1GktMMA1nxY4n0aTWVf9k+IaCc -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:11 2026 by rpki-client