$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa File: 323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa (raw, json) Hash identifier: bZGqMsPSpY+AM2Ld8mc3IUzhlAJfuMSlaXZTCOkaTc8= Subject key identifier: 39:B1:BF:31:1F:13:BC:57:F3:51:DA:FB:79:53:5F:66:35:3C:BB:5C Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 0FD3EF92B1004DDE24AB101A7994684A66DFCCC7 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa Signing time: Mon 18 May 2026 09:21:33 +0000 ROA not before: Mon 18 May 2026 09:16:33 +0000 ROA not after: Mon 17 May 2027 09:21:33 +0000 asID: 147028 IP address blocks: 2602:feda:e30::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d3:ef:92:b1:00:4d:de:24:ab:10:1a:79:94:68:4a:66:df:cc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:33 2026 GMT Not After : May 17 09:21:33 2027 GMT Subject: CN=39B1BF311F13BC57F351DAFB79535F66353CBB5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:ef:8f:65:fc:dc:96:28:08:39:94:af:18: 18:77:3f:be:8f:7c:42:96:46:f8:5c:9c:62:55:2e: 09:6e:13:b1:61:f4:b8:5d:93:fe:b2:1a:f6:a2:34: 78:a2:c3:ae:27:a2:a7:d1:d2:10:6d:47:ea:6d:ad: 52:4a:38:94:bb:0b:6b:97:e0:68:9b:ed:fc:f5:44: 29:bc:96:6e:24:c0:ce:e9:e7:c5:70:bb:6f:7b:c4: 86:ac:16:03:a6:c8:b3:1c:70:22:1f:79:16:82:fd: c3:86:63:d6:f8:bf:a0:f3:2e:19:02:27:1d:fc:a6: 2b:d9:c9:6c:3f:26:1d:b3:fd:62:82:e7:60:e6:25: 09:fb:b8:c8:b6:b4:dc:6f:96:bf:ad:7b:8d:ed:0a: 47:3d:cf:04:89:52:fe:3f:c7:ca:99:6f:4b:fb:26: a0:89:ab:d7:ab:b4:d8:67:e7:08:5a:ea:da:35:aa: f3:eb:95:7b:0e:e3:3e:eb:ae:bb:34:2a:19:f8:9a: fc:07:db:2b:cf:81:1e:82:4b:5e:29:05:e5:ba:55: e0:e4:51:15:70:c2:b8:cc:bc:20:03:4d:87:88:d5: 42:d6:b2:91:39:0f:eb:6b:50:a4:d4:38:aa:54:f3: ac:c3:73:70:aa:4c:d9:cd:da:39:85:ec:64:9a:e9: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:BF:31:1F:13:BC:57:F3:51:DA:FB:79:53:5F:66:35:3C:BB:5C X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e30::/44 Signature Algorithm: sha256WithRSAEncryption 34:9a:2c:4a:f1:ab:3e:06:61:44:19:a1:7d:7d:6b:50:f8:c6: c6:0d:fe:1e:94:70:3a:21:64:d9:47:3a:8b:34:c8:9f:f9:de: a8:07:c6:5a:2d:72:7b:60:16:b6:3a:1c:3f:01:db:6f:9a:67: 6d:69:38:91:6d:39:c3:55:21:fc:1c:fc:3c:5d:a6:55:26:2e: dc:62:3a:46:7c:9e:5a:58:cc:77:ac:2b:a8:84:d0:8a:49:18: 7a:03:ac:34:7a:7d:2a:f3:dd:49:9d:49:3a:92:1b:22:e6:92: 57:c0:c2:2d:0f:49:8f:cd:fb:e9:d7:28:e6:b2:6a:c4:23:b6: f4:fc:80:39:a5:bf:fe:eb:ee:6b:b4:9c:82:1d:e3:06:74:79: 34:dd:e6:63:1c:5a:54:ff:2c:61:6b:9b:35:50:8c:8d:3f:49: 6c:06:1f:04:05:34:ea:89:30:a7:f4:b2:9d:59:61:7a:b8:76: 42:70:2b:fc:5c:30:6b:dc:a0:54:28:52:4d:0c:ba:cb:2f:9f: 11:af:45:83:79:c1:71:54:e9:8e:37:3a:4c:73:fe:54:d0:9e: dc:35:27:76:da:4d:41:00:b2:e0:8d:2e:76:60:4c:98:ce:13: 37:0a:14:1a:2c:db:8d:27:72:92:d6:07:23:56:89:fb:7d:78: 81:48:2d:9b -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUD9PvkrEATd4kqxAaeZRoSmbfzMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMzWhcNMjcwNTE3MDkyMTMz WjAzMTEwLwYDVQQDEygzOUIxQkYzMTFGMTNCQzU3RjM1MURBRkI3OTUzNUY2NjM1 M0NCQjVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw67vj2X83JYo CDmUrxgYdz++j3xClkb4XJxiVS4JbhOxYfS4XZP+shr2ojR4osOuJ6Kn0dIQbUfq ba1SSjiUuwtrl+Bom+389UQpvJZuJMDO6efFcLtve8SGrBYDpsizHHAiH3kWgv3D hmPW+L+g8y4ZAicd/KYr2clsPyYds/1igudg5iUJ+7jItrTcb5a/rXuN7QpHPc8E iVL+P8fKmW9L+yagiavXq7TYZ+cIWuraNarz65V7DuM+6667NCoZ+Jr8B9srz4Ee gkteKQXlulXg5FEVcMK4zLwgA02HiNVC1rKROQ/ra1Ck1DiqVPOsw3NwqkzZzdo5 hexkmunJ3QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDmxvzEfE7xX81Ha+3lTX2Y1 PLtcMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM3MzAzMjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g4wMA0GCSqGSIb3DQEBCwUAA4IBAQA0mixK8as+BmFEGaF9fWtQ +MbGDf4elHA6IWTZRzqLNMif+d6oB8ZaLXJ7YBa2Ohw/AdtvmmdtaTiRbTnDVSH8 HPw8XaZVJi7cYjpGfJ5aWMx3rCuohNCKSRh6A6w0en0q891JnUk6khsi5pJXwMIt D0mPzfvp1yjmsmrEI7b0/IA5pb/+6+5rtJyCHeMGdHk03eZjHFpU/yxha5s1UIyN P0lsBh8EBTTqiTCn9LKdWWF6uHZCcCv8XDBr3KBUKFJNDLrLL58Rr0WDecFxVOmO NzpMc/5U0J7cNSd22k1BALLgjS52YEyYzhM3ChQaLNuNJ3KS1gcjVon7fXiBSC2b -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:57 2026 by rpki-client