$ rpki-client -vvvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa File: 323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa (raw, json) Hash identifier: gx9CYnBC6OWxSeKq5RQApz0891ET1MOSQ3CLr8bkGTY= Subject key identifier: 1E:ED:D4:7A:87:92:35:73:8D:1E:03:99:76:9F:DC:C5:82:45:4B:F0 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 64C61F670B341D964864DDAD098DEB887DB40C05 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa Signing time: Sun 04 Oct 2026 15:27:05 +0000 ROA not before: Sun 04 Oct 2026 15:22:05 +0000 ROA not after: Sun 03 Oct 2027 15:27:05 +0000 asID: 150289 IP address blocks: 2602:feda:e80::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:1f:67:0b:34:1d:96:48:64:dd:ad:09:8d:eb:88:7d:b4:0c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Oct 4 15:22:05 2026 GMT Not After : Oct 3 15:27:05 2027 GMT Subject: CN=1EEDD47A879235738D1E0399769FDCC582454BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:06:20:78:f8:d6:23:cd:12:6b:9f:1c:42:24: 1f:b0:e8:54:f2:47:10:e4:2e:11:19:a2:e3:9b:3a: 71:ef:45:4e:50:f1:d7:1e:35:a0:2e:7f:6d:04:de: 00:be:0f:c0:2c:ec:62:38:bf:a8:95:54:d5:d1:d7: ed:6f:df:e4:e8:f3:02:b9:9e:6b:39:a5:7a:89:0b: ba:20:dc:e2:f1:57:9a:24:d0:37:6e:8b:f9:ab:64: c8:3c:56:88:15:82:da:30:15:f9:d2:72:12:22:c8: f3:4f:14:e0:05:82:75:4c:8c:1d:c1:dd:6f:ba:97: a2:8a:69:8b:53:94:ba:5f:35:30:8e:42:1a:42:72: 04:f6:36:2a:05:4f:fb:fa:ce:2e:ea:b2:95:ac:2a: 5c:d9:c1:7f:f3:cf:e8:91:be:fd:46:77:a0:fe:17: 12:31:9c:19:79:d4:7f:53:c2:2e:36:a7:99:34:d9: ad:cb:a4:3d:3f:c1:e7:66:47:e4:1e:2b:07:5a:42: 17:b0:17:29:9f:27:21:13:8e:53:01:0f:b6:99:ed: 4e:95:8a:e5:5a:16:3e:c2:76:d2:f5:94:ad:d7:ea: 58:85:42:33:59:3e:b5:4a:de:cd:47:7e:de:7a:4a: db:66:6e:3d:05:a9:44:0c:ff:5a:12:58:85:a4:94: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:D4:7A:87:92:35:73:8D:1E:03:99:76:9F:DC:C5:82:45:4B:F0 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6538303a3a2f34342d3438203d3e20313530323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:e80::/44 Signature Algorithm: sha256WithRSAEncryption 74:a2:2d:9c:3b:2b:6a:b6:9d:b3:fb:34:6f:30:85:bb:88:75: 10:3d:4d:b1:ca:9d:cb:3b:ff:38:70:25:fd:8e:8a:f4:aa:e2: 40:39:c0:a8:b4:94:16:b3:af:06:a5:81:af:db:d0:9d:12:96: a8:36:f9:ab:39:0e:4a:f1:86:76:ba:28:b5:b3:0b:b9:7f:d1: ef:c8:11:ea:76:08:f4:c2:98:d9:df:d1:96:18:4a:7e:6f:bf: f4:40:5e:17:62:02:36:d7:f5:8a:c9:cf:3f:11:29:7f:38:23: b1:f9:ac:9f:30:da:66:eb:91:d8:b6:fa:96:43:04:0b:90:16: eb:83:46:ff:f4:d4:b5:85:28:a3:99:95:e4:d8:c2:cc:cd:cd: 92:da:5e:87:1b:99:a0:31:01:45:32:29:36:01:9d:80:32:26: 0e:d1:74:2f:04:ba:bc:83:88:56:e7:1b:1a:b5:ff:8d:7f:8b: d5:72:c2:1a:3c:cd:92:ac:97:ab:55:d1:9c:77:18:0b:02:de: dc:5d:04:91:6b:bb:f3:ed:97:35:84:12:c3:4e:88:cb:40:ef: c8:bf:b6:0d:3e:18:ad:23:25:d3:5e:ef:82:c2:6d:c2:8e:ac: cd:1a:0a:ef:f6:f7:ce:fa:50:8a:0e:74:1c:e7:c3:4b:bd:d9: 95:7f:8a:76 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUZMYfZws0HZZIZN2tCY3riH20DAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYxMDA0MTUyMjA1WhcNMjcxMDAzMTUyNzA1 WjAzMTEwLwYDVQQDEygxRUVERDQ3QTg3OTIzNTczOEQxRTAzOTk3NjlGRENDNTgy NDU0QkYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wYgePjWI80S a58cQiQfsOhU8kcQ5C4RGaLjmzpx70VOUPHXHjWgLn9tBN4Avg/ALOxiOL+olVTV 0dftb9/k6PMCuZ5rOaV6iQu6INzi8VeaJNA3bov5q2TIPFaIFYLaMBX50nISIsjz TxTgBYJ1TIwdwd1vupeiimmLU5S6XzUwjkIaQnIE9jYqBU/7+s4u6rKVrCpc2cF/ 88/okb79Rneg/hcSMZwZedR/U8IuNqeZNNmty6Q9P8HnZkfkHisHWkIXsBcpnych E45TAQ+2me1OlYrlWhY+wnbS9ZSt1+pYhUIzWT61St7NR37eekrbZm49BalEDP9a EliFpJTUEwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFB7t1HqHkjVzjR4DmXaf3MWC RUvwMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjUzODMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNTMwMzIzODM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2g6AMA0GCSqGSIb3DQEBCwUAA4IBAQB0oi2cOytqtp2z+zRvMIW7 iHUQPU2xyp3LO/84cCX9jor0quJAOcCotJQWs68GpYGv29CdEpaoNvmrOQ5K8YZ2 uii1swu5f9HvyBHqdgj0wpjZ39GWGEp+b7/0QF4XYgI21/WKyc8/ESl/OCOx+ayf MNpm65HYtvqWQwQLkBbrg0b/9NS1hSijmZXk2MLMzc2S2l6HG5mgMQFFMik2AZ2A MiYO0XQvBLq8g4hW5xsatf+Nf4vVcsIaPM2SrJerVdGcdxgLAt7cXQSRa7vz7Zc1 hBLDTojLQO/Iv7YNPhitIyXTXu+Cwm3CjqzNGgrv9vfO+lCKDnQc58NLvdmVf4p2 -----END CERTIFICATE-----Generated at Wed Oct 21 22:52:09 2026 by rpki-client