$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa File: 323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa (raw, json) Hash identifier: S5+ZNBrRhJ9NGF4mCIp2k3Hvt8hEXtIGoi+YijOvPNg= Subject key identifier: 20:26:4B:F6:D0:AE:E8:B4:38:D9:03:C0:98:F1:BA:1A:F7:0C:63:FC Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3C374E7B79FB21BAAA823CB9B6FD9249F7184959 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa Signing time: Mon 18 May 2026 09:21:30 +0000 ROA not before: Mon 18 May 2026 09:16:30 +0000 ROA not after: Mon 17 May 2027 09:21:30 +0000 asID: 147308 IP address blocks: 2602:feda:f050::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:37:4e:7b:79:fb:21:ba:aa:82:3c:b9:b6:fd:92:49:f7:18:49:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:30 2026 GMT Not After : May 17 09:21:30 2027 GMT Subject: CN=20264BF6D0AEE8B438D903C098F1BA1AF70C63FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:7a:db:d0:8a:66:94:bc:59:36:90:5b:ee: e8:3f:09:0a:b8:ef:a5:28:72:27:46:78:be:bc:64: 64:a8:a3:33:e9:4b:6d:0d:3f:41:d4:2e:16:ee:99: 25:42:89:8c:bb:47:95:a7:c6:d8:8d:51:73:3c:80: 7b:88:ad:15:90:7d:6f:24:0c:27:4c:f7:5b:f2:9f: 79:9c:ef:c7:4a:11:cb:34:48:d9:77:8f:7f:12:1f: a5:50:47:6f:bc:15:6e:1a:1e:2a:46:50:50:b5:89: ff:31:00:38:df:67:66:9e:3e:de:04:5d:a8:e6:86: ec:65:c3:8b:6d:8a:79:f9:c1:5e:f2:d9:a8:a0:2c: a0:8c:7d:08:2f:c5:51:50:87:00:76:7d:28:63:96: 09:23:3c:3f:10:76:e6:5c:6c:c7:ef:55:eb:ee:bd: 0f:ad:76:8f:98:3d:81:44:3e:2e:a1:36:65:2a:59: bc:e5:4f:b1:6b:be:66:dd:4d:33:85:e3:10:46:b8: 4c:5a:7e:46:3b:94:85:57:b0:68:1c:49:84:f6:2e: e4:1b:bc:ef:b8:9c:f3:03:cf:a4:67:60:75:90:e1: da:8f:04:4c:4e:57:68:9a:f9:22:71:2e:43:19:fb: aa:54:75:9a:84:91:26:cf:6a:5b:f3:00:f0:b5:23: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:4B:F6:D0:AE:E8:B4:38:D9:03:C0:98:F1:BA:1A:F7:0C:63:FC X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f050::/44 Signature Algorithm: sha256WithRSAEncryption 1e:ee:91:a8:fc:55:cb:2a:47:6e:32:b0:b2:b6:ed:ab:0a:db: a1:d4:c7:af:07:e1:38:33:d0:94:5b:05:23:cb:47:cf:3a:7d: 39:23:f8:cf:83:8d:4e:2e:89:6c:75:ba:3b:e8:f4:9b:43:1d: 7e:2e:b6:38:82:78:e9:47:35:1a:08:01:ce:23:c1:85:b6:f6: 26:10:82:41:cc:3b:5d:19:3f:06:c7:1e:a3:47:ee:77:ec:19: 02:f8:32:33:fc:20:b3:5a:b1:7e:7a:cb:f2:c1:d8:5b:15:bc: 42:1f:16:08:12:3d:cd:03:a8:d9:d1:66:b1:12:7b:08:2c:d4: 1f:5d:e7:6e:10:73:eb:bd:64:1a:e7:9f:03:82:1a:7b:a1:be: a3:63:c6:f5:53:ad:e5:43:c4:8e:57:14:49:67:9c:38:82:38: 9f:00:fa:48:9f:f9:e4:4b:06:66:85:25:f2:1d:d0:3e:fc:ad: 8e:3d:28:f2:9a:05:8a:9f:12:39:74:da:4d:72:13:d1:3f:18: f8:cc:17:5e:ce:44:87:63:5d:62:7a:ef:56:68:86:2b:f2:c9: ad:d2:12:04:ed:be:20:3f:42:b0:d2:a1:d2:72:07:eb:89:2a: 4d:2a:cd:14:8a:c1:02:d9:10:4e:db:32:e7:0a:cd:9e:2a:bf: 1c:72:54:8b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPDdOe3n7Ibqqgjy5tv2SSfcYSVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMwWhcNMjcwNTE3MDkyMTMw WjAzMTEwLwYDVQQDEygyMDI2NEJGNkQwQUVFOEI0MzhEOTAzQzA5OEYxQkExQUY3 MEM2M0ZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CJ629CKZpS8 WTaQW+7oPwkKuO+lKHInRni+vGRkqKMz6UttDT9B1C4W7pklQomMu0eVp8bYjVFz PIB7iK0VkH1vJAwnTPdb8p95nO/HShHLNEjZd49/Eh+lUEdvvBVuGh4qRlBQtYn/ MQA432dmnj7eBF2o5obsZcOLbYp5+cFe8tmooCygjH0IL8VRUIcAdn0oY5YJIzw/ EHbmXGzH71Xr7r0PrXaPmD2BRD4uoTZlKlm85U+xa75m3U0zheMQRrhMWn5GO5SF V7BoHEmE9i7kG7zvuJzzA8+kZ2B1kOHajwRMTldomvkicS5DGfuqVHWahJEmz2pb 8wDwtSOWtwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFCAmS/bQrui0ONkDwJjxuhr3 DGP8MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjYzMDM1MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMTM0MzczMzMwMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQmAv7a8FAwDQYJKoZIhvcNAQELBQADggEBAB7ukaj8VcsqR24ysLK2 7asK26HUx68H4Tgz0JRbBSPLR886fTkj+M+DjU4uiWx1ujvo9JtDHX4utjiCeOlH NRoIAc4jwYW29iYQgkHMO10ZPwbHHqNH7nfsGQL4MjP8ILNasX56y/LB2FsVvEIf FggSPc0DqNnRZrESewgs1B9d524Qc+u9ZBrnnwOCGnuhvqNjxvVTreVDxI5XFEln nDiCOJ8A+kif+eRLBmaFJfId0D78rY49KPKaBYqfEjl02k1yE9E/GPjMF17ORIdj XWJ671Zohivyya3SEgTtviA/QrDSodJyB+uJKk0qzRSKwQLZEE7bMucKzZ4qvxxy VIs= -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:58 2026 by rpki-client