$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa File: 323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa (raw, json) Hash identifier: zQPepg3kBto3nIM2RMRFpCGaO+U4smJAM2x4L3nKP9o= Subject key identifier: 88:EC:25:0B:AD:8B:62:B7:91:E6:59:8F:FF:C8:8C:16:63:7F:EE:46 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 39131C88BA49F3258813E3969E53B62CB7000F37 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa Signing time: Mon 18 May 2026 09:21:31 +0000 ROA not before: Mon 18 May 2026 09:16:31 +0000 ROA not after: Mon 17 May 2027 09:21:31 +0000 asID: 7603 IP address blocks: 2602:feda:f210::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:13:1c:88:ba:49:f3:25:88:13:e3:96:9e:53:b6:2c:b7:00:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:31 2026 GMT Not After : May 17 09:21:31 2027 GMT Subject: CN=88EC250BAD8B62B791E6598FFFC88C16637FEE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:6e:9a:47:ca:95:5b:6c:d8:2c:1c:d1:81: 49:2d:07:47:04:1c:cf:90:fa:3e:85:9c:0a:8c:f1: 3b:01:1e:eb:b2:28:11:ec:0c:34:d9:36:59:b4:57: 15:c3:00:93:77:d1:df:1e:4b:8e:a9:cc:4d:2b:e5: b7:37:3f:7d:6a:ab:66:5c:8d:b2:bb:2d:15:ad:c3: 93:00:45:c7:37:9f:47:13:ff:08:0a:11:93:2b:78: 77:56:06:04:da:fd:4b:1e:31:1a:17:8d:a6:4a:18: 86:f7:cd:83:76:df:0c:07:32:d3:a9:61:d4:b8:69: 5e:5c:84:03:5e:89:5e:a9:77:b7:cc:27:52:32:20: 37:09:b4:bf:2a:a0:4f:f2:6e:2a:cb:a5:3d:1b:b0: b9:13:d0:9f:d7:41:79:52:05:59:f8:ac:19:bf:8f: 93:74:ea:14:57:46:71:db:35:6f:00:5c:40:e5:a7: aa:de:4c:e3:37:22:dc:65:cd:57:43:9d:80:12:78: 93:47:b5:09:40:9b:61:43:0b:0d:a0:8e:59:8a:4c: 8c:8c:87:69:5e:85:3f:74:48:70:fb:cf:ff:b3:1f: 79:f2:05:1a:d4:6c:3a:05:23:2e:15:82:b0:1b:e5: da:8d:01:a4:57:71:64:e7:fe:36:33:fd:d3:9d:dd: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EC:25:0B:AD:8B:62:B7:91:E6:59:8F:FF:C8:8C:16:63:7F:EE:46 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f210::/44 Signature Algorithm: sha256WithRSAEncryption 47:77:74:7c:d2:91:82:b6:23:a7:44:67:40:e9:3e:b8:d4:d8: ef:2a:36:4a:4c:0d:bb:7d:36:ed:72:ea:b7:cd:44:e9:75:18: 75:e1:65:eb:03:99:dd:3b:7f:dc:a8:42:ba:86:6d:0f:bb:a9: b5:09:8a:fd:e5:73:39:be:39:6a:0f:9c:00:bc:74:9c:e9:71: 89:87:f9:28:b0:94:de:99:45:ff:4e:f0:a6:b1:6a:24:1a:55: b7:04:05:4b:54:1f:0a:39:af:a7:ec:9c:f4:5d:0d:b9:db:75: d7:73:9d:0b:1f:81:88:25:8f:c8:6e:64:48:64:c9:72:32:d4: f1:96:76:1c:9a:46:e4:00:8e:51:69:01:82:21:af:3d:b8:be: 6f:ee:18:50:ec:a9:9c:fe:24:3f:b9:7f:78:55:0b:a2:34:f6: a7:d0:1c:8f:fd:9d:df:71:61:15:5c:b9:09:03:6c:64:db:cb: f4:d7:96:18:b3:49:43:45:9d:70:07:a8:b5:fd:e0:e9:c5:1c: 0b:2f:57:9e:62:55:61:e1:3e:f4:ae:ba:b1:36:b1:04:30:c0: 97:5c:4e:88:02:13:eb:82:09:ff:27:b7:c6:74:17:91:8c:26: b6:6b:fd:f5:93:6c:b2:c9:35:ea:27:e7:8a:6a:4c:0b:a7:46: 2b:93:f9:0b -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUORMciLpJ8yWIE+OWnlO2LLcADzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMxWhcNMjcwNTE3MDkyMTMx WjAzMTEwLwYDVQQDEyg4OEVDMjUwQkFEOEI2MkI3OTFFNjU5OEZGRkM4OEMxNjYz N0ZFRTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArelumkfKlVts 2Cwc0YFJLQdHBBzPkPo+hZwKjPE7AR7rsigR7Aw02TZZtFcVwwCTd9HfHkuOqcxN K+W3Nz99aqtmXI2yuy0VrcOTAEXHN59HE/8IChGTK3h3VgYE2v1LHjEaF42mShiG 982Ddt8MBzLTqWHUuGleXIQDXoleqXe3zCdSMiA3CbS/KqBP8m4qy6U9G7C5E9Cf 10F5UgVZ+KwZv4+TdOoUV0Zx2zVvAFxA5aeq3kzjNyLcZc1XQ52AEniTR7UJQJth QwsNoI5ZikyMjIdpXoU/dEhw+8//sx958gUa1Gw6BSMuFYKwG+XajQGkV3Fk5/42 M/3Tnd1lcwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFIjsJQuti2K3keZZj//IjBZj f+5GMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 NjMyMzEzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM3MzYzMDMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJgL+2vIQMA0GCSqGSIb3DQEBCwUAA4IBAQBHd3R80pGCtiOnRGdA6T641Njv KjZKTA27fTbtcuq3zUTpdRh14WXrA5ndO3/cqEK6hm0Pu6m1CYr95XM5vjlqD5wA vHSc6XGJh/kosJTemUX/TvCmsWokGlW3BAVLVB8KOa+n7Jz0XQ2523XXc50LH4GI JY/IbmRIZMlyMtTxlnYcmkbkAI5RaQGCIa89uL5v7hhQ7Kmc/iQ/uX94VQuiNPan 0ByP/Z3fcWEVXLkJA2xk28v015YYs0lDRZ1wB6i1/eDpxRwLL1eeYlVh4T70rrqx NrEEMMCXXE6IAhPrggn/J7fGdBeRjCa2a/31k2yyyTXqJ+eKakwLp0Yrk/kL -----END CERTIFICATE-----Generated at Sat Jun 6 06:25:45 2026 by rpki-client