$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa File: 323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa (raw, json) Hash identifier: j9CtHpqC0qMi4+/BgbXU3Bm7kqqjlGao2OostP+jCQ0= Subject key identifier: A2:5A:C4:30:5E:48:17:1E:C0:E1:25:F1:06:A2:0D:35:1E:88:0C:27 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6303166EBB63D33E1BB0DA7F8180A25275F8C732 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa Signing time: Thu 14 May 2026 12:21:30 +0000 ROA not before: Thu 14 May 2026 12:16:30 +0000 ROA not after: Thu 13 May 2027 12:21:30 +0000 asID: 205058 IP address blocks: 2602:feda:f8::/47 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:03:16:6e:bb:63:d3:3e:1b:b0:da:7f:81:80:a2:52:75:f8:c7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 14 12:16:30 2026 GMT Not After : May 13 12:21:30 2027 GMT Subject: CN=A25AC4305E48171EC0E125F106A20D351E880C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:1a:6e:af:e3:a0:8e:39:d6:ed:55:65:ce: c0:eb:41:99:e4:69:9a:b9:13:60:ce:d3:20:25:61: c3:0d:96:44:03:ef:20:6b:09:e8:73:42:2e:0c:dc: 78:e2:8c:34:dc:75:79:33:13:ba:cd:33:4f:1d:81: 34:d6:c8:4a:05:cc:47:85:71:3e:d6:20:00:1e:25: a4:16:2d:50:7a:12:34:23:15:fe:57:40:9d:ee:86: 7c:9e:45:43:c8:d5:85:09:29:82:69:59:7b:1d:3a: eb:c5:b1:ef:b8:b1:c5:2d:c3:e5:02:d9:8b:4c:05: 33:d4:80:bf:6f:57:99:3a:b3:c0:b4:cb:a8:7d:a7: a6:cd:6b:c5:3d:50:5a:68:49:74:c4:ba:1f:60:f8: 83:5b:35:41:36:7c:49:3e:e2:ac:69:29:2d:03:02: 88:7c:b3:42:d6:5c:ea:49:d4:71:90:3a:dd:f9:3b: 5e:27:67:af:42:83:4c:42:1f:cf:89:17:3e:9d:dd: 11:10:f4:23:16:08:ac:9e:99:71:3e:3b:ba:e1:40: 3a:04:26:d1:41:5d:3e:84:90:62:31:98:e9:0a:53: f3:9b:d5:26:26:10:29:2d:d7:81:8f:28:22:83:7e: 23:3a:4e:56:ac:1a:cf:38:4c:6b:c1:46:b7:41:06: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5A:C4:30:5E:48:17:1E:C0:E1:25:F1:06:A2:0D:35:1E:88:0C:27 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66383a3a2f34372d3438203d3e20323035303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:f8::/47 Signature Algorithm: sha256WithRSAEncryption 78:b6:e4:58:64:3e:34:d8:71:69:38:6c:76:91:f0:3a:3a:9d: 68:1c:f9:3c:b1:ee:cc:ab:77:13:fa:f6:8e:cc:7e:5b:f6:ea: fe:a9:ba:8c:c3:16:cc:a7:58:e8:50:53:50:31:fc:2f:70:73: 2c:c1:b3:4e:ed:b4:75:90:78:d7:21:0a:bb:5f:5a:d9:6c:ee: ad:92:ba:31:df:51:b3:2b:6c:7a:9b:cd:4a:c0:fb:db:c6:50: ff:d8:69:23:7d:a0:96:ab:b3:64:6f:b9:6d:67:df:ff:9c:d3: b1:82:0c:92:85:1b:68:76:1e:9d:7b:67:75:34:44:ae:e5:98: 65:67:9d:55:d8:01:63:d7:b7:5e:e0:a5:ab:d8:61:2b:ba:b1: a3:c3:a1:ee:f7:ee:af:8d:a9:b1:25:59:07:23:bf:e9:19:af: 17:32:d4:cd:81:ea:0e:48:8c:2d:4e:c7:a8:25:6e:55:4f:d1: 7d:a7:8f:00:b6:cf:ee:99:b1:d8:2e:60:74:ac:ae:d1:31:f0: 8d:2a:24:88:8f:c3:9b:b1:20:d2:35:4a:7d:eb:98:0e:6e:b6: d1:14:0c:3b:c8:a4:b7:52:32:5d:31:5b:1b:31:ca:4d:51:50: a8:8c:ad:67:fa:57:93:45:fb:60:2f:3c:c4:2a:9d:e7:d7:4b: b5:c6:d7:51 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUYwMWbrtj0z4bsNp/gYCiUnX4xzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE0MTIxNjMwWhcNMjcwNTEzMTIyMTMw WjAzMTEwLwYDVQQDEyhBMjVBQzQzMDVFNDgxNzFFQzBFMTI1RjEwNkEyMEQzNTFF ODgwQzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhwabq/joI45 1u1VZc7A60GZ5GmauRNgztMgJWHDDZZEA+8gawnoc0IuDNx44ow03HV5MxO6zTNP HYE01shKBcxHhXE+1iAAHiWkFi1QehI0IxX+V0Cd7oZ8nkVDyNWFCSmCaVl7HTrr xbHvuLHFLcPlAtmLTAUz1IC/b1eZOrPAtMuofaemzWvFPVBaaEl0xLofYPiDWzVB NnxJPuKsaSktAwKIfLNC1lzqSdRxkDrd+TteJ2evQoNMQh/PiRc+nd0REPQjFgis nplxPju64UA6BCbRQV0+hJBiMZjpClPzm9UmJhApLdeBjygig34jOk5WrBrPOExr wUa3QQaAIQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFKJaxDBeSBcewOEl8QaiDTUe iAwnMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 NjM4M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzMDM1MzAzNTM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcBJgL+2gD4MA0GCSqGSIb3DQEBCwUAA4IBAQB4tuRYZD402HFpOGx2kfA6Op1o HPk8se7Mq3cT+vaOzH5b9ur+qbqMwxbMp1joUFNQMfwvcHMswbNO7bR1kHjXIQq7 X1rZbO6tkrox31GzK2x6m81KwPvbxlD/2GkjfaCWq7Nkb7ltZ9//nNOxggyShRto dh6de2d1NESu5ZhlZ51V2AFj17de4KWr2GErurGjw6Hu9+6vjamxJVkHI7/pGa8X MtTNgeoOSIwtTseoJW5VT9F9p48Ats/umbHYLmB0rK7RMfCNKiSIj8ObsSDSNUp9 65gObrbRFAw7yKS3UjJdMVsbMcpNUVCojK1n+leTRftgLzzEKp3n10u1xtdR -----END CERTIFICATE-----Generated at Sat Jun 6 08:16:05 2026 by rpki-client