$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa File: 3134312e3139332e32312e302f32342d3234203d3e203338303233.roa (raw, json) Hash identifier: we+RcHFx+NaVkH7nRbPiRlR77I+In8lERcmpJWBv9aQ= Subject key identifier: A2:E1:0B:A6:E5:D4:9B:72:9A:78:96:59:ED:EC:1E:56:44:B3:0F:E5 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 4AE60B9488D822DE880DB18E75E690CEBBA15478 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa Signing time: Mon 23 Feb 2026 23:21:30 +0000 ROA not before: Mon 23 Feb 2026 23:16:30 +0000 ROA not after: Mon 22 Feb 2027 23:21:30 +0000 asID: 38023 IP address blocks: 141.193.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 11:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e6:0b:94:88:d8:22:de:88:0d:b1:8e:75:e6:90:ce:bb:a1:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Feb 23 23:16:30 2026 GMT Not After : Feb 22 23:21:30 2027 GMT Subject: CN=A2E10BA6E5D49B729A789659EDEC1E5644B30FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a7:13:31:88:54:7b:d2:77:76:39:69:65:d1: 62:6e:ab:60:f9:42:d4:13:a6:5f:e7:30:61:41:9d: 5f:4c:c0:a7:17:c6:7f:e5:1d:e2:8c:e7:48:0e:2a: b3:15:f8:68:49:69:ae:e4:fd:29:8c:88:b4:59:4a: a8:b8:fc:98:5b:e8:18:8e:4c:45:0b:d5:be:eb:25: 60:02:a8:a0:39:bc:1a:9a:81:dc:30:ec:bb:32:27: b4:b4:60:f0:ee:19:04:37:f9:7f:9a:3d:4e:48:47: 83:fb:2d:05:c8:f1:07:bd:58:0f:3e:ed:7a:e4:c6: 93:79:a3:b9:b5:cf:84:41:92:02:69:b1:54:d2:63: b3:31:76:1f:19:23:db:c3:7f:b3:3a:2b:91:de:8c: 95:c7:79:48:62:3d:fd:79:6e:48:4a:fd:d9:0a:1e: 7a:c8:8c:07:38:b9:70:29:2a:57:58:73:7c:e5:22: 92:1d:a5:03:64:90:52:7f:63:be:0c:91:f0:af:dd: fa:cb:ce:2b:63:99:eb:dd:f1:3b:4c:13:70:16:45: 54:35:db:61:76:07:77:d5:cb:3c:f1:a8:20:fd:3d: 82:0a:ff:0a:1e:2f:76:e6:89:ba:53:e2:99:54:ba: b9:d0:95:3d:05:ae:e4:ec:d5:a8:cc:47:4d:d0:47: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:0B:A6:E5:D4:9B:72:9A:78:96:59:ED:EC:1E:56:44:B3:0F:E5 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.193.21.0/24 Signature Algorithm: sha256WithRSAEncryption 96:8a:00:60:11:4b:97:e0:a1:4e:67:86:c3:17:2e:95:5f:2c: a8:33:60:fc:fa:97:25:69:f1:17:9f:ba:50:76:d3:fb:b8:e7: 28:05:7a:30:b4:51:c6:1a:5e:e0:13:89:85:a1:46:89:42:f9: 3f:08:e0:77:bf:2f:a0:c3:25:95:60:f0:9e:f4:56:1f:5d:0b: 71:bc:5e:54:6f:42:7d:2e:6b:e3:73:7c:83:d2:77:0c:6d:6c: cc:31:07:7c:fb:0e:0f:3a:4c:9a:ce:56:4e:fc:d4:b3:34:21: 3a:b5:9f:c6:d0:07:6c:81:ce:4a:34:46:5d:bf:65:26:9f:dd: 64:65:fc:2b:9a:4b:24:6b:87:56:e0:8e:85:ef:4d:90:9a:5f: a0:53:d2:e0:fc:6d:b6:dd:6f:de:89:da:c7:2a:8f:ed:64:46: 9a:bf:60:59:31:ca:30:bd:1e:14:46:01:c7:8c:fe:2f:88:49: 09:f2:62:6e:7a:a7:4b:1d:21:80:5b:8f:b9:d7:48:9b:92:43: af:4a:71:fb:d2:ef:8e:b5:b6:a4:4d:61:33:3e:14:1a:12:64: 6c:dc:aa:33:80:28:bb:fc:5c:99:14:43:c1:ce:3f:eb:86:2d: 18:74:ca:02:ab:eb:05:52:5d:f1:d7:94:02:fd:58:63:fd:69: 04:73:91:a7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUSuYLlIjYIt6IDbGOdeaQzruhVHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwMjIzMjMxNjMwWhcNMjcwMjIyMjMyMTMw WjAzMTEwLwYDVQQDEyhBMkUxMEJBNkU1RDQ5QjcyOUE3ODk2NTlFREVDMUU1NjQ0 QjMwRkU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9acTMYhUe9J3 djlpZdFibqtg+ULUE6Zf5zBhQZ1fTMCnF8Z/5R3ijOdIDiqzFfhoSWmu5P0pjIi0 WUqouPyYW+gYjkxFC9W+6yVgAqigObwamoHcMOy7Mie0tGDw7hkEN/l/mj1OSEeD +y0FyPEHvVgPPu165MaTeaO5tc+EQZICabFU0mOzMXYfGSPbw3+zOiuR3oyVx3lI Yj39eW5ISv3ZCh56yIwHOLlwKSpXWHN85SKSHaUDZJBSf2O+DJHwr936y84rY5nr 3fE7TBNwFkVUNdthdgd31cs88agg/T2CCv8KHi925om6U+KZVLq50JU9Ba7k7NWo zEdN0EdRCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKLhC6bl1JtymniWWe3sHlZE sw/lMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzAzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEV MA0GCSqGSIb3DQEBCwUAA4IBAQCWigBgEUuX4KFOZ4bDFy6VXyyoM2D8+pclafEX n7pQdtP7uOcoBXowtFHGGl7gE4mFoUaJQvk/COB3vy+gwyWVYPCe9FYfXQtxvF5U b0J9Lmvjc3yD0ncMbWzMMQd8+w4POkyazlZO/NSzNCE6tZ/G0Adsgc5KNEZdv2Um n91kZfwrmkska4dW4I6F702Qml+gU9Lg/G223W/eidrHKo/tZEaav2BZMcowvR4U RgHHjP4viEkJ8mJueqdLHSGAW4+510ibkkOvSnH70u+OtbakTWEzPhQaEmRs3Koz gCi7/FyZFEPBzj/rhi0YdMoCq+sFUl3x15QC/Vhj/WkEc5Gn -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:30 2026 by rpki-client