$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa File: 323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa (raw, json) Hash identifier: jTDMpFS5/S4ZmZrNnfwwjVZOHEmUgTzjmyuWmycVPTA= Subject key identifier: 06:4A:00:55:E0:02:61:45:3A:5E:99:C2:66:8F:A7:C9:0F:AD:5C:F5 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 46EE869B43CACBD22FBA5671B8C3334E63F90DD9 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa Signing time: Mon 18 May 2026 09:21:40 +0000 ROA not before: Mon 18 May 2026 09:16:40 +0000 ROA not after: Mon 17 May 2027 09:21:40 +0000 asID: 204185 IP address blocks: 2602:feda:2a0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ee:86:9b:43:ca:cb:d2:2f:ba:56:71:b8:c3:33:4e:63:f9:0d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:40 2026 GMT Not After : May 17 09:21:40 2027 GMT Subject: CN=064A0055E00261453A5E99C2668FA7C90FAD5CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:15:c4:a3:f4:1a:a8:f0:ca:f1:c2:9b:63: 57:70:a6:17:02:82:5c:a7:06:ee:f6:ab:39:ee:e8: 49:ee:8f:c8:64:c3:74:81:c8:0f:3e:12:bc:fd:ac: 17:6d:db:9c:7b:ab:91:f3:04:1a:d1:29:cf:8c:dd: f9:31:55:92:5f:f2:41:74:e4:98:17:e9:93:74:a1: 06:23:9a:c5:27:f8:2a:c1:7c:97:e0:06:5f:47:25: 6e:16:68:22:78:d7:92:6e:12:18:97:14:b4:96:28: 38:f3:d3:7a:53:12:07:f2:f8:ea:82:e1:76:2e:5b: 51:47:c0:d1:88:19:de:94:5a:f8:48:cf:9f:49:c4: 60:09:9f:21:e3:58:6d:0d:da:7d:6e:c4:44:23:78: 57:8e:eb:a8:6d:56:da:b2:c3:0a:e3:38:5b:b2:2b: b9:3d:2c:07:df:87:a8:f5:22:e3:e9:2d:e8:54:26: 88:2c:bd:8d:ea:91:cd:57:df:cb:17:93:f4:f1:95: 87:13:d2:d4:e8:44:fb:fe:37:73:44:5c:25:66:ba: fb:fb:5e:66:c9:a3:1f:28:6e:fe:ca:f9:9e:d6:97: fc:b6:e4:7c:98:15:d4:41:42:ec:23:9e:21:fe:be: 2a:52:d5:ab:d8:49:72:91:40:07:b0:80:7f:e7:49: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4A:00:55:E0:02:61:45:3A:5E:99:C2:66:8F:A7:C9:0F:AD:5C:F5 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:2a0::/44 Signature Algorithm: sha256WithRSAEncryption 3a:46:18:c4:af:bb:8a:8c:59:37:42:39:58:17:d0:7d:3f:f1: 5a:ad:91:45:44:11:b9:1c:a3:f9:27:4e:c1:19:f7:98:04:64: 48:d7:cb:6c:2b:7e:fd:3f:3c:c9:f0:91:f8:b7:86:f1:22:89: 92:03:44:8b:05:9c:a3:31:be:0a:f5:bd:fa:4e:c0:48:ca:b6: b5:e2:41:dc:54:de:dc:12:62:06:01:d9:87:49:95:4f:0e:7c: de:ba:17:52:56:80:33:44:a7:54:32:78:7c:18:6d:36:ca:3b: b9:e3:7b:7a:9c:ff:39:60:7b:f4:9f:08:70:43:f3:71:b0:d5: f3:42:4e:f9:ff:08:54:8b:d0:15:92:84:cf:fd:ce:c2:42:52: 38:32:b4:7a:9c:ab:89:58:db:de:ab:5f:90:89:16:8d:db:77: 08:70:f5:f0:1d:b0:45:8e:9f:3a:da:73:be:5b:d5:82:f8:3c: 46:89:1a:a8:0d:e4:18:bf:92:e3:ef:75:cf:8e:90:f1:21:de: 74:8d:aa:ab:fe:6f:e9:3b:e5:8d:97:23:c8:7d:6f:32:29:dc: 08:82:37:37:bd:58:6b:f8:63:c1:77:4d:eb:af:3f:08:cb:b8: 2d:39:1f:b6:b5:fb:69:3b:f2:a0:11:bc:1c:49:a0:3f:8f:3c: 6b:7e:ad:ee -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIURu6Gm0PKy9IvulZxuMMzTmP5DdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQwWhcNMjcwNTE3MDkyMTQw WjAzMTEwLwYDVQQDEygwNjRBMDA1NUUwMDI2MTQ1M0E1RTk5QzI2NjhGQTdDOTBG QUQ1Q0Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgkVxKP0Gqjw yvHCm2NXcKYXAoJcpwbu9qs57uhJ7o/IZMN0gcgPPhK8/awXbduce6uR8wQa0SnP jN35MVWSX/JBdOSYF+mTdKEGI5rFJ/gqwXyX4AZfRyVuFmgieNeSbhIYlxS0lig4 89N6UxIH8vjqguF2LltRR8DRiBnelFr4SM+fScRgCZ8h41htDdp9bsREI3hXjuuo bVbassMK4zhbsiu5PSwH34eo9SLj6S3oVCaILL2N6pHNV9/LF5P08ZWHE9LU6ET7 /jdzRFwlZrr7+15myaMfKG7+yvme1pf8tuR8mBXUQULsI54h/r4qUtWr2ElykUAH sIB/50kBlQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAZKAFXgAmFFOl6ZwmaPp8kP rVz1MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzI2MTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM0MzEzODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gKgMA0GCSqGSIb3DQEBCwUAA4IBAQA6RhjEr7uKjFk3QjlYF9B9 P/FarZFFRBG5HKP5J07BGfeYBGRI18tsK379PzzJ8JH4t4bxIomSA0SLBZyjMb4K 9b36TsBIyra14kHcVN7cEmIGAdmHSZVPDnzeuhdSVoAzRKdUMnh8GG02yju543t6 nP85YHv0nwhwQ/NxsNXzQk75/whUi9AVkoTP/c7CQlI4MrR6nKuJWNveq1+QiRaN 23cIcPXwHbBFjp862nO+W9WC+DxGiRqoDeQYv5Lj73XPjpDxId50jaqr/m/pO+WN lyPIfW8yKdwIgjc3vVhr+GPBd03rrz8Iy7gtOR+2tftpO/KgEbwcSaA/jzxrfq3u -----END CERTIFICATE-----Generated at Sat Jun 13 11:22:08 2026 by rpki-client