$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: r7R5pmDRQV89jELDOyIZUKVQCqg+ljoyWbmBcXbuFTc= Subject key identifier: 3B:E1:B1:82:57:5B:F7:04:48:C1:83:5F:20:03:AB:9F:6F:66:69:27 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 52EFF1A1E3B844C781A761AF01F989F258F0C827 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 18 May 2026 09:21:36 +0000 ROA not before: Mon 18 May 2026 09:16:36 +0000 ROA not after: Mon 17 May 2027 09:21:36 +0000 asID: 46997 IP address blocks: 2602:feda:5::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ef:f1:a1:e3:b8:44:c7:81:a7:61:af:01:f9:89:f2:58:f0:c8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:36 2026 GMT Not After : May 17 09:21:36 2027 GMT Subject: CN=3BE1B182575BF70448C1835F2003AB9F6F666927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:6c:80:b8:ef:d0:c9:c4:08:d0:99:f4:14: c3:6c:7d:9c:60:14:3b:c4:a8:83:a8:70:b6:ac:9f: 1a:3b:b2:8d:73:9b:38:fc:be:9f:b4:9a:58:17:a4: 11:ba:b2:79:a3:e1:50:b2:04:a5:c3:bf:69:04:ab: 09:18:72:df:91:c9:a5:3e:04:f8:45:29:f9:93:18: 86:ce:93:61:34:e5:e7:06:3a:97:99:80:df:4d:ea: 50:b4:65:8d:ef:14:9e:8d:4e:17:3c:00:96:23:4c: e2:eb:7c:b5:37:ec:b6:28:a6:8c:35:1b:c9:52:d9: 50:bf:f0:10:3e:11:69:76:e2:79:87:df:93:4b:e4: 20:87:5e:2b:cb:15:f1:3b:55:cb:c4:13:4b:55:1e: 85:46:18:30:c2:ce:0e:1f:81:47:51:1b:d9:77:de: d2:82:1e:19:4a:89:5a:bb:7e:78:c0:34:a3:e4:9a: a3:87:c9:2a:94:99:0a:7c:2d:aa:86:5e:9b:f8:86: 83:dc:d2:b3:16:a7:0c:35:84:c2:de:9d:01:8f:c7: 39:50:e1:80:36:1c:1f:87:8b:5c:f5:3b:4f:90:8c: 90:5e:94:e4:4b:9a:f2:c7:bf:d1:ff:c2:c6:47:a1: 53:84:90:88:85:2f:30:99:42:2a:12:43:97:f9:5f: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:B1:82:57:5B:F7:04:48:C1:83:5F:20:03:AB:9F:6F:66:69:27 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:5::/48 Signature Algorithm: sha256WithRSAEncryption 40:89:df:f4:3e:ed:bb:a8:b1:44:d5:48:8e:dc:39:4b:81:ee: 93:b3:91:29:d8:91:a2:4d:57:cd:1e:91:e8:ec:18:be:7d:e2: 28:ad:ae:65:0e:33:06:27:fd:20:f3:4c:e6:93:c3:bb:1a:d8: 14:26:9a:b0:2c:6f:fb:9c:d8:0c:11:59:b4:2b:a9:16:b6:b5: 04:87:49:1d:81:c7:4d:f8:d1:08:bc:ce:56:ac:4d:58:82:c5: 70:bc:4e:15:ac:8a:c4:ee:92:f3:ef:c8:c7:a3:02:23:69:d1: 7a:8e:7f:35:30:a5:cd:91:9f:4b:5a:07:3b:83:95:b4:05:40: 54:99:39:83:d1:6f:63:61:6c:d9:42:ab:cc:af:44:56:e4:35: 82:8d:66:2a:cf:85:2b:74:c6:ff:b2:dd:51:91:c7:34:f4:e2: 4a:11:b1:37:68:2b:71:24:12:01:a7:65:62:42:00:23:5d:e4: c2:4d:1c:01:d4:61:0f:5c:55:15:36:9b:3f:55:91:90:de:62: c6:0f:31:f4:83:b5:3b:22:41:a0:0f:9e:24:2b:52:5d:ff:84: 48:ae:9a:f7:18:7e:71:4c:97:91:a5:cd:ce:ce:0c:46:0c:52: 1b:e8:46:a2:73:e1:86:b7:1b:5c:ed:27:73:c8:38:b8:2a:71: 1f:8d:86:19 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUUu/xoeO4RMeBp2GvAfmJ8ljwyCcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM2WhcNMjcwNTE3MDkyMTM2 WjAzMTEwLwYDVQQDEygzQkUxQjE4MjU3NUJGNzA0NDhDMTgzNUYyMDAzQUI5RjZG NjY2OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuehsgLjv0MnE CNCZ9BTDbH2cYBQ7xKiDqHC2rJ8aO7KNc5s4/L6ftJpYF6QRurJ5o+FQsgSlw79p BKsJGHLfkcmlPgT4RSn5kxiGzpNhNOXnBjqXmYDfTepQtGWN7xSejU4XPACWI0zi 63y1N+y2KKaMNRvJUtlQv/AQPhFpduJ5h9+TS+Qgh14ryxXxO1XLxBNLVR6FRhgw ws4OH4FHURvZd97Sgh4ZSolau354wDSj5Jqjh8kqlJkKfC2qhl6b+IaD3NKzFqcM NYTC3p0Bj8c5UOGANhwfh4tc9TtPkIyQXpTkS5ryx7/R/8LGR6FThJCIhS8wmUIq EkOX+V/ttwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFDvhsYJXW/cESMGDXyADq59v ZmknMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm Av7aAAUwDQYJKoZIhvcNAQELBQADggEBAECJ3/Q+7buosUTVSI7cOUuB7pOzkSnY kaJNV80ekejsGL594iitrmUOMwYn/SDzTOaTw7sa2BQmmrAsb/uc2AwRWbQrqRa2 tQSHSR2Bx0340Qi8zlasTViCxXC8ThWsisTukvPvyMejAiNp0XqOfzUwpc2Rn0ta BzuDlbQFQFSZOYPRb2NhbNlCq8yvRFbkNYKNZirPhSt0xv+y3VGRxzT04koRsTdo K3EkEgGnZWJCACNd5MJNHAHUYQ9cVRU2mz9VkZDeYsYPMfSDtTsiQaAPniQrUl3/ hEiumvcYfnFMl5Glzc7ODEYMUhvoRqJz4Ya3G1ztJ3PIOLgqcR+Nhhk= -----END CERTIFICATE-----Generated at Sat Jun 13 09:31:52 2026 by rpki-client