$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: KQT2XGwXuokc0jm1ntKvG0Q5UOWRTk2EBQszHu9lVQU= Subject key identifier: 94:6F:2D:28:A9:FC:17:50:E1:43:C7:50:B7:74:04:AA:6B:A3:43:0A Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 38BA161C1F177DCF4CE67B835AC5705BE0616CFD Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 18 May 2026 09:21:31 +0000 ROA not before: Mon 18 May 2026 09:16:31 +0000 ROA not after: Mon 17 May 2027 09:21:31 +0000 asID: 46997 IP address blocks: 2602:feda:8::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:16:1c:1f:17:7d:cf:4c:e6:7b:83:5a:c5:70:5b:e0:61:6c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:31 2026 GMT Not After : May 17 09:21:31 2027 GMT Subject: CN=946F2D28A9FC1750E143C750B77404AA6BA3430A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:79:d8:c5:3c:7d:c0:5d:da:3d:fb:a4:7a: 88:f3:19:5e:dc:ba:7e:a2:9c:e5:d4:db:68:05:a2: 29:4c:f8:99:94:77:bf:e2:f2:54:66:f1:89:43:75: 4d:f5:69:a6:00:f5:ef:eb:5e:6b:18:f5:ee:b5:b9: 4f:14:87:3e:60:7b:86:30:90:99:e1:29:c2:ed:70: b6:a4:47:f2:76:2b:48:0b:7c:d6:77:3b:ad:91:c3: 57:37:8f:fb:7a:56:8f:82:6e:72:ce:a7:83:41:c3: 15:10:1b:b6:f7:6c:bb:0c:c9:ce:f3:fa:9a:c3:de: c5:5f:79:f1:bf:5c:ea:84:0e:0e:19:5a:6b:d4:ab: 6f:9d:f5:27:fa:c7:d7:e2:f0:e5:18:3d:84:6b:b4: d9:94:5f:10:f5:a2:08:68:79:06:e0:2f:14:52:43: 3e:26:5f:db:16:95:d2:6c:0f:cf:41:45:d8:f1:c6: 5f:50:a5:af:b5:5e:d5:87:70:19:33:3e:13:fd:55: 33:5c:95:dd:d5:1b:dc:5a:59:ac:d8:be:9d:92:c1: 58:63:aa:15:a6:ca:33:a2:ce:bf:d8:fb:3f:05:05: 93:8c:de:a2:c5:14:f0:93:fa:a3:8a:bb:6f:5a:ee: c6:cc:94:79:c3:c6:44:d3:80:9d:e0:ed:3b:08:d1: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6F:2D:28:A9:FC:17:50:E1:43:C7:50:B7:74:04:AA:6B:A3:43:0A X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:8::/48 Signature Algorithm: sha256WithRSAEncryption 21:66:6c:31:be:37:86:3b:75:56:5b:21:c9:8d:ea:06:20:81: 87:3b:da:62:58:f6:c8:33:2e:90:4a:d6:fd:06:7b:5f:a5:56: 5c:56:a2:4f:79:59:a1:68:77:53:82:59:d4:bb:90:0a:13:9d: 61:24:b6:e9:0b:f7:ff:1a:ca:4e:5f:0d:7a:d8:8c:1e:6e:03: 4c:54:3a:78:d7:7c:e0:32:ed:be:5a:48:56:59:f3:c6:48:3f: 71:ba:b7:a0:31:6c:19:87:2b:53:04:86:74:c3:38:01:4e:3d: da:89:f4:a6:9b:48:80:c6:03:54:8b:f9:5c:c4:5c:90:4c:61: b3:8e:03:c7:3f:d3:a1:da:bb:d0:12:5b:55:a8:2e:7f:33:ad: 4f:57:d0:11:7f:4e:90:f4:28:cd:17:2b:a6:a6:1f:60:d8:fd: 75:66:ef:ac:60:64:45:38:04:99:7c:55:ac:3e:c7:ad:ca:de: 80:65:ff:db:20:77:b7:37:01:02:f9:b1:31:d9:b9:06:ae:cd: 2f:93:06:c6:7e:f5:e2:3f:31:47:11:82:5e:6e:6c:38:8c:2d: 65:00:b3:e4:0b:74:b7:12:ca:f6:06:0a:da:2e:7f:33:98:10: 6d:c5:f0:39:90:52:85:07:dc:ad:1b:fe:27:b5:d6:71:bd:80: fd:69:71:7f -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUOLoWHB8Xfc9M5nuDWsVwW+BhbP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMxWhcNMjcwNTE3MDkyMTMx WjAzMTEwLwYDVQQDEyg5NDZGMkQyOEE5RkMxNzUwRTE0M0M3NTBCNzc0MDRBQTZC QTM0MzBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj952MU8fcBd 2j37pHqI8xle3Lp+opzl1NtoBaIpTPiZlHe/4vJUZvGJQ3VN9WmmAPXv615rGPXu tblPFIc+YHuGMJCZ4SnC7XC2pEfyditIC3zWdzutkcNXN4/7elaPgm5yzqeDQcMV EBu292y7DMnO8/qaw97FX3nxv1zqhA4OGVpr1KtvnfUn+sfX4vDlGD2Ea7TZlF8Q 9aIIaHkG4C8UUkM+Jl/bFpXSbA/PQUXY8cZfUKWvtV7Vh3AZMz4T/VUzXJXd1Rvc Wlms2L6dksFYY6oVpsozos6/2Ps/BQWTjN6ixRTwk/qjirtvWu7GzJR5w8ZE04Cd 4O07CNHiuwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFJRvLSip/BdQ4UPHULd0BKpr o0MKMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez ODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm Av7aAAgwDQYJKoZIhvcNAQELBQADggEBACFmbDG+N4Y7dVZbIcmN6gYggYc72mJY 9sgzLpBK1v0Ge1+lVlxWok95WaFod1OCWdS7kAoTnWEktukL9/8ayk5fDXrYjB5u A0xUOnjXfOAy7b5aSFZZ88ZIP3G6t6AxbBmHK1MEhnTDOAFOPdqJ9KabSIDGA1SL +VzEXJBMYbOOA8c/06Hau9ASW1WoLn8zrU9X0BF/TpD0KM0XK6amH2DY/XVm76xg ZEU4BJl8Vaw+x63K3oBl/9sgd7c3AQL5sTHZuQauzS+TBsZ+9eI/MUcRgl5ubDiM LWUAs+QLdLcSyvYGCtoufzOYEG3F8DmQUoUH3K0b/ie11nG9gP1pcX8= -----END CERTIFICATE-----Generated at Sat Jun 13 11:02:54 2026 by rpki-client