$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: vQts5RgdACAPeX0XPdGv+Ew2HTst36eDIXp27vNRN+8= Subject key identifier: 42:35:6E:4C:55:E0:02:C7:E2:6A:C9:E8:50:0B:E8:1D:FB:AD:A5:C1 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1DC38CE827A0129F9C9F6E70D9C3EBA47005C159 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 18 May 2026 09:21:32 +0000 ROA not before: Mon 18 May 2026 09:16:32 +0000 ROA not after: Mon 17 May 2027 09:21:32 +0000 asID: 46997 IP address blocks: 2602:feda::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c3:8c:e8:27:a0:12:9f:9c:9f:6e:70:d9:c3:eb:a4:70:05:c1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:32 2026 GMT Not After : May 17 09:21:32 2027 GMT Subject: CN=42356E4C55E002C7E26AC9E8500BE81DFBADA5C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:9b:6e:de:c1:7b:20:15:9f:26:7f:e0:ce: b1:54:0b:29:15:4c:22:04:f9:08:1a:fb:ec:1b:49: 6c:f3:e2:07:ec:f1:22:8d:fe:77:5e:1e:27:60:d5: f1:f9:10:fc:23:f6:16:77:b6:b5:b7:7d:c8:69:88: b8:06:59:c1:ed:59:9c:3f:d9:75:35:6c:2c:3f:e1: 17:6b:e9:40:b1:21:74:41:33:c5:68:91:7f:db:1a: 26:69:c6:62:f4:90:64:e3:e6:5d:63:30:aa:4d:57: 1e:91:9f:35:cd:d4:4a:ba:10:1a:77:99:a1:00:4c: 0b:dd:08:79:d5:a3:8b:ac:99:1e:50:bb:7c:f0:35: 15:cd:f6:5a:31:de:0a:6e:6e:0b:00:78:84:7c:23: cb:5e:56:b5:1b:0c:2e:a3:5d:e6:ff:e7:13:87:85: 74:8d:88:2c:09:5b:3c:81:20:77:a1:74:e3:71:8b: ea:60:77:71:9b:b6:65:19:c7:bc:5d:0b:a3:43:aa: fa:fd:ce:47:17:74:2c:5c:68:82:bc:e6:31:8a:36: ed:51:3c:00:84:18:f1:bc:20:f4:6a:a9:8c:15:cf: e2:8c:03:b0:ad:4e:e6:e8:82:24:f0:53:bc:d2:9d: 41:2d:bc:a1:39:0e:30:d6:b6:52:1e:0f:87:cd:bb: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:6E:4C:55:E0:02:C7:E2:6A:C9:E8:50:0B:E8:1D:FB:AD:A5:C1 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda::/48 Signature Algorithm: sha256WithRSAEncryption 3a:07:04:43:a2:25:71:36:39:ec:ca:58:f8:3d:b7:14:3b:6f: 7c:1b:22:6f:ac:ed:d9:e1:cc:ae:38:da:00:96:7b:98:48:5f: 68:5b:bb:79:f4:9d:32:e8:b7:a3:96:9e:9a:60:7a:1a:fb:ea: 8c:79:df:51:40:58:a1:40:53:26:f9:ee:82:81:6e:5f:8d:98: a3:f1:47:fe:b7:7f:03:b8:bc:4c:11:0d:cd:7a:84:08:ed:a5: 91:52:8e:f7:de:5c:13:f0:60:ad:0b:9d:e0:74:6c:97:30:c5: 71:40:e6:61:01:5d:db:0b:a3:cd:fd:38:9f:2d:5f:94:37:5b: c3:27:b2:14:8a:03:5e:cf:ae:df:df:ff:71:ed:88:ec:9f:dd: 01:f5:81:73:a7:8f:6a:0c:cd:2d:17:db:6d:88:f7:75:7a:c8: 33:ff:f3:7c:a9:a8:f3:69:4a:e9:14:3f:8e:b3:6c:6a:7f:61: d0:be:07:37:d1:e0:7b:27:75:94:ff:2a:c3:6b:7f:78:f0:12: 48:76:a5:c2:cc:06:b8:10:9b:e7:8d:c4:47:f4:b8:54:65:37: d8:78:65:40:32:c8:72:1d:b9:91:58:e6:4e:65:58:4a:af:c6: 47:8b:40:e6:97:1d:83:7f:f1:37:f4:03:00:63:e5:e8:ec:4b: ed:75:63:f7 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUHcOM6CegEp+cn25w2cPrpHAFwVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMyWhcNMjcwNTE3MDkyMTMy WjAzMTEwLwYDVQQDEyg0MjM1NkU0QzU1RTAwMkM3RTI2QUM5RTg1MDBCRTgxREZC QURBNUMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDybbt7BeyAV nyZ/4M6xVAspFUwiBPkIGvvsG0ls8+IH7PEijf53Xh4nYNXx+RD8I/YWd7a1t33I aYi4BlnB7VmcP9l1NWwsP+EXa+lAsSF0QTPFaJF/2xomacZi9JBk4+ZdYzCqTVce kZ81zdRKuhAad5mhAEwL3Qh51aOLrJkeULt88DUVzfZaMd4Kbm4LAHiEfCPLXla1 Gwwuo13m/+cTh4V0jYgsCVs8gSB3oXTjcYvqYHdxm7ZlGce8XQujQ6r6/c5HF3Qs XGiCvOYxijbtUTwAhBjxvCD0aqmMFc/ijAOwrU7m6IIk8FO80p1BLbyhOQ4w1rZS Hg+HzbvYuQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFEI1bkxV4ALH4mrJ6FAL6B37 raXBMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/toA ADANBgkqhkiG9w0BAQsFAAOCAQEAOgcEQ6IlcTY57MpY+D23FDtvfBsib6zt2eHM rjjaAJZ7mEhfaFu7efSdMui3o5aemmB6GvvqjHnfUUBYoUBTJvnugoFuX42Yo/FH /rd/A7i8TBENzXqECO2lkVKO995cE/BgrQud4HRslzDFcUDmYQFd2wujzf04ny1f lDdbwyeyFIoDXs+u39//ce2I7J/dAfWBc6ePagzNLRfbbYj3dXrIM//zfKmo82lK 6RQ/jrNsan9h0L4HN9Hgeyd1lP8qw2t/ePASSHalwswGuBCb543ER/S4VGU32Hhl QDLIch25kVjmTmVYSq/GR4tA5pcdg3/xN/QDAGPl6OxL7XVj9w== -----END CERTIFICATE-----Generated at Sat Jun 13 09:29:29 2026 by rpki-client