$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: F07YOycCNtYy6BOPhV7NLR1JMx8OdaNT7XinmsLscL4= Subject key identifier: BA:6F:35:41:B1:78:4B:A1:A6:58:1B:12:67:34:FB:76:F0:64:6C:2C Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 386C38E3348902500ECBA99722E80EFE948662C2 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 18 May 2026 09:21:40 +0000 ROA not before: Mon 18 May 2026 09:16:40 +0000 ROA not after: Mon 17 May 2027 09:21:40 +0000 asID: 46997 IP address blocks: 2602:feda:ae5::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6c:38:e3:34:89:02:50:0e:cb:a9:97:22:e8:0e:fe:94:86:62:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:40 2026 GMT Not After : May 17 09:21:40 2027 GMT Subject: CN=BA6F3541B1784BA1A6581B126734FB76F0646C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:3c:8c:97:8a:a7:37:89:fb:1b:62:a9:af: 61:d0:f2:85:f5:5c:09:4f:f2:64:8f:c6:97:48:66: 12:1e:f3:b4:64:39:66:08:3a:41:c4:47:38:74:8b: 9f:93:8f:76:f5:56:6e:f7:db:d9:fa:1e:11:90:73: 61:08:a3:6b:2c:95:ef:ef:22:0e:67:cc:8b:15:71: 01:8e:90:cc:a4:16:d3:c6:fd:d5:68:c4:b1:b2:79: 16:b8:dc:e1:df:82:7d:a8:cb:ed:85:ec:a9:c5:28: 62:ca:ea:fa:99:0b:db:65:c3:70:95:63:f5:dc:fe: 01:49:ba:97:ef:89:20:a4:cb:4c:1c:11:db:c4:bf: 65:7d:f6:ca:00:4c:25:01:ce:57:84:d3:a6:e6:b4: 4b:aa:13:67:c5:ca:63:96:a0:21:42:0c:d0:36:76: 3a:16:e9:3a:01:04:d3:8c:dc:e7:38:82:48:29:2d: d9:e0:39:9c:9f:66:29:af:3f:de:b6:8a:21:d4:ee: 60:12:77:64:54:73:08:21:90:4c:92:54:bc:d1:44: c9:7f:bd:50:d3:97:60:78:0f:8a:50:f8:44:39:f2: 6f:cc:be:77:71:4a:d4:50:20:93:ab:8a:dd:2f:7a: d0:ca:f7:56:4f:70:3b:fc:80:1d:07:a7:3c:2b:9c: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6F:35:41:B1:78:4B:A1:A6:58:1B:12:67:34:FB:76:F0:64:6C:2C X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ae5::/48 Signature Algorithm: sha256WithRSAEncryption a9:19:97:d0:15:e2:54:e9:69:61:7b:cf:54:b2:c9:e6:4e:c0: 98:2b:4b:9a:48:be:38:3b:66:29:47:41:10:95:2d:86:7f:2b: e7:4f:4c:99:61:01:83:c8:d6:e8:1b:b3:6e:b8:8a:b5:fa:3a: fb:b5:36:b0:0b:c4:69:30:44:a2:81:19:62:3f:ca:66:85:93: 5e:71:fc:d7:8e:5d:52:59:9c:29:95:95:47:3e:71:d6:4d:f8: 6f:be:4c:af:a6:28:b3:ae:ac:41:f2:89:54:d2:da:e8:76:47: 12:64:d7:2b:5e:98:ae:30:18:f4:a0:87:8c:0e:68:10:4a:91: 2d:d2:06:0d:87:25:3e:d9:00:54:dd:d2:01:e6:6c:8c:d1:53: 72:38:87:8e:53:fa:e0:86:ff:11:eb:0d:17:9b:79:88:67:7c: 29:a6:b4:d4:a1:57:d0:1f:14:cb:ac:70:4e:97:56:30:1d:39: 4d:8b:3b:c2:72:68:cc:93:7a:a9:b3:83:00:57:31:b5:fc:db: 28:78:99:9c:dc:18:eb:b9:7c:19:7d:4c:69:b1:5e:e1:5f:5f: 13:74:45:c0:6a:a4:63:9e:9c:69:9f:98:1c:cc:c2:64:bd:7a: 54:bd:85:25:1e:f5:e1:ec:30:06:70:05:47:46:d3:ed:df:6a: 8b:4c:27:4f -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUOGw44zSJAlAOy6mXIugO/pSGYsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQwWhcNMjcwNTE3MDkyMTQw WjAzMTEwLwYDVQQDEyhCQTZGMzU0MUIxNzg0QkExQTY1ODFCMTI2NzM0RkI3NkYw NjQ2QzJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjY8jJeKpzeJ +xtiqa9h0PKF9VwJT/Jkj8aXSGYSHvO0ZDlmCDpBxEc4dIufk4929VZu99vZ+h4R kHNhCKNrLJXv7yIOZ8yLFXEBjpDMpBbTxv3VaMSxsnkWuNzh34J9qMvtheypxShi yur6mQvbZcNwlWP13P4BSbqX74kgpMtMHBHbxL9lffbKAEwlAc5XhNOm5rRLqhNn xcpjlqAhQgzQNnY6Fuk6AQTTjNznOIJIKS3Z4Dmcn2Yprz/etooh1O5gEndkVHMI IZBMklS80UTJf71Q05dgeA+KUPhEOfJvzL53cUrUUCCTq4rdL3rQyvdWT3A7/IAd B6c8K5xWTwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFLpvNUGxeEuhplgbEmc0+3bw ZGwsMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTY1MzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJgL+2grlMA0GCSqGSIb3DQEBCwUAA4IBAQCpGZfQFeJU6Wlhe89UssnmTsCY K0uaSL44O2YpR0EQlS2GfyvnT0yZYQGDyNboG7NuuIq1+jr7tTawC8RpMESigRli P8pmhZNecfzXjl1SWZwplZVHPnHWTfhvvkyvpiizrqxB8olU0trodkcSZNcrXpiu MBj0oIeMDmgQSpEt0gYNhyU+2QBU3dIB5myM0VNyOIeOU/rghv8R6w0Xm3mIZ3wp prTUoVfQHxTLrHBOl1YwHTlNizvCcmjMk3qps4MAVzG1/NsoeJmc3BjruXwZfUxp sV7hX18TdEXAaqRjnpxpn5gczMJkvXpUvYUlHvXh7DAGcAVHRtPt32qLTCdP -----END CERTIFICATE-----Generated at Sat Jun 13 09:35:21 2026 by rpki-client