$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa File: 323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa (raw, json) Hash identifier: 4wRx2PY2fl/oTeL0qY2tD75C50V3EJ3S1avR3ocv5B4= Subject key identifier: DB:0D:EE:D9:A2:2B:E3:69:48:14:38:A1:69:D3:7A:FE:05:8A:26:E1 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 36679FEAB4BF724EA47E4D3997F41843E21B83AD Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa Signing time: Mon 18 May 2026 09:21:38 +0000 ROA not before: Mon 18 May 2026 09:16:38 +0000 ROA not after: Mon 17 May 2027 09:21:38 +0000 asID: 212705 IP address blocks: 2602:feda:b70::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:67:9f:ea:b4:bf:72:4e:a4:7e:4d:39:97:f4:18:43:e2:1b:83:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:38 2026 GMT Not After : May 17 09:21:38 2027 GMT Subject: CN=DB0DEED9A22BE369481438A169D37AFE058A26E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7f:76:d8:63:0b:84:2d:d0:a0:b0:95:57:f0: 5e:43:74:f0:99:09:ac:71:79:1c:08:34:82:e6:cb: 1a:91:bc:f6:24:f5:9e:31:9c:9a:56:3b:b5:b4:af: b8:31:d0:48:07:74:e7:5b:94:55:93:7a:dc:4e:c5: 7b:0c:c1:79:d3:13:93:82:0e:35:be:66:e8:63:b5: d1:eb:ca:4b:37:db:10:b0:97:a4:40:f7:91:e2:80: 44:1f:d1:42:87:6f:af:49:20:4c:57:b3:51:04:c5: e2:87:70:f8:d9:f5:ee:df:e6:88:2a:13:f8:79:54: 35:fc:b1:ef:53:dc:e9:89:76:83:69:07:24:a9:cb: 5e:81:8e:cb:92:4a:31:7e:2e:02:a4:3c:16:4a:16: d3:05:d4:7d:52:de:ff:da:1b:e5:cc:bc:51:b3:66: 93:f7:3d:9a:dc:14:05:85:e5:b3:fc:5f:f0:5e:37: 57:80:5e:8e:73:07:9b:82:ff:6c:df:9f:21:b7:38: f6:b5:0b:6b:c6:2b:52:24:70:cb:42:94:08:96:c1: bc:9d:7f:d2:67:3b:20:1c:18:4d:84:eb:4c:5e:19: cc:27:86:d3:13:81:73:9d:42:c9:0f:1e:c7:64:23: 88:07:91:76:7f:c4:fe:c0:d2:18:bb:84:0b:32:96: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:EE:D9:A2:2B:E3:69:48:14:38:A1:69:D3:7A:FE:05:8A:26:E1 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b70::/44 Signature Algorithm: sha256WithRSAEncryption 98:f5:5c:a8:79:3c:0e:49:0b:30:36:6c:a1:7c:b7:23:62:4e: 01:8c:98:3d:07:4f:3c:1d:bf:dc:77:d6:80:d2:7b:c6:1f:75: 73:29:a7:43:11:8b:62:b3:1b:2f:c3:b4:46:25:4a:68:92:22: 27:e9:e7:64:13:3f:d3:d2:17:af:51:9c:bd:93:9a:1a:60:ae: 7e:62:5c:bc:b5:ae:a5:af:77:2b:2a:d7:3c:6c:22:27:30:11: 65:41:cb:eb:11:45:93:fe:d7:6c:72:a7:c6:e4:e0:46:7b:9c: 0c:b7:aa:95:f0:4a:28:57:27:96:50:31:4c:71:31:a8:63:19: 41:b2:1a:bb:77:9a:02:f8:9c:6a:35:0e:11:96:ab:1a:f8:28: 3c:0f:5a:69:f8:52:40:b1:ae:6e:ab:72:b9:e9:5b:6e:8a:73: 38:f2:ed:a7:1f:7a:53:60:a6:5b:62:e9:60:65:26:af:30:7d: 22:60:f3:c8:f3:4b:4c:79:d9:cb:f0:2a:41:b0:98:4e:7e:c9: df:59:24:04:64:5c:82:b5:3b:dc:bd:8c:58:32:40:04:66:91: b4:25:54:37:04:c9:c1:dc:08:19:08:da:1d:cb:e9:b2:e3:fa: 6b:ac:dc:1c:84:ea:88:c0:4e:ac:6f:3c:b8:88:04:41:0c:4b: 5d:23:d0:79 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUNmef6rS/ck6kfk05l/QYQ+Ibg60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM4WhcNMjcwNTE3MDkyMTM4 WjAzMTEwLwYDVQQDEyhEQjBERUVEOUEyMkJFMzY5NDgxNDM4QTE2OUQzN0FGRTA1 OEEyNkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H922GMLhC3Q oLCVV/BeQ3TwmQmscXkcCDSC5ssakbz2JPWeMZyaVju1tK+4MdBIB3TnW5RVk3rc TsV7DMF50xOTgg41vmboY7XR68pLN9sQsJekQPeR4oBEH9FCh2+vSSBMV7NRBMXi h3D42fXu3+aIKhP4eVQ1/LHvU9zpiXaDaQckqctegY7Lkkoxfi4CpDwWShbTBdR9 Ut7/2hvlzLxRs2aT9z2a3BQFheWz/F/wXjdXgF6Ocwebgv9s358htzj2tQtrxitS JHDLQpQIlsG8nX/SZzsgHBhNhOtMXhnMJ4bTE4FznULJDx7HZCOIB5F2f8T+wNIY u4QLMpaX1wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNsN7tmiK+NpSBQ4oWnTev4F iibhMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzczMDM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gtwMA0GCSqGSIb3DQEBCwUAA4IBAQCY9VyoeTwOSQswNmyhfLcj Yk4BjJg9B088Hb/cd9aA0nvGH3VzKadDEYtisxsvw7RGJUpokiIn6edkEz/T0hev UZy9k5oaYK5+Yly8ta6lr3crKtc8bCInMBFlQcvrEUWT/tdscqfG5OBGe5wMt6qV 8EooVyeWUDFMcTGoYxlBshq7d5oC+JxqNQ4Rlqsa+Cg8D1pp+FJAsa5uq3K56Vtu inM48u2nH3pTYKZbYulgZSavMH0iYPPI80tMednL8CpBsJhOfsnfWSQEZFyCtTvc vYxYMkAEZpG0JVQ3BMnB3AgZCNody+my4/prrNwchOqIwE6sbzy4iARBDEtdI9B5 -----END CERTIFICATE-----Generated at Sat Jun 13 11:21:35 2026 by rpki-client