$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa File: 323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa (raw, json) Hash identifier: 0yQZ2ipOEfQ75qWa+mUJEwRqnbltmSI/PSBK+95BFT0= Subject key identifier: 0C:A8:FB:AD:ED:77:A9:30:3D:30:5E:33:B7:19:9E:AD:45:D1:13:A6 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3582F017D7A75317FF67D3DBF728FC5119775908 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa Signing time: Mon 18 May 2026 09:21:32 +0000 ROA not before: Mon 18 May 2026 09:16:32 +0000 ROA not after: Mon 17 May 2027 09:21:32 +0000 asID: 207803 IP address blocks: 2602:feda:b80::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:82:f0:17:d7:a7:53:17:ff:67:d3:db:f7:28:fc:51:19:77:59:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:32 2026 GMT Not After : May 17 09:21:32 2027 GMT Subject: CN=0CA8FBADED77A9303D305E33B7199EAD45D113A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:05:e5:e7:61:00:64:02:04:e8:31:b4:e1:b0: a4:3e:3c:fb:16:a9:de:20:28:aa:2b:a3:a1:f4:cb: 0c:e6:10:28:4c:cb:2b:9d:a8:42:bb:5f:e9:80:15: e8:79:27:e6:1b:80:38:f9:28:10:32:f6:63:f4:fc: 64:72:01:09:34:0d:56:ae:ec:b7:20:a4:38:b2:41: fa:b4:f1:ba:e3:09:b0:42:41:c2:89:e0:56:eb:97: a7:02:b0:81:12:14:58:95:aa:4a:f5:5f:17:9b:b2: 5f:3a:a9:62:dc:a7:a4:6a:9c:7d:57:1b:9e:1a:a2: 29:82:b2:a9:d2:be:ef:2a:c2:6e:de:f0:dc:90:e3: 02:e7:8a:ee:ca:d0:29:13:87:45:dd:f8:a9:42:6e: fa:17:ba:ac:6e:21:98:ec:b6:25:e8:b2:12:a5:5c: 81:af:30:6c:79:8a:6a:be:b6:02:05:1e:f1:12:72: 4f:69:bc:3f:5a:2a:42:82:dd:99:35:bd:aa:49:89: 9e:cf:d1:c6:f8:3c:7a:fc:3d:0c:ea:af:f9:d2:99: 76:fa:08:65:11:75:bb:59:ae:d6:8c:c8:92:2b:62: 8b:c8:dc:c7:c4:3b:52:39:6c:d0:7b:a1:07:5e:b1: 7d:7d:30:eb:15:52:9f:13:9f:a6:38:11:27:a5:9b: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A8:FB:AD:ED:77:A9:30:3D:30:5E:33:B7:19:9E:AD:45:D1:13:A6 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:b80::/45 Signature Algorithm: sha256WithRSAEncryption 98:04:f1:e1:63:c1:a8:d5:5f:61:76:39:ab:95:5e:47:9c:55: a7:e7:0e:f2:c0:90:80:8b:06:7b:f9:e7:c9:14:dc:0b:27:ed: cd:5f:ce:51:39:56:47:e4:23:1d:5e:68:bc:00:99:40:8b:7a: 0d:bb:ad:2b:00:e6:00:f0:30:a4:dd:d9:2c:4f:3d:87:5e:70: 29:ec:12:d5:28:1b:dc:c3:d7:52:f3:d6:c4:8e:52:e6:d6:01: 4c:a3:61:da:c5:f6:03:7f:d3:82:dd:2c:e2:39:4d:3b:ab:a1: 86:22:1c:62:f3:51:b8:28:e4:74:6b:45:98:d0:77:f0:dc:fc: 7d:c0:d4:d9:b0:73:2e:c9:84:45:44:d1:59:24:ae:9d:e0:19: ed:75:82:78:4d:73:0e:8e:6b:88:78:a1:2b:ef:9f:3e:0f:af: 41:94:5a:ff:dd:bd:1d:ad:1b:22:4f:6b:23:4e:7a:02:fb:1c: 3b:9e:31:23:49:f8:18:97:f5:53:d6:02:bf:44:71:a8:d8:d3: ee:54:c2:e7:9e:71:98:ed:49:d5:2f:cd:54:64:73:75:92:ab: ee:ec:4c:7c:75:5b:bb:e5:e4:6d:d6:5b:eb:c0:ca:9b:b7:3d: 8c:9b:8e:c7:f4:74:9f:d7:8e:f4:7f:b7:6b:2b:67:61:d1:4c: c3:00:de:1e -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUNYLwF9enUxf/Z9Pb9yj8URl3WQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMyWhcNMjcwNTE3MDkyMTMy WjAzMTEwLwYDVQQDEygwQ0E4RkJBREVENzdBOTMwM0QzMDVFMzNCNzE5OUVBRDQ1 RDExM0E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AXl52EAZAIE 6DG04bCkPjz7FqneICiqK6Oh9MsM5hAoTMsrnahCu1/pgBXoeSfmG4A4+SgQMvZj 9PxkcgEJNA1Wruy3IKQ4skH6tPG64wmwQkHCieBW65enArCBEhRYlapK9V8Xm7Jf Oqli3Kekapx9VxueGqIpgrKp0r7vKsJu3vDckOMC54ruytApE4dF3fipQm76F7qs biGY7LYl6LISpVyBrzBseYpqvrYCBR7xEnJPabw/WipCgt2ZNb2qSYmez9HG+Dx6 /D0M6q/50pl2+ghlEXW7Wa7WjMiSK2KLyNzHxDtSOWzQe6EHXrF9fTDrFVKfE5+m OBEnpZvUMQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAyo+63td6kwPTBeM7cZnq1F 0ROmMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjIzODMwM2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzIzMDM3MzgzMDMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2guAMA0GCSqGSIb3DQEBCwUAA4IBAQCYBPHhY8Go1V9hdjmrlV5H nFWn5w7ywJCAiwZ7+efJFNwLJ+3NX85ROVZH5CMdXmi8AJlAi3oNu60rAOYA8DCk 3dksTz2HXnAp7BLVKBvcw9dS89bEjlLm1gFMo2HaxfYDf9OC3SziOU07q6GGIhxi 81G4KOR0a0WY0Hfw3Px9wNTZsHMuyYRFRNFZJK6d4BntdYJ4TXMOjmuIeKEr758+ D69BlFr/3b0drRsiT2sjTnoC+xw7njEjSfgYl/VT1gK/RHGo2NPuVMLnnnGY7UnV L81UZHN1kqvu7Ex8dVu75eRt1lvrwMqbtz2Mm47H9HSf1470f7drK2dh0UzDAN4e -----END CERTIFICATE-----Generated at Sat Jun 13 11:24:28 2026 by rpki-client