$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa File: 3133342e3139352e3130302e302f32332d3234203d3e20393933.roa (raw, json) Hash identifier: FLCzMR5lteQMQ4SV5CAYaGCkfKVZlR1goc21mxQvwyk= Subject key identifier: AE:01:31:43:A2:E5:F6:FF:FF:26:AB:31:9C:EF:72:69:35:7E:9C:7A Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 2A0247D6ABB19750AFBFC983A440BA261417B3 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa Signing time: Thu 23 Jul 2026 03:21:42 +0000 ROA not before: Thu 23 Jul 2026 03:16:42 +0000 ROA not after: Thu 22 Jul 2027 03:21:42 +0000 asID: 993 IP address blocks: 134.195.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 20:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:02:47:d6:ab:b1:97:50:af:bf:c9:83:a4:40:ba:26:14:17:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jul 23 03:16:42 2026 GMT Not After : Jul 22 03:21:42 2027 GMT Subject: CN=AE013143A2E5F6FFFF26AB319CEF7269357E9C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:8e:aa:19:cb:58:e0:76:d6:bb:73:a0:1e: 93:ef:b5:62:e5:a4:ec:41:f4:e5:d9:c8:bc:db:d2: c1:bf:7d:bf:00:5a:c4:a0:46:ee:d1:00:8e:c5:a2: c1:f8:79:1f:6f:0f:88:69:b6:b5:7f:90:55:35:89: df:92:1a:87:c0:38:95:e7:5b:d4:96:88:10:e9:59: 98:52:18:1c:5f:d8:41:ee:4f:ed:ae:9c:ea:9a:86: 6a:fc:07:42:17:e1:47:9c:0f:86:4e:90:18:f4:4f: 08:a8:ce:98:76:51:39:90:24:d7:c8:84:b8:16:4b: 79:ee:6c:e8:d9:c2:d7:51:3a:05:6f:2d:7c:a7:ff: c0:e0:e6:83:14:57:14:a5:59:96:2a:fa:38:a0:10: 0a:ac:cf:d5:24:68:b0:1e:c8:76:b8:06:9b:22:df: 51:98:6f:d0:d5:f6:4f:f9:ce:bd:fa:ea:29:0c:a2: 0e:08:a5:00:d5:29:08:0c:a3:e2:98:e9:17:95:3b: 29:a3:fd:ba:7f:91:b8:ca:71:77:64:88:d5:90:44: b3:d8:77:5e:37:6d:14:d3:14:22:39:61:17:07:11: bc:a4:51:7b:f0:01:78:a2:87:e1:d9:d7:af:40:18: 9e:68:15:43:d9:e6:5b:f8:ef:b9:a0:79:30:a8:30: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:01:31:43:A2:E5:F6:FF:FF:26:AB:31:9C:EF:72:69:35:7E:9C:7A X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption 92:e6:63:8d:81:7c:9b:a5:7c:58:3f:2b:dd:0b:28:b6:60:2e: a9:72:5d:ea:1b:78:0d:d1:93:cc:13:a2:88:55:71:c4:5c:28: cb:6e:52:f5:f9:ae:d0:a8:7f:39:44:99:f2:41:43:25:b7:50: e0:a6:d5:61:a2:57:b7:8f:64:e8:8b:4a:32:09:c6:5c:cc:45: 89:b9:aa:c9:13:e4:50:98:d7:58:cf:95:2a:90:a1:e5:18:a7: b9:93:2d:3b:26:23:6e:55:e7:98:df:91:56:30:b1:92:9e:7a: bf:47:88:24:a0:70:b0:15:50:34:97:fa:81:64:42:60:fc:52: f9:c1:de:82:70:42:08:bc:80:a8:c8:0c:db:b2:a2:d6:da:a8: bd:14:f1:31:fb:92:da:23:f8:da:2e:9d:d3:c7:69:66:19:8c: 96:d0:ec:92:1d:45:7d:d5:cf:90:b8:53:01:8f:16:b6:95:08: bd:3a:4a:92:08:6f:47:a4:52:9d:e8:d5:03:ee:ee:55:9d:96: 11:fb:ae:fa:af:23:0a:05:bd:a3:6a:08:d7:9d:b2:cc:b0:99: cb:c6:ea:a1:04:0b:53:8a:d5:34:1a:5d:88:ad:96:11:62:17: b3:46:7e:ba:73:04:92:d9:0c:90:30:61:6f:13:1e:7a:24:2e: 02:d0:dd:b5 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgITKgJH1quxl1Cvv8mDpEC6JhQXszANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJi NDMzYmJhM2Y5NjBmYmMxODAeFw0yNjA3MjMwMzE2NDJaFw0yNzA3MjIwMzIxNDJa MDMxMTAvBgNVBAMTKEFFMDEzMTQzQTJFNUY2RkZGRjI2QUIzMTlDRUY3MjY5MzU3 RTlDN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+Y6qGctY4HbW u3OgHpPvtWLlpOxB9OXZyLzb0sG/fb8AWsSgRu7RAI7FosH4eR9vD4hptrV/kFU1 id+SGofAOJXnW9SWiBDpWZhSGBxf2EHuT+2unOqahmr8B0IX4UecD4ZOkBj0Twio zph2UTmQJNfIhLgWS3nubOjZwtdROgVvLXyn/8Dg5oMUVxSlWZYq+jigEAqsz9Uk aLAeyHa4Bpsi31GYb9DV9k/5zr366ikMog4IpQDVKQgMo+KY6ReVOymj/bp/kbjK cXdkiNWQRLPYd143bRTTFCI5YRcHEbykUXvwAXiih+HZ169AGJ5oFUPZ5lv477mg eTCoMKZDAgMBAAGjggJeMIICWjAdBgNVHQ4EFgQUrgExQ6Ll9v//JqsxnO9yaTV+ nHowHwYDVR0jBBgwFoAUFiV8GWaMZxPEASsQHmRiZs13tQ0wDgYDVR0PAQH/BAQD AgeAMF8GA1UdHwRYMFYwVKBSoFCGTnJzeW5jOi8vY2EubmF0Lm1vZS9yZXBvL05B VE9MQUIvMi8xNjI1N0MxOTY2OEM2NzEzQzQwMTJCMTAxRTY0NjI2NkNENzdCNTBE LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4 MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJm My02Mjk5YTNiMDJlMjkvMDRjMTJjNmMtYWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4 Yzc3LzUwOTNjYmI0NmY2OTkwMWMxMTlhMmJlMTA4M2RmMmFhMmI0MzNiYmEzZjk2 MGZiYzE4LmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5jOi8v Y2EubmF0Lm1vZS9yZXBvL05BVE9MQUIvMi8zMTMzMzQyZTMxMzkzNTJlMzEzMDMw MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzkzOTMzLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhsNkMA0G CSqGSIb3DQEBCwUAA4IBAQCS5mONgXybpXxYPyvdCyi2YC6pcl3qG3gN0ZPME6KI VXHEXCjLblL1+a7QqH85RJnyQUMlt1DgptVhole3j2Toi0oyCcZczEWJuarJE+RQ mNdYz5UqkKHlGKe5ky07JiNuVeeY35FWMLGSnnq/R4gkoHCwFVA0l/qBZEJg/FL5 wd6CcEIIvICoyAzbsqLW2qi9FPEx+5LaI/jaLp3Tx2lmGYyW0OySHUV91c+QuFMB jxa2lQi9OkqSCG9HpFKd6NUD7u5VnZYR+676ryMKBb2jagjXnbLMsJnLxuqhBAtT itU0Gl2IrZYRYhezRn66cwSS2QyQMGFvEx56JC4C0N21 -----END CERTIFICATE-----Generated at Fri Jul 24 01:10:52 2026 by rpki-client