$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer File: 2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer (raw, json) Hash identifier: 97YS0brnFMF4fLx7st+rrukXm+BOlKDYtjIejQQYd4Q= Subject key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8 Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF Certificate issuer: /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Certificate serial: 010D0C9F43285848002699A36DAAD08A2F651500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer Manifest: rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft caRepository: rsync://oto.wakuwaku.ne.jp/pki/202400/0/ Notify URL: https://oto.wakuwaku.ne.jp/pki/oshirase.xml Certificate not before: Mon 25 Nov 2024 21:24:40 +0000 Certificate not after: Sun 28 Feb 2027 21:24:40 +0000 Subordinate resources: AS: 54286 IP: 23.147.120.0/24 IP: 64.49.28.0/24 IP: 2602:faa8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:00:26:99:a3:6d:aa:d0:8a:2f:65:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Validity Not Before: Nov 25 21:24:40 2024 GMT Not After : Feb 28 21:24:40 2027 GMT Subject: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2f:de:d7:fc:ca:df:fe:e8:75:38:23:89:8d: 1b:c7:af:9c:b6:7d:18:d5:5d:38:b3:b2:23:ac:bd: 29:42:ef:b9:c0:74:42:cf:a3:d5:c8:d0:5d:c8:c2: 40:08:17:2b:cb:b3:1e:e1:81:55:c9:21:47:c5:5a: d4:11:59:8b:58:b6:c6:2e:07:f1:8f:95:f6:83:74: da:71:fe:0a:e0:62:0c:aa:35:50:b7:df:a2:e1:8e: 5d:fa:33:60:4a:59:70:ab:54:8d:5e:5b:b3:86:6d: e6:94:de:fb:54:2a:47:af:35:ab:e0:17:51:09:66: c6:b4:a1:b1:00:26:c8:93:1a:16:cd:37:37:14:70: 12:69:d2:15:51:c1:e4:a3:a4:28:20:47:76:53:80: c1:39:d4:cf:18:84:05:6e:e7:96:e5:0e:99:4f:a1: 69:cf:6f:e1:ec:43:30:75:3a:d8:10:f5:f1:2d:18: ce:06:ff:3a:c6:ad:cd:69:52:ec:68:37:4d:24:fc: b3:c1:fc:14:15:5d:90:89:2d:02:4a:5c:60:5b:b3: 3e:0e:04:e1:2b:f6:74:20:ad:ce:90:81:34:d3:da: c1:c0:a1:ce:1c:55:2b:76:e8:9a:49:1c:27:fd:ad: 3e:d6:50:9e:18:50:fb:f3:28:5b:d1:b3:ae:f1:5f: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8 Subject Information Access: CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/ RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl X509v3 Authority Key Identifier: keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer sbgp-ipAddrBlock: critical IPv4: 23.147.120.0/24 64.49.28.0/24 IPv6: 2602:faa8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54286 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c8:5f:46:78:f0:77:9a:e9:96:31:7d:9c:69:bc:8b:fc:c8: 96:79:9e:ca:24:4c:36:ac:ac:26:76:80:28:85:d0:30:b1:2b: 03:a1:67:1c:0d:65:e0:6c:76:c0:d0:d4:80:75:67:95:8a:0f: ec:58:07:5f:9e:22:90:80:91:53:8d:8a:a4:32:93:88:3b:d4: 0d:c7:18:9a:a4:a3:b1:63:6c:19:7e:af:e8:f9:12:9b:fe:2f: a9:3d:68:50:73:ae:49:ee:34:48:ba:3d:94:41:64:8f:e3:5c: 84:4d:d8:4b:39:12:eb:5e:e5:3f:d3:64:6d:06:4e:5e:c1:16: ac:3d:ca:19:1f:89:e1:85:0e:2e:94:21:f5:ef:8a:1c:99:38: 99:9e:75:71:a4:a8:7a:e5:69:d9:d1:10:31:98:34:de:20:37: 17:57:9d:bf:bf:54:e8:82:ed:d8:e4:0e:7d:6a:e5:19:5b:b8: ac:fe:d1:5f:52:47:05:e1:95:22:ee:f7:59:1b:89:4e:43:bb: a4:ba:2f:00:40:45:3b:0e:ac:35:15:a9:31:2f:a1:2d:67:44: 09:74:05:ab:13:1f:5b:44:10:6a:8b:2e:08:5f:f2:79:5b:28: db:d7:08:51:5b:db:67:0c:e9:f8:95:4f:39:41:09:ad:89:3e: 04:26:05:e8 -----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgIUAQ0Mn0MoWEgAJpmjbarQii9lFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBmNWQ4MGMtOWRhYS00ZjZmLThmNTgtMTgxYzVmMGM0 YjBhMB4XDTI0MTEyNTIxMjQ0MFoXDTI3MDIyODIxMjQ0MFowPTE7MDkGA1UEAxMy MmE1YWY3NGRiYmIzM2E0MmQzNjI4Y2Y0NWZkNGExNDZlYjllNzNhMmFmOTFlN2Uz N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtL97X/Mrf/uh1OCOJ jRvHr5y2fRjVXTizsiOsvSlC77nAdELPo9XI0F3IwkAIFyvLsx7hgVXJIUfFWtQR WYtYtsYuB/GPlfaDdNpx/grgYgyqNVC336Lhjl36M2BKWXCrVI1eW7OGbeaU3vtU KkevNavgF1EJZsa0obEAJsiTGhbNNzcUcBJp0hVRweSjpCggR3ZTgME51M8YhAVu 55blDplPoWnPb+HsQzB1OtgQ9fEtGM4G/zrGrc1pUuxoN00k/LPB/BQVXZCJLQJK XGBbsz4OBOEr9nQgrc6QgTTT2sHAoc4cVSt26JpJHCf9rT7WUJ4YUPvzKFvRs67x X4YVAgMBAAGjggOUMIIDkDAdBgNVHQ4EFgQUG3NL87XahjDXhS+6+t0bgthQa8gw geEGCCsGAQUFBwELBIHUMIHRMDQGCCsGAQUFBzAFhihyc3luYzovL290by53YWt1 d2FrdS5uZS5qcC9wa2kvMjAyNDAwLzAvMGAGCCsGAQUFBzAKhlRyc3luYzovL290 by53YWt1d2FrdS5uZS5qcC9wa2kvMjAyNDAwLzAvMUI3MzRCRjNCNURBODYzMEQ3 ODUyRkJBRkFERDFCODJEODUwNkJDOC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v b3RvLndha3V3YWt1Lm5lLmpwL3BraS9vc2hpcmFzZS54bWwwDwYDVR0TAQH/BAUw AwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4u bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i MDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5 MzNhZTUvNzBmNWQ4MGMtOWRhYS00ZjZmLThmNTgtMTgxYzVmMGM0YjBhLzcwZjVk ODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS5jcmwwHwYDVR0jBBgwFoAU ndZiYGIobSlPpK0W50GfQ1eurq8wDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcB AQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRiMGEuY2VyMDUGCCsGAQUF BwEHAQH/BCYwJDASBAIAATAMAwQAF5N4AwQAQDEcMA4EAgACMAgDBgQmAvqoADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA1A4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbMhfRnjwd5rpljF9 nGm8i/zIlnmeyiRMNqysJnaAKIXQMLErA6FnHA1l4Gx2wNDUgHVnlYoP7FgHX54i kICRU42KpDKTiDvUDccYmqSjsWNsGX6v6PkSm/4vqT1oUHOuSe40SLo9lEFkj+Nc hE3YSzkS617lP9NkbQZOXsEWrD3KGR+J4YUOLpQh9e+KHJk4mZ51caSoeuVp2dEQ MZg03iA3F1edv79U6ILt2OQOfWrlGVu4rP7RX1JHBeGVIu73WRuJTkO7pLovAEBF Ow6sNRWpMS+hLWdECXQFqxMfW0QQaosuCF/yeVso29cIUVvbZwzp+JVPOUEJrYk+ BCYF6A== -----END CERTIFICATE-----Generated at Wed Feb 5 17:58:49 2025 by rpki-client