$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer File: 5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer (raw, json) Hash identifier: 8SXcZwYWi1GVpZO9rU1WPA4KVYaDFsnzCGbFBOl4+00= Subject key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority key identifier: DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4 Certificate issuer: /CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77 Certificate serial: 010D0C9F43285843C5D15E168979645155E5DE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer Manifest: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft caRepository: rsync://ca.nat.moe/repo/NATOLAB/2/ Notify URL: https://ca.nat.moe/rrdp/notification.xml Certificate not before: Sat 04 Nov 2023 04:48:18 +0000 Certificate not after: Fri 06 Feb 2026 05:48:18 +0000 Subordinate resources: AS: 1029 AS: 46997 AS: 396303 IP: 23.247.136.0/22 IP: 134.195.100.0/23 IP: 141.193.21.0/24 IP: 2602:feda::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:c5:d1:5e:16:89:79:64:51:55:e5:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77 Validity Not Before: Nov 4 04:48:18 2023 GMT Not After : Feb 6 05:48:18 2026 GMT Subject: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:08:5b:3f:1b:78:e1:20:9e:d0:94:a5:3a: 03:ed:90:50:90:91:59:65:8d:d8:d2:12:3c:66:71: f4:45:0d:6b:dd:5b:ce:97:bb:2d:0d:46:fe:63:3e: 9b:b9:62:52:ca:ca:4a:75:3a:08:fd:5a:91:2e:3a: 98:57:d0:21:90:5c:f3:dc:6f:26:61:69:c2:9e:13: 5c:ba:9f:70:13:01:ba:dc:e3:b0:49:83:9d:74:c1: 61:ee:cb:13:86:a3:4b:ef:69:89:30:a8:ba:38:4e: 53:d5:dc:3b:54:9f:af:e9:6c:93:d2:88:07:50:b7: 5b:2d:06:ee:00:12:5e:32:7b:df:4d:82:8c:35:2a: d7:bc:fb:52:a4:81:fd:ce:05:f9:32:25:7e:f3:95: 83:cb:a9:86:3a:d1:47:00:ff:c6:7a:e6:87:bb:1c: 1b:db:33:16:be:b6:83:fb:92:63:5f:53:94:c1:65: 0f:1f:bc:4d:48:c5:df:c3:6a:75:73:85:21:90:59: 99:a0:4b:73:59:8b:69:97:84:98:12:45:d7:d8:40: 28:ac:0e:cf:b6:75:98:73:d3:e9:40:44:1e:cd:cf: 0f:b6:46:ba:a2:48:12:cd:ba:60:95:d1:99:cc:ca: 70:9c:45:db:4b:b2:fa:bb:e9:23:61:29:24:08:fe: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Subject Information Access: CA Repository - URI:rsync://ca.nat.moe/repo/NATOLAB/2/ RPKI Manifest - URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft RPKI Notify - URI:https://ca.nat.moe/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl X509v3 Authority Key Identifier: keyid:DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer sbgp-ipAddrBlock: critical IPv4: 23.247.136.0/22 134.195.100.0/23 141.193.21.0/24 IPv6: 2602:feda::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1029 46997 396303 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ce:84:a9:9c:b4:ee:fc:ad:f5:3a:83:df:8f:21:2c:88:12: ef:13:30:0c:bf:79:30:3b:ba:87:4b:ae:ac:dd:7e:fb:61:f2: 78:d2:65:2f:1b:f5:44:31:10:6a:9e:e7:05:80:6d:e5:13:77: 71:37:c8:75:78:1b:0b:86:e6:f5:03:6c:07:c2:b1:68:68:46: 43:d1:13:92:fc:e1:ea:1b:e2:aa:f0:99:b9:27:80:b0:7c:cc: 86:59:f8:35:74:06:e4:78:00:24:67:62:62:b0:b2:79:98:34: 43:52:6a:93:f8:58:69:ae:bc:90:40:19:af:e8:29:43:0a:90: f6:0c:b6:2b:b6:31:75:c8:b5:a1:86:c6:29:51:98:b5:6f:e5: c6:08:29:5a:31:15:bf:d8:81:6c:3a:e2:e2:c8:2f:74:a2:02: 6b:fa:03:91:a3:95:f4:d1:17:88:ae:de:10:ce:22:9f:e7:f2: f6:43:c4:2c:2d:18:ee:ca:f3:69:28:8b:cc:09:74:3b:2c:5a: ff:a2:8f:2b:79:0d:b8:44:59:96:c4:d2:54:02:33:66:45:7b: a9:0c:46:1e:e0:75:4f:bd:98:a4:ba:59:6b:0f:9c:5b:9e:d0: 9e:cb:f5:7e:e6:21:6f:d9:87:26:a5:22:27:30:eb:94:cb:9e: 8c:0f:1a:ff -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUAQ0Mn0MoWEPF0V4WiXlkUVXl3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMTJjNmMtYWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4 Yzc3MB4XDTIzMTEwNDA0NDgxOFoXDTI2MDIwNjA1NDgxOFowPTE7MDkGA1UEAxMy NTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEyYjQzM2JiYTNmOTYwZmJj MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxAhbPxt44SCe0JSl OgPtkFCQkVlljdjSEjxmcfRFDWvdW86Xuy0NRv5jPpu5YlLKykp1Ogj9WpEuOphX 0CGQXPPcbyZhacKeE1y6n3ATAbrc47BJg510wWHuyxOGo0vvaYkwqLo4TlPV3DtU n6/pbJPSiAdQt1stBu4AEl4ye99Ngow1Kte8+1Kkgf3OBfkyJX7zlYPLqYY60UcA /8Z65oe7HBvbMxa+toP7kmNfU5TBZQ8fvE1Ixd/DanVzhSGQWZmgS3NZi2mXhJgS RdfYQCisDs+2dZhz0+lARB7Nzw+2RrqiSBLNumCV0ZnMynCcRdtLsvq76SNhKSQI /k19AgMBAAGjggOTMIIDjzAdBgNVHQ4EFgQUFiV8GWaMZxPEASsQHmRiZs13tQ0w gdIGCCsGAQUFBwELBIHFMIHCMC4GCCsGAQUFBzAFhiJyc3luYzovL2NhLm5hdC5t b2UvcmVwby9OQVRPTEFCLzIvMFoGCCsGAQUFBzAKhk5yc3luYzovL2NhLm5hdC5t b2UvcmVwby9OQVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYy NjZDRDc3QjUwRC5tZnQwNAYIKwYBBQUHMA2GKGh0dHBzOi8vY2EubmF0Lm1vZS9y cmRwL25vdGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHU MIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk My9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDRjMTJjNmMt YWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4Yzc3LzA0YzEyYzZjLWFiMGUtNGQwMy1i OWM4LTZjMzU5MjM2OGM3Ny5jcmwwHwYDVR0jBBgwFoAU3f5Ha03VVAQYBDLKVpgd CdOne8QwDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYB BQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNGMxMmM2Yy1hYjBlLTRk MDMtYjljOC02YzM1OTIzNjhjNzcuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQCF/eIAwQBhsNkAwQAjcEVMA0EAgACMAcDBQAmAv7aMCMGCCsGAQUFBwEI AQH/BBQwEqAQMA4CAgQFAgMAt5UCAwYMDzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxzoSpnLTu/K31OoPf jyEsiBLvEzAMv3kwO7qHS66s3X77YfJ40mUvG/VEMRBqnucFgG3lE3dxN8h1eBsL hub1A2wHwrFoaEZD0ROS/OHqG+Kq8Jm5J4CwfMyGWfg1dAbkeAAkZ2JisLJ5mDRD UmqT+FhprryQQBmv6ClDCpD2DLYrtjF1yLWhhsYpUZi1b+XGCClaMRW/2IFsOuLi yC90ogJr+gORo5X00ReIrt4QziKf5/L2Q8QsLRjuyvNpKIvMCXQ7LFr/oo8reQ24 RFmWxNJUAjNmRXupDEYe4HVPvZikullrD5xbntCey/V+5iFv2YcmpSInMOuUy56M Dxr/ -----END CERTIFICATE-----Generated at Tue Apr 23 21:52:26 2024 by rpki-client on console-ams.rpki-client.org