$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer File: 5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer (raw, json) Hash identifier: U4jMJhbxJxH1UHxMJNBthN/td0NoDGkmEj6O8mtE1Ns= Subject key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority key identifier: DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4 Certificate issuer: /CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77 Certificate serial: 010D0C9F43285848CB0EADDBB8215B20BB36A6B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer Manifest: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft caRepository: rsync://ca.nat.moe/repo/NATOLAB/2/ Notify URL: https://ca.nat.moe/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 13:45:33 +0000 Certificate not after: Wed 12 May 2027 12:45:33 +0000 Subordinate resources: AS: 1029 AS: 46997 AS: 396303 IP: 23.247.136.0/22 IP: 134.195.100.0/23 IP: 141.193.21.0/24 IP: 2602:feda::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:0e:ad:db:b8:21:5b:20:bb:36:a6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77 Validity Not Before: Feb 6 13:45:33 2025 GMT Not After : May 12 12:45:33 2027 GMT Subject: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:08:5b:3f:1b:78:e1:20:9e:d0:94:a5:3a: 03:ed:90:50:90:91:59:65:8d:d8:d2:12:3c:66:71: f4:45:0d:6b:dd:5b:ce:97:bb:2d:0d:46:fe:63:3e: 9b:b9:62:52:ca:ca:4a:75:3a:08:fd:5a:91:2e:3a: 98:57:d0:21:90:5c:f3:dc:6f:26:61:69:c2:9e:13: 5c:ba:9f:70:13:01:ba:dc:e3:b0:49:83:9d:74:c1: 61:ee:cb:13:86:a3:4b:ef:69:89:30:a8:ba:38:4e: 53:d5:dc:3b:54:9f:af:e9:6c:93:d2:88:07:50:b7: 5b:2d:06:ee:00:12:5e:32:7b:df:4d:82:8c:35:2a: d7:bc:fb:52:a4:81:fd:ce:05:f9:32:25:7e:f3:95: 83:cb:a9:86:3a:d1:47:00:ff:c6:7a:e6:87:bb:1c: 1b:db:33:16:be:b6:83:fb:92:63:5f:53:94:c1:65: 0f:1f:bc:4d:48:c5:df:c3:6a:75:73:85:21:90:59: 99:a0:4b:73:59:8b:69:97:84:98:12:45:d7:d8:40: 28:ac:0e:cf:b6:75:98:73:d3:e9:40:44:1e:cd:cf: 0f:b6:46:ba:a2:48:12:cd:ba:60:95:d1:99:cc:ca: 70:9c:45:db:4b:b2:fa:bb:e9:23:61:29:24:08:fe: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Subject Information Access: CA Repository - URI:rsync://ca.nat.moe/repo/NATOLAB/2/ RPKI Manifest - URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft RPKI Notify - URI:https://ca.nat.moe/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl X509v3 Authority Key Identifier: keyid:DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer sbgp-ipAddrBlock: critical IPv4: 23.247.136.0/22 134.195.100.0/23 141.193.21.0/24 IPv6: 2602:feda::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1029 46997 396303 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8c:65:48:5e:93:de:c4:d8:08:aa:b7:b0:78:d4:a7:98:b5: 74:d1:e7:7e:01:89:0e:b0:08:db:95:e8:30:58:f9:d9:81:70: 4f:0f:d4:61:a6:fd:6b:65:3b:e5:37:8e:96:08:b1:0d:39:08: 89:28:89:52:2d:36:a4:d7:e3:cf:80:9a:be:b5:b3:5a:26:0f: 8b:a9:63:a0:b9:c4:3b:cc:47:ae:00:8b:cf:18:9c:9b:59:a6: db:82:b0:eb:78:6c:c4:57:1d:73:dd:87:45:7e:bb:98:61:67: cd:6d:f0:c2:d9:8d:e3:03:cf:32:0a:05:0e:59:e7:46:86:bf: 7e:51:14:43:c1:c0:58:91:b1:4f:90:7b:29:82:0b:7d:51:d0: 75:2d:fa:19:93:c8:92:8f:29:16:7f:13:c9:03:d9:22:f0:c0: 0b:0b:82:fc:aa:dc:70:00:b5:b9:7e:ed:85:ef:53:67:f9:28: a3:e1:b8:c5:1d:d9:22:9c:f0:b5:21:2c:f8:1b:22:9d:d0:7b: 8d:93:60:fd:9e:f5:6b:56:36:c4:ff:ae:fb:5f:bc:2a:b7:3a: be:b9:31:20:a6:20:f5:0c:3f:87:ee:1f:b7:c9:44:31:52:c4: 48:c7:b4:82:3c:62:4f:03:2d:7d:83:df:44:ca:22:76:fd:c1: 8b:5b:98:b5 -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUAQ0Mn0MoWEjLDq3buCFbILs2prAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMTJjNmMtYWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4 Yzc3MB4XDTI1MDIwNjEzNDUzM1oXDTI3MDUxMjEyNDUzM1owPTE7MDkGA1UEAxMy NTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEyYjQzM2JiYTNmOTYwZmJj MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxAhbPxt44SCe0JSl OgPtkFCQkVlljdjSEjxmcfRFDWvdW86Xuy0NRv5jPpu5YlLKykp1Ogj9WpEuOphX 0CGQXPPcbyZhacKeE1y6n3ATAbrc47BJg510wWHuyxOGo0vvaYkwqLo4TlPV3DtU n6/pbJPSiAdQt1stBu4AEl4ye99Ngow1Kte8+1Kkgf3OBfkyJX7zlYPLqYY60UcA /8Z65oe7HBvbMxa+toP7kmNfU5TBZQ8fvE1Ixd/DanVzhSGQWZmgS3NZi2mXhJgS RdfYQCisDs+2dZhz0+lARB7Nzw+2RrqiSBLNumCV0ZnMynCcRdtLsvq76SNhKSQI /k19AgMBAAGjggOTMIIDjzAdBgNVHQ4EFgQUFiV8GWaMZxPEASsQHmRiZs13tQ0w gdIGCCsGAQUFBwELBIHFMIHCMC4GCCsGAQUFBzAFhiJyc3luYzovL2NhLm5hdC5t b2UvcmVwby9OQVRPTEFCLzIvMFoGCCsGAQUFBzAKhk5yc3luYzovL2NhLm5hdC5t b2UvcmVwby9OQVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYy NjZDRDc3QjUwRC5tZnQwNAYIKwYBBQUHMA2GKGh0dHBzOi8vY2EubmF0Lm1vZS9y cmRwL25vdGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHU MIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk My9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDRjMTJjNmMt YWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4Yzc3LzA0YzEyYzZjLWFiMGUtNGQwMy1i OWM4LTZjMzU5MjM2OGM3Ny5jcmwwHwYDVR0jBBgwFoAU3f5Ha03VVAQYBDLKVpgd CdOne8QwDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYB BQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNGMxMmM2Yy1hYjBlLTRk MDMtYjljOC02YzM1OTIzNjhjNzcuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQCF/eIAwQBhsNkAwQAjcEVMA0EAgACMAcDBQAmAv7aMCMGCCsGAQUFBwEI AQH/BBQwEqAQMA4CAgQFAgMAt5UCAwYMDzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxjGVIXpPexNgIqrew eNSnmLV00ed+AYkOsAjblegwWPnZgXBPD9Rhpv1rZTvlN46WCLENOQiJKIlSLTak 1+PPgJq+tbNaJg+LqWOgucQ7zEeuAIvPGJybWabbgrDreGzEVx1z3YdFfruYYWfN bfDC2Y3jA88yCgUOWedGhr9+URRDwcBYkbFPkHspggt9UdB1LfoZk8iSjykWfxPJ A9ki8MALC4L8qtxwALW5fu2F71Nn+Sij4bjFHdkinPC1ISz4GyKd0HuNk2D9nvVr VjbE/677X7wqtzq+uTEgpiD1DD+H7h+3yUQxUsRIx7SCPGJPAy19g99EyiJ2/cGL W5i1 -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:02 2025 by rpki-client