$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer File: 5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer (raw, json) Hash identifier: Z3eiTM/ZalxDvXTzMXz+t4Z9jIFY5WRVmwLQxLgKOpo= Subject key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority key identifier: DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4 Certificate issuer: /CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77 Certificate serial: 010D0C9F4328584DD088C5393D4638564B370380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer Manifest: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft caRepository: rsync://ca.nat.moe/repo/NATOLAB/2/ Notify URL: https://ca.nat.moe/rrdp/notification.xml Certificate not before: Wed 13 May 2026 00:45:17 +0000 Certificate not after: Tue 15 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 1029 AS: 46997 AS: 396303 IP: 23.247.136.0/22 IP: 134.195.100.0/23 IP: 141.193.21.0/24 IP: 2602:feda::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:88:c5:39:3d:46:38:56:4b:37:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77 Validity Not Before: May 13 00:45:17 2026 GMT Not After : Aug 15 00:45:17 2028 GMT Subject: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:08:5b:3f:1b:78:e1:20:9e:d0:94:a5:3a: 03:ed:90:50:90:91:59:65:8d:d8:d2:12:3c:66:71: f4:45:0d:6b:dd:5b:ce:97:bb:2d:0d:46:fe:63:3e: 9b:b9:62:52:ca:ca:4a:75:3a:08:fd:5a:91:2e:3a: 98:57:d0:21:90:5c:f3:dc:6f:26:61:69:c2:9e:13: 5c:ba:9f:70:13:01:ba:dc:e3:b0:49:83:9d:74:c1: 61:ee:cb:13:86:a3:4b:ef:69:89:30:a8:ba:38:4e: 53:d5:dc:3b:54:9f:af:e9:6c:93:d2:88:07:50:b7: 5b:2d:06:ee:00:12:5e:32:7b:df:4d:82:8c:35:2a: d7:bc:fb:52:a4:81:fd:ce:05:f9:32:25:7e:f3:95: 83:cb:a9:86:3a:d1:47:00:ff:c6:7a:e6:87:bb:1c: 1b:db:33:16:be:b6:83:fb:92:63:5f:53:94:c1:65: 0f:1f:bc:4d:48:c5:df:c3:6a:75:73:85:21:90:59: 99:a0:4b:73:59:8b:69:97:84:98:12:45:d7:d8:40: 28:ac:0e:cf:b6:75:98:73:d3:e9:40:44:1e:cd:cf: 0f:b6:46:ba:a2:48:12:cd:ba:60:95:d1:99:cc:ca: 70:9c:45:db:4b:b2:fa:bb:e9:23:61:29:24:08:fe: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Subject Information Access: CA Repository - URI:rsync://ca.nat.moe/repo/NATOLAB/2/ RPKI Manifest - URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft RPKI Notify - URI:https://ca.nat.moe/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl X509v3 Authority Key Identifier: keyid:DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer sbgp-ipAddrBlock: critical IPv4: 23.247.136.0/22 134.195.100.0/23 141.193.21.0/24 IPv6: 2602:feda::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1029 46997 396303 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:45:36:6d:87:05:63:4b:85:4e:5f:06:3f:08:3c:29:11:b8: 14:2a:45:d4:f0:76:84:ec:2d:b8:db:c9:6c:6d:bd:20:74:50: 0e:bd:e4:78:02:3c:c9:b5:a8:c5:d7:e4:43:0e:f9:98:71:db: a0:1b:ef:f3:2d:99:8d:9c:7c:5a:20:fe:1e:31:5b:7c:98:fc: d7:ca:d5:78:4a:e0:b2:d5:10:ec:da:d7:bd:79:36:14:df:f8: b8:d1:a9:fe:7a:fa:0f:3c:a1:a4:05:ed:17:17:6d:64:49:a2: 6a:7e:d9:1e:e9:0f:6a:ad:d3:1e:bc:c0:4b:98:dd:d5:7b:14: 1d:49:4c:d0:13:8a:77:b4:e0:ea:6a:90:b0:0a:e9:42:7b:76: 1e:23:9f:f4:74:63:9b:db:04:58:d4:1c:a8:b2:91:9e:c9:03: 68:d9:4a:6f:c9:19:58:ad:40:a6:9c:b9:18:9e:bd:14:50:0e: 3d:32:19:1a:4d:c5:97:ce:32:d8:a8:9f:dc:90:45:7f:46:42: cf:30:84:1a:47:86:c9:68:91:5f:eb:19:ea:e8:1e:6a:dc:e3: 40:ba:14:f8:3e:89:c9:32:4c:26:b0:36:dc:14:c0:74:c0:e8: 17:8a:84:9c:7b:7e:fc:7d:13:fa:37:bc:1e:6f:ff:17:11:bc: be:c9:69:1a -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUAQ0Mn0MoWE3QiMU5PUY4Vks3A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMTJjNmMtYWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4 Yzc3MB4XDTI2MDUxMzAwNDUxN1oXDTI4MDgxNTAwNDUxN1owPTE7MDkGA1UEAxMy NTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEyYjQzM2JiYTNmOTYwZmJj MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxAhbPxt44SCe0JSl OgPtkFCQkVlljdjSEjxmcfRFDWvdW86Xuy0NRv5jPpu5YlLKykp1Ogj9WpEuOphX 0CGQXPPcbyZhacKeE1y6n3ATAbrc47BJg510wWHuyxOGo0vvaYkwqLo4TlPV3DtU n6/pbJPSiAdQt1stBu4AEl4ye99Ngow1Kte8+1Kkgf3OBfkyJX7zlYPLqYY60UcA /8Z65oe7HBvbMxa+toP7kmNfU5TBZQ8fvE1Ixd/DanVzhSGQWZmgS3NZi2mXhJgS RdfYQCisDs+2dZhz0+lARB7Nzw+2RrqiSBLNumCV0ZnMynCcRdtLsvq76SNhKSQI /k19AgMBAAGjggOTMIIDjzAdBgNVHQ4EFgQUFiV8GWaMZxPEASsQHmRiZs13tQ0w gdIGCCsGAQUFBwELBIHFMIHCMC4GCCsGAQUFBzAFhiJyc3luYzovL2NhLm5hdC5t b2UvcmVwby9OQVRPTEFCLzIvMFoGCCsGAQUFBzAKhk5yc3luYzovL2NhLm5hdC5t b2UvcmVwby9OQVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYy NjZDRDc3QjUwRC5tZnQwNAYIKwYBBQUHMA2GKGh0dHBzOi8vY2EubmF0Lm1vZS9y cmRwL25vdGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHU MIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk My9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDRjMTJjNmMt YWIwZS00ZDAzLWI5YzgtNmMzNTkyMzY4Yzc3LzA0YzEyYzZjLWFiMGUtNGQwMy1i OWM4LTZjMzU5MjM2OGM3Ny5jcmwwHwYDVR0jBBgwFoAU3f5Ha03VVAQYBDLKVpgd CdOne8QwDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYB BQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNGMxMmM2Yy1hYjBlLTRk MDMtYjljOC02YzM1OTIzNjhjNzcuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQCF/eIAwQBhsNkAwQAjcEVMA0EAgACMAcDBQAmAv7aMCMGCCsGAQUFBwEI AQH/BBQwEqAQMA4CAgQFAgMAt5UCAwYMDzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+RTZthwVjS4VOXwY/ CDwpEbgUKkXU8HaE7C2428lsbb0gdFAOveR4AjzJtajF1+RDDvmYcdugG+/zLZmN nHxaIP4eMVt8mPzXytV4SuCy1RDs2te9eTYU3/i40an+evoPPKGkBe0XF21kSaJq ftke6Q9qrdMevMBLmN3VexQdSUzQE4p3tODqapCwCulCe3YeI5/0dGOb2wRY1Byo spGeyQNo2UpvyRlYrUCmnLkYnr0UUA49MhkaTcWXzjLYqJ/ckEV/RkLPMIQaR4bJ aJFf6xnq6B5q3ONAuhT4PonJMkwmsDbcFMB0wOgXioSce378fRP6N7web/8XEby+ yWka -----END CERTIFICATE-----Generated at Wed May 13 09:01:59 2026 by rpki-client