Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
File:                     421B765C540F139258E8C8E64499AC6317AE6F93.cer (raw, json)
Hash identifier:          X+a+UKx7+hxpLDWoqIVjklApEzNyYUW4Z8I03XQJWZc=
Subject key identifier:   42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       282969C4C40934BD77B1E52589ADFA98D11E124A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/5/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Thu 05 Nov 2026 12:40:55 +0000
Certificate not after:    Thu 04 Nov 2027 12:45:55 +0000
Subordinate resources:    IP: 2a0a:6045::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:69:c4:c4:09:34:bd:77:b1:e5:25:89:ad:fa:98:d1:1e:12:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov  5 12:40:55 2026 GMT
            Not After : Nov  4 12:45:55 2027 GMT
        Subject: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:5e:4a:b7:43:96:e0:73:f6:a0:5c:4a:41:
                    39:15:f3:56:82:18:e7:00:52:a4:97:be:87:7c:da:
                    2e:99:22:0e:a7:d9:d1:d9:d9:f0:7f:72:3f:64:80:
                    c3:47:20:c8:72:bc:57:33:e4:89:f3:c7:d0:3b:e5:
                    75:57:31:b6:7e:b3:6e:53:0f:7a:eb:05:2d:d5:31:
                    20:41:80:01:53:ed:e8:df:16:01:a7:e2:8d:d6:70:
                    9b:60:ce:c3:32:75:05:b1:ea:cb:4a:ed:f6:8f:27:
                    5f:05:30:a7:0b:f5:eb:7d:03:8d:16:27:d5:15:82:
                    27:bb:79:b8:d6:4f:08:91:0f:aa:45:4f:5a:1a:e5:
                    c9:43:68:c4:21:e4:3b:91:15:86:cf:5d:f0:db:16:
                    87:98:93:0a:e3:23:51:0e:fc:52:ee:f0:91:60:49:
                    d6:a5:d9:25:3b:d8:02:77:75:d2:b6:4b:2d:69:0c:
                    15:08:fa:41:be:e0:96:0e:11:55:07:3a:8b:f2:40:
                    27:ba:08:2f:ea:9c:45:e7:49:c6:27:1e:5e:ca:b2:
                    da:b4:af:c0:c9:85:3e:37:e8:92:8c:91:b1:cd:01:
                    21:73:10:61:26:48:3f:9c:ca:78:0e:d8:9c:2a:df:
                    ed:65:78:7d:fc:8d:4d:49:d9:21:a6:e9:05:0c:6d:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/5/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:9e:66:21:ca:c4:e7:71:f1:a5:2e:97:34:d2:c7:7e:f8:
         62:01:4d:08:3e:d3:f6:f1:c2:73:aa:1e:39:e3:91:75:3f:d0:
         13:80:a1:43:b9:51:27:6a:84:c6:af:9d:81:77:99:f7:cc:cd:
         7a:b6:9e:5e:1d:47:7c:80:4e:a4:2a:94:a9:84:02:c8:94:47:
         5a:a0:79:7f:9f:cf:dc:68:e6:ef:26:88:83:e7:fd:2c:a5:00:
         73:0c:fd:86:16:81:fe:34:a0:65:63:a8:fe:a3:f6:c5:f7:7d:
         95:f0:5d:56:2b:31:ce:cf:b9:d8:a2:85:38:87:ff:94:83:04:
         9b:18:f7:f4:f7:57:00:84:d0:e3:9c:72:38:d7:aa:00:52:fd:
         53:8f:bc:45:03:4f:da:e6:87:4e:ea:2e:32:4d:2b:cc:37:12:
         c0:6f:fb:f5:a1:6d:cf:97:3b:d9:18:02:62:06:e1:a9:6c:00:
         10:4f:dd:6a:21:d8:52:e2:4f:35:23:98:ab:97:39:ad:e5:af:
         10:8e:28:c5:a8:3a:a8:d0:ab:0c:e1:05:ed:ba:c0:1b:b8:4b:
         ec:60:66:74:d0:96:78:b6:5c:ee:01:ab:16:0d:40:e3:7f:6f:
         9d:bc:94:54:1f:8a:0b:36:27:a6:bb:d2:d4:6e:d4:d7:b5:55:
         8e:76:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:54:30 2026 by rpki-client