Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
File:                     421B765C540F139258E8C8E64499AC6317AE6F93.cer (raw, json)
Hash identifier:          RSUCceln0LsTEfQ2mC6vWq0IoKYi9FtWS4R2MtS9zU0=
Subject key identifier:   42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       25F4DE9985AE8CC073671D444BEC48130C672D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/5/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Wed 24 Jun 2026 15:25:42 +0000
Certificate not after:    Wed 23 Jun 2027 15:30:42 +0000
Subordinate resources:    IP: 2a0a:6045::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f4:de:99:85:ae:8c:c0:73:67:1d:44:4b:ec:48:13:0c:67:2d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun 24 15:25:42 2026 GMT
            Not After : Jun 23 15:30:42 2027 GMT
        Subject: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:5e:4a:b7:43:96:e0:73:f6:a0:5c:4a:41:
                    39:15:f3:56:82:18:e7:00:52:a4:97:be:87:7c:da:
                    2e:99:22:0e:a7:d9:d1:d9:d9:f0:7f:72:3f:64:80:
                    c3:47:20:c8:72:bc:57:33:e4:89:f3:c7:d0:3b:e5:
                    75:57:31:b6:7e:b3:6e:53:0f:7a:eb:05:2d:d5:31:
                    20:41:80:01:53:ed:e8:df:16:01:a7:e2:8d:d6:70:
                    9b:60:ce:c3:32:75:05:b1:ea:cb:4a:ed:f6:8f:27:
                    5f:05:30:a7:0b:f5:eb:7d:03:8d:16:27:d5:15:82:
                    27:bb:79:b8:d6:4f:08:91:0f:aa:45:4f:5a:1a:e5:
                    c9:43:68:c4:21:e4:3b:91:15:86:cf:5d:f0:db:16:
                    87:98:93:0a:e3:23:51:0e:fc:52:ee:f0:91:60:49:
                    d6:a5:d9:25:3b:d8:02:77:75:d2:b6:4b:2d:69:0c:
                    15:08:fa:41:be:e0:96:0e:11:55:07:3a:8b:f2:40:
                    27:ba:08:2f:ea:9c:45:e7:49:c6:27:1e:5e:ca:b2:
                    da:b4:af:c0:c9:85:3e:37:e8:92:8c:91:b1:cd:01:
                    21:73:10:61:26:48:3f:9c:ca:78:0e:d8:9c:2a:df:
                    ed:65:78:7d:fc:8d:4d:49:d9:21:a6:e9:05:0c:6d:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/5/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:dc:d0:39:3c:27:b2:6d:7d:ac:83:46:96:93:da:6a:d2:
         5c:95:99:07:c9:e6:76:1b:8d:de:61:e4:88:cd:53:4c:54:ff:
         23:ed:4f:e8:50:4a:7a:b6:30:76:0d:4e:f0:81:e1:78:72:49:
         43:29:26:3e:7c:e8:b5:eb:0e:a0:e1:f1:96:8c:a8:59:ce:cc:
         41:18:fa:5e:15:71:d7:b7:7b:4e:b6:3b:d4:ee:ae:da:83:59:
         d3:c5:ad:8c:63:c8:af:94:57:52:d6:82:0b:7e:f2:00:37:83:
         e0:8d:29:97:8f:9d:10:aa:8d:7a:93:a2:cc:0b:51:61:04:5f:
         74:ed:b5:e0:8c:a3:fa:8d:e7:eb:cb:c0:21:d6:9a:ff:6b:fc:
         9c:d5:24:91:c5:b4:f8:dc:df:e1:f6:fc:c5:2b:ec:bf:c6:21:
         6e:46:e5:45:4a:49:8e:09:64:9f:50:f9:f6:25:67:47:68:fb:
         df:55:71:fd:63:50:03:23:54:e3:a1:64:32:05:c4:44:88:18:
         52:d7:a1:b2:47:26:2d:c8:7b:25:5e:ba:a0:a4:2f:51:ea:53:
         d5:fe:2f:5a:60:ec:a7:92:ff:a4:83:51:56:97:ad:67:15:b2:
         01:e6:5c:db:6f:d1:2d:0c:8c:e7:43:1f:e8:70:ef:ea:dd:d5:
         36:e4:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 00:15:38 2026 by rpki-client