Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
File:                     421B765C540F139258E8C8E64499AC6317AE6F93.cer (raw, json)
Hash identifier:          NHzQbFjX+qOZLmt2IvFXhLDu0J6DEFeD884bYP6a0C0=
Subject key identifier:   42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       33DD93E9AD1C3FE3C5033E607A14513CAB450E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
CRL Distribution Point:   rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/5/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Fri 06 Nov 2026 19:10:05 +0000
Certificate not after:    Fri 05 Nov 2027 19:15:05 +0000
Subordinate resources:    IP: 2a0a:6045::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:dd:93:e9:ad:1c:3f:e3:c5:03:3e:60:7a:14:51:3c:ab:45:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov  6 19:10:05 2026 GMT
            Not After : Nov  5 19:15:05 2027 GMT
        Subject: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:5e:4a:b7:43:96:e0:73:f6:a0:5c:4a:41:
                    39:15:f3:56:82:18:e7:00:52:a4:97:be:87:7c:da:
                    2e:99:22:0e:a7:d9:d1:d9:d9:f0:7f:72:3f:64:80:
                    c3:47:20:c8:72:bc:57:33:e4:89:f3:c7:d0:3b:e5:
                    75:57:31:b6:7e:b3:6e:53:0f:7a:eb:05:2d:d5:31:
                    20:41:80:01:53:ed:e8:df:16:01:a7:e2:8d:d6:70:
                    9b:60:ce:c3:32:75:05:b1:ea:cb:4a:ed:f6:8f:27:
                    5f:05:30:a7:0b:f5:eb:7d:03:8d:16:27:d5:15:82:
                    27:bb:79:b8:d6:4f:08:91:0f:aa:45:4f:5a:1a:e5:
                    c9:43:68:c4:21:e4:3b:91:15:86:cf:5d:f0:db:16:
                    87:98:93:0a:e3:23:51:0e:fc:52:ee:f0:91:60:49:
                    d6:a5:d9:25:3b:d8:02:77:75:d2:b6:4b:2d:69:0c:
                    15:08:fa:41:be:e0:96:0e:11:55:07:3a:8b:f2:40:
                    27:ba:08:2f:ea:9c:45:e7:49:c6:27:1e:5e:ca:b2:
                    da:b4:af:c0:c9:85:3e:37:e8:92:8c:91:b1:cd:01:
                    21:73:10:61:26:48:3f:9c:ca:78:0e:d8:9c:2a:df:
                    ed:65:78:7d:fc:8d:4d:49:d9:21:a6:e9:05:0c:6d:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/5/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:76:80:59:0d:e5:2a:e3:e4:4f:54:57:7d:61:5b:88:49:
         6b:f4:32:c4:ad:c3:13:61:e6:84:15:fd:cb:bc:12:4a:fe:7d:
         5e:99:9d:e1:9e:ee:38:30:90:e7:e8:16:e8:28:37:c8:2e:49:
         f8:3e:d8:02:41:78:32:d1:f7:d6:69:95:73:55:60:8e:82:3f:
         4f:25:8d:95:35:63:43:49:8e:4f:cd:c0:05:f0:e4:3b:b5:f6:
         20:ad:4c:1c:47:c7:84:39:36:4c:07:dd:d1:89:01:5d:1f:f3:
         68:3d:e3:11:77:d9:b8:43:8e:74:c6:60:9a:10:37:2f:45:b9:
         5e:e7:24:44:85:df:73:a7:0e:6d:9c:1b:fa:7d:7c:83:a4:50:
         3e:2e:3a:b6:89:da:7e:a1:31:31:f5:85:4a:33:50:5a:7a:d8:
         67:13:2a:fb:12:a5:8e:64:da:62:a5:b4:41:59:ac:d1:9d:64:
         ba:8b:fb:13:0f:13:e8:a3:1d:0c:2b:87:18:98:cf:db:af:a5:
         83:c7:84:fa:bc:ee:50:bf:9e:a3:ab:8f:b6:d3:a8:20:26:cb:
         0d:3f:83:9a:5a:14:ef:4f:c3:b6:31:7b:42:11:63:90:0e:f1:
         06:65:c0:7a:d0:07:85:0e:da:19:b4:48:14:23:c0:20:01:2d:
         c9:44:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:35:28 2026 by rpki-client