Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
File:                     421B765C540F139258E8C8E64499AC6317AE6F93.cer (raw, json)
Hash identifier:          SULPnx35+hu8qE2qw2+nCQ6bvquB0BmXMo6Zi25sOio=
Subject key identifier:   42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       073C083067519A09F80B19123A90E20CB453550B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/5/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Thu 03 Jul 2025 16:41:28 +0000
Certificate not after:    Thu 02 Jul 2026 16:46:28 +0000
Subordinate resources:    IP: 2a0a:6045::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3c:08:30:67:51:9a:09:f8:0b:19:12:3a:90:e2:0c:b4:53:55:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 16:41:28 2025 GMT
            Not After : Jul  2 16:46:28 2026 GMT
        Subject: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:5e:4a:b7:43:96:e0:73:f6:a0:5c:4a:41:
                    39:15:f3:56:82:18:e7:00:52:a4:97:be:87:7c:da:
                    2e:99:22:0e:a7:d9:d1:d9:d9:f0:7f:72:3f:64:80:
                    c3:47:20:c8:72:bc:57:33:e4:89:f3:c7:d0:3b:e5:
                    75:57:31:b6:7e:b3:6e:53:0f:7a:eb:05:2d:d5:31:
                    20:41:80:01:53:ed:e8:df:16:01:a7:e2:8d:d6:70:
                    9b:60:ce:c3:32:75:05:b1:ea:cb:4a:ed:f6:8f:27:
                    5f:05:30:a7:0b:f5:eb:7d:03:8d:16:27:d5:15:82:
                    27:bb:79:b8:d6:4f:08:91:0f:aa:45:4f:5a:1a:e5:
                    c9:43:68:c4:21:e4:3b:91:15:86:cf:5d:f0:db:16:
                    87:98:93:0a:e3:23:51:0e:fc:52:ee:f0:91:60:49:
                    d6:a5:d9:25:3b:d8:02:77:75:d2:b6:4b:2d:69:0c:
                    15:08:fa:41:be:e0:96:0e:11:55:07:3a:8b:f2:40:
                    27:ba:08:2f:ea:9c:45:e7:49:c6:27:1e:5e:ca:b2:
                    da:b4:af:c0:c9:85:3e:37:e8:92:8c:91:b1:cd:01:
                    21:73:10:61:26:48:3f:9c:ca:78:0e:d8:9c:2a:df:
                    ed:65:78:7d:fc:8d:4d:49:d9:21:a6:e9:05:0c:6d:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/5/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:a6:aa:fd:ec:76:cc:27:b3:20:c9:ee:df:07:5e:be:15:31:
         5e:a2:e2:8c:e6:21:29:e4:77:97:f6:6c:53:88:a9:c1:66:89:
         2b:fe:af:5e:c4:b8:23:c4:78:f0:7a:75:05:1e:8a:2d:0d:39:
         c7:c0:46:2d:1a:98:f3:c9:32:5a:14:dc:96:08:d2:8b:6a:32:
         ea:d0:51:55:1a:bc:84:87:41:8f:8c:7a:1d:d1:00:86:f4:e8:
         e1:36:e0:d9:d7:df:d1:56:34:6a:38:62:7e:f3:7b:d9:f4:40:
         5e:4d:79:5c:2f:9d:3a:5e:2c:42:16:6d:b4:d7:3e:e7:c0:e5:
         2c:14:4c:63:2a:89:a2:52:99:31:c7:bb:7a:e3:6f:cd:a2:29:
         1b:48:5f:64:ba:85:9f:51:98:1b:a5:00:3c:38:7e:a4:6f:d2:
         3e:14:3d:3c:1e:5b:0e:72:97:eb:3c:0a:50:fb:d8:8f:85:9e:
         fe:5f:b3:c5:a6:7b:71:01:e8:bf:00:cf:df:2e:f0:cb:7d:47:
         9b:d2:63:39:85:53:a6:a5:fe:0b:ee:c6:71:8a:bc:b9:32:d5:
         71:0c:6f:cb:08:93:73:7d:34:76:a7:83:c2:1d:d0:a5:95:e7:
         41:50:83:43:34:73:cc:56:5c:1d:55:d6:6e:3d:47:ee:e6:c8:
         d0:04:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:01:52 2025 by rpki-client