Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
File:                     421B765C540F139258E8C8E64499AC6317AE6F93.cer (raw, json)
Hash identifier:          uBIbuJSp9CS5JY1kDZfxocrYaJ6+p5aXgnTiq4UEOf8=
Subject key identifier:   42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       6C1ECBF9E54419CD0FFF58F2DA0D4A91AA3F460C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/5/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Wed 23 Sep 2026 10:11:26 +0000
Certificate not after:    Wed 22 Sep 2027 10:16:26 +0000
Subordinate resources:    IP: 2a0a:6045::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1e:cb:f9:e5:44:19:cd:0f:ff:58:f2:da:0d:4a:91:aa:3f:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Sep 23 10:11:26 2026 GMT
            Not After : Sep 22 10:16:26 2027 GMT
        Subject: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:5e:4a:b7:43:96:e0:73:f6:a0:5c:4a:41:
                    39:15:f3:56:82:18:e7:00:52:a4:97:be:87:7c:da:
                    2e:99:22:0e:a7:d9:d1:d9:d9:f0:7f:72:3f:64:80:
                    c3:47:20:c8:72:bc:57:33:e4:89:f3:c7:d0:3b:e5:
                    75:57:31:b6:7e:b3:6e:53:0f:7a:eb:05:2d:d5:31:
                    20:41:80:01:53:ed:e8:df:16:01:a7:e2:8d:d6:70:
                    9b:60:ce:c3:32:75:05:b1:ea:cb:4a:ed:f6:8f:27:
                    5f:05:30:a7:0b:f5:eb:7d:03:8d:16:27:d5:15:82:
                    27:bb:79:b8:d6:4f:08:91:0f:aa:45:4f:5a:1a:e5:
                    c9:43:68:c4:21:e4:3b:91:15:86:cf:5d:f0:db:16:
                    87:98:93:0a:e3:23:51:0e:fc:52:ee:f0:91:60:49:
                    d6:a5:d9:25:3b:d8:02:77:75:d2:b6:4b:2d:69:0c:
                    15:08:fa:41:be:e0:96:0e:11:55:07:3a:8b:f2:40:
                    27:ba:08:2f:ea:9c:45:e7:49:c6:27:1e:5e:ca:b2:
                    da:b4:af:c0:c9:85:3e:37:e8:92:8c:91:b1:cd:01:
                    21:73:10:61:26:48:3f:9c:ca:78:0e:d8:9c:2a:df:
                    ed:65:78:7d:fc:8d:4d:49:d9:21:a6:e9:05:0c:6d:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/5/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:c0:84:5d:9a:e9:90:a3:88:36:d9:34:9a:b6:c9:13:81:9b:
         ff:22:8d:d3:d3:fd:2b:ac:ad:63:36:b8:dc:b6:57:4b:4a:f7:
         a8:34:83:c3:e7:68:b5:a8:fd:c0:1e:3d:ea:c9:18:3e:39:27:
         bf:e0:80:b6:a0:c8:d0:19:42:c0:87:12:a4:c7:d7:5b:ec:31:
         ed:e6:7f:36:1f:35:8e:3c:36:9a:79:45:bb:c8:5b:8f:8d:d3:
         77:bb:e5:c8:3c:ca:31:7a:af:4b:1c:73:00:e4:71:83:8d:22:
         3f:58:55:b9:9a:56:d6:ae:72:90:5c:6a:65:7f:cb:2b:ae:ea:
         08:e7:56:d1:21:58:6e:de:93:bf:ec:dd:ae:62:97:03:9f:31:
         0c:97:33:54:c8:a2:e8:38:a0:d9:43:b0:f4:d9:6b:0b:94:2e:
         97:cd:40:bb:b8:ce:8a:5b:6f:5c:8f:55:65:62:af:a1:d0:cd:
         da:13:0e:c5:5d:67:a7:dc:22:f9:6d:8a:d9:69:19:c1:71:bb:
         20:2b:06:63:8f:bd:88:14:b0:20:58:11:29:75:54:23:ec:04:
         ef:ed:b7:ac:09:ee:fb:37:1b:bc:e7:3b:f7:29:67:11:60:0d:
         93:d3:46:f5:30:ff:4a:bf:91:ac:c9:a0:65:7d:ab:c4:fb:63:
         3d:ae:bc:06
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIUbB7L+eVEGc0P/1jy2g1Kkao/RgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MjMxMDExMjZaFw0yNzA5MjIxMDE2MjZaMDMxMTAvBgNV
BAMTKDQyMUI3NjVDNTQwRjEzOTI1OEU4QzhFNjQ0OTlBQzYzMTdBRTZGOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+V5Kt0OW4HP2oFxKQTkV81aC
GOcAUqSXvod82i6ZIg6n2dHZ2fB/cj9kgMNHIMhyvFcz5Inzx9A75XVXMbZ+s25T
D3rrBS3VMSBBgAFT7ejfFgGn4o3WcJtgzsMydQWx6stK7faPJ18FMKcL9et9A40W
J9UVgie7ebjWTwiRD6pFT1oa5clDaMQh5DuRFYbPXfDbFoeYkwrjI1EO/FLu8JFg
Sdal2SU72AJ3ddK2Sy1pDBUI+kG+4JYOEVUHOovyQCe6CC/qnEXnScYnHl7Kstq0
r8DJhT436JKMkbHNASFzEGEmSD+cyngO2Jwq3+1leH38jU1J2SGm6QUMbUABAgMB
AAGjggKMMIICiDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCG3ZcVA8Tkljo
yOZEmaxjF65vkzAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIH6BggrBgEFBQcBCwSB7TCB6jA6BggrBgEFBQcwBYYucnN5bmM6
Ly9ycGtpLmtvbW9yZWJpLm5ldHdvcmsvcmVwby9rb21vcmViaS81LzBmBggrBgEF
BQcwCoZacnN5bmM6Ly9ycGtpLmtvbW9yZWJpLm5ldHdvcmsvcmVwby9rb21vcmVi
aS81LzQyMUI3NjVDNTQwRjEzOTI1OEU4QzhFNjQ0OTlBQzYzMTdBRTZGOTMubWZ0
MEQGCCsGAQUFBzANhjhodHRwczovL3Jwa2kua29tb3JlYmkubmV0d29yazozMDMw
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgpgRTANBgkqhkiG9w0BAQsF
AAOCAQEAEcCEXZrpkKOINtk0mrbJE4Gb/yKN09P9K6ytYza43LZXS0r3qDSDw+do
taj9wB496skYPjknv+CAtqDI0BlCwIcSpMfXW+wx7eZ/Nh81jjw2mnlFu8hbj43T
d7vlyDzKMXqvSxxzAORxg40iP1hVuZpW1q5ykFxqZX/LK67qCOdW0SFYbt6Tv+zd
rmKXA58xDJczVMii6Dig2UOw9NlrC5Qul81Au7jOiltvXI9VZWKvodDN2hMOxV1n
p9wi+W2K2WkZwXG7ICsGY4+9iBSwIFgRKXVUI+wE7+23rAnu+zcbvOc79ylnEWAN
k9NG9TD/Sr+RrMmgZX2rxPtjPa68Bg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:37:02 2026 by rpki-client