$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer File: C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer (raw, json) Hash identifier: UPA/tYkjWZP7boLORN+RyIkiP9YNqKEwsdWXPhDvydM= Subject key identifier: C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6 Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99 Certificate issuer: /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e Certificate serial: 1BD4ED33A38FACD0EF2464C5666F245A780656EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer Manifest: rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft caRepository: rsync://rpki.sunoaki.net/repo/net186/0/ Notify URL: https://rpki.sunoaki.net/rrdp/notification.xml Certificate not before: Tue 03 Mar 2026 22:35:14 +0000 Certificate not after: Tue 02 Mar 2027 22:40:14 +0000 Subordinate resources: IP: 2602:2a3::/40 Validation: OK Signature path: rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 04:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d4:ed:33:a3:8f:ac:d0:ef:24:64:c5:66:6f:24:5a:78:06:56:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e Validity Not Before: Mar 3 22:35:14 2026 GMT Not After : Mar 2 22:40:14 2027 GMT Subject: CN=C21D158E625A33F62F0397A5B8D7D689EE2FC4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:06:23:74:88:ab:22:d7:b7:3e:98:79:19: a1:cf:3b:6d:30:7c:7e:8b:82:23:10:ef:60:75:a5: 3e:8b:92:74:89:ff:3b:a9:bf:29:7b:26:8c:87:75: bb:e0:d5:8c:7d:30:5d:67:1f:81:8a:73:2d:ce:2e: 91:10:e3:0d:4c:4d:68:89:a5:3f:e9:00:3b:9a:a7: 54:73:12:96:7d:5f:80:85:76:54:2a:ef:90:2c:61: 32:11:4e:2a:4b:9c:bd:95:89:75:f0:03:7f:fd:c1: d2:cf:e9:0d:1e:0a:8d:0a:00:9b:8f:55:6d:1e:01: fb:f1:65:58:b5:f6:ef:97:2f:04:4f:66:eb:39:ad: ec:5a:0d:cf:4a:5f:b1:f3:67:e8:0e:39:36:d7:1e: b0:e3:53:e0:a1:72:b7:ee:37:f1:e6:86:cf:78:7f: 94:24:70:9f:6b:ea:5d:87:68:2d:5b:0e:42:09:1b: ca:b2:a4:a4:41:93:af:57:5e:e2:1c:dd:72:df:f5: ae:e0:f4:1a:da:87:d9:92:97:1f:90:07:9c:2d:44: a5:0c:d2:08:b7:6e:64:c0:76:65:07:32:8b:31:91: 35:cf:7a:84:17:5a:5c:4a:4b:0b:77:03:ec:2b:90: 57:f5:49:a5:c6:bb:bb:de:fa:77:a8:df:47:74:4b: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6 X509v3 Authority Key Identifier: keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer Subject Information Access: CA Repository - URI:rsync://rpki.sunoaki.net/repo/net186/0/ RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:2a3::/40 Signature Algorithm: sha256WithRSAEncryption 96:a1:92:b9:6e:91:a2:ae:13:f9:6c:49:14:0e:60:d3:9f:7f: 89:30:e0:f2:df:3c:7c:63:94:6c:d3:c7:c5:90:55:8d:2f:92: b3:ea:42:c3:9a:f0:4e:01:45:82:65:1d:49:0e:c5:8f:bf:61: e2:18:66:9e:43:f7:40:4e:a6:5f:40:9a:8f:c9:05:05:dc:5b: cf:43:df:9a:40:cb:fb:da:95:a3:d5:18:42:3c:86:ba:58:49: a5:5e:2e:3c:1a:c1:14:12:64:a5:59:38:cd:25:0e:e4:a0:89: 83:01:12:6d:a5:df:e3:fd:0f:83:84:88:79:6e:b1:f7:d9:72: 3f:96:2b:ea:bc:01:ca:bf:58:ed:a6:ae:fd:d8:fd:b2:f5:f9: 4d:aa:92:f6:e9:89:b8:7d:40:31:bf:09:9c:08:05:d7:b2:51: 95:d7:69:1d:05:f4:d3:0a:4f:2c:15:37:c9:25:2f:44:23:d2: 76:63:8f:31:a9:e4:17:ee:4b:14:14:fb:bb:bf:52:67:62:f5: a7:28:b2:cb:89:96:f9:64:de:89:a7:f4:73:6c:76:87:88:7c: e9:d1:bc:01:1d:50:45:ff:86:68:a3:50:5f:65:de:12:e2:c5: 85:c6:ac:2d:9c:40:9a:a2:26:32:87:bd:02:52:44:23:33:e6: 99:5a:29:c9 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUG9TtM6OPrNDvJGTFZm8kWngGVu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjYwMzAzMjIzNTE0WhcNMjcwMzAyMjI0MDE0 WjAzMTEwLwYDVQQDEyhDMjFEMTU4RTYyNUEzM0Y2MkYwMzk3QTVCOEQ3RDY4OUVF MkZDNEI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ToGI3SIqyLX tz6YeRmhzzttMHx+i4IjEO9gdaU+i5J0if87qb8peyaMh3W74NWMfTBdZx+BinMt zi6REOMNTE1oiaU/6QA7mqdUcxKWfV+AhXZUKu+QLGEyEU4qS5y9lYl18AN//cHS z+kNHgqNCgCbj1VtHgH78WVYtfbvly8ET2brOa3sWg3PSl+x82foDjk21x6w41Pg oXK37jfx5obPeH+UJHCfa+pdh2gtWw5CCRvKsqSkQZOvV17iHN1y3/Wu4PQa2ofZ kpcfkAecLUSlDNIIt25kwHZlBzKLMZE1z3qEF1pcSksLdwPsK5BX9Umlxru73vp3 qN9HdEv+zwIDAQABo4IC5DCCAuAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU wh0VjmJaM/YvA5eluNfWie4vxLYwHwYDVR0jBBgwFoAUF6jocGCJm9uGaqEPh7E7 igR8rJkwDgYDVR0PAQH/BAQDAgEGMGUGA1UdHwReMFwwWqBYoFaGVHJzeW5jOi8v cnBraS5zdW5vYWtpLm5ldC9yZXBvL1NVTk9BS0kvMC8xN0E4RTg3MDYwODk5QkRC ODY2QUExMEY4N0IxM0I4QTA0N0NBQzk5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMw geAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk My9hNzM0MjBjYi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQwZTZjYWIt ZTY2Yy00Y2E3LWFiNjEtMTI2YjNjZmNiYjg2LzcyMDNkZTlhOTNhNjEzNjI0ZmVi ZjhjZWY4NWViMTc2ZmViNTQ1NDA1MWJiZjY5YzNlLmNlcjCB4gYIKwYBBQUHAQsE gdUwgdIwMwYIKwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5zdW5vYWtpLm5ldC9yZXBv L25ldDE4Ni8wLzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0 L3JlcG8vbmV0MTg2LzAvQzIxRDE1OEU2MjVBMzNGNjJGMDM5N0E1QjhEN0Q2ODlF RTJGQzRCNi5tZnQwOgYIKwYBBQUHMA2GLmh0dHBzOi8vcnBraS5zdW5vYWtpLm5l dC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYCAqMAMA0GCSqGSIb3DQEB CwUAA4IBAQCWoZK5bpGirhP5bEkUDmDTn3+JMODy3zx8Y5Rs08fFkFWNL5Kz6kLD mvBOAUWCZR1JDsWPv2HiGGaeQ/dATqZfQJqPyQUF3FvPQ9+aQMv72pWj1RhCPIa6 WEmlXi48GsEUEmSlWTjNJQ7koImDARJtpd/j/Q+DhIh5brH32XI/livqvAHKv1jt pq792P2y9flNqpL26Ym4fUAxvwmcCAXXslGV12kdBfTTCk8sFTfJJS9EI9J2Y48x qeQX7ksUFPu7v1JnYvWnKLLLiZb5ZN6Jp/RzbHaHiHzp0bwBHVBF/4Zoo1BfZd4S 4sWFxqwtnECaoiYyh70CUkQjM+aZWinJ -----END CERTIFICATE-----Generated at Wed Mar 4 17:27:45 2026 by rpki-client