$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer File: C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer (raw, json) Hash identifier: Gi4Y+zX/dlGrZAA7e1RNzeCyIe//v6Lk6+NBVYcGtA4= Subject key identifier: C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6 Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99 Certificate issuer: /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e Certificate serial: 78AF626AF998A833FD0F7205A2F5CD827620574B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer Manifest: rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft caRepository: rsync://rpki.sunoaki.net/repo/net186/0/ Notify URL: https://rpki.sunoaki.net/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 19:13:38 +0000 Certificate not after: Fri 26 Mar 2027 19:18:38 +0000 Subordinate resources: IP: 2602:2a3::/40 Validation: OK Signature path: rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 05:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:af:62:6a:f9:98:a8:33:fd:0f:72:05:a2:f5:cd:82:76:20:57:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e Validity Not Before: Mar 27 19:13:38 2026 GMT Not After : Mar 26 19:18:38 2027 GMT Subject: CN=C21D158E625A33F62F0397A5B8D7D689EE2FC4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:06:23:74:88:ab:22:d7:b7:3e:98:79:19: a1:cf:3b:6d:30:7c:7e:8b:82:23:10:ef:60:75:a5: 3e:8b:92:74:89:ff:3b:a9:bf:29:7b:26:8c:87:75: bb:e0:d5:8c:7d:30:5d:67:1f:81:8a:73:2d:ce:2e: 91:10:e3:0d:4c:4d:68:89:a5:3f:e9:00:3b:9a:a7: 54:73:12:96:7d:5f:80:85:76:54:2a:ef:90:2c:61: 32:11:4e:2a:4b:9c:bd:95:89:75:f0:03:7f:fd:c1: d2:cf:e9:0d:1e:0a:8d:0a:00:9b:8f:55:6d:1e:01: fb:f1:65:58:b5:f6:ef:97:2f:04:4f:66:eb:39:ad: ec:5a:0d:cf:4a:5f:b1:f3:67:e8:0e:39:36:d7:1e: b0:e3:53:e0:a1:72:b7:ee:37:f1:e6:86:cf:78:7f: 94:24:70:9f:6b:ea:5d:87:68:2d:5b:0e:42:09:1b: ca:b2:a4:a4:41:93:af:57:5e:e2:1c:dd:72:df:f5: ae:e0:f4:1a:da:87:d9:92:97:1f:90:07:9c:2d:44: a5:0c:d2:08:b7:6e:64:c0:76:65:07:32:8b:31:91: 35:cf:7a:84:17:5a:5c:4a:4b:0b:77:03:ec:2b:90: 57:f5:49:a5:c6:bb:bb:de:fa:77:a8:df:47:74:4b: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6 X509v3 Authority Key Identifier: keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer Subject Information Access: CA Repository - URI:rsync://rpki.sunoaki.net/repo/net186/0/ RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:2a3::/40 Signature Algorithm: sha256WithRSAEncryption 4a:b7:6a:26:7b:05:db:cd:f1:6f:25:e1:1d:ef:7c:2a:a9:cc: 1e:29:63:7f:c9:46:b5:20:de:1b:6e:15:8a:e1:c9:bd:25:05: 4d:9c:18:9b:24:5d:84:7c:04:46:08:8a:d3:72:21:7a:ef:fa: d2:2c:f8:c7:c0:0a:c6:7f:8e:f8:b1:64:07:39:3c:45:f2:0f: 4c:01:87:97:89:f5:e0:25:03:00:f7:59:61:2c:1e:47:b9:01: 2a:a9:06:eb:d8:3f:bd:60:3d:b4:33:bd:21:a3:7d:cd:33:c5: d2:77:9c:a9:17:ad:07:44:bc:d2:b3:0a:c9:e6:76:a5:e2:a1: 59:be:f3:0b:6c:84:bc:31:ba:03:d3:de:0e:82:aa:99:e4:a2: ac:71:99:5a:80:3c:34:a8:e3:43:f5:b5:bc:9c:63:e8:74:0b: fa:fc:8e:c1:5d:8f:a3:7f:c1:a7:db:58:4e:74:1f:f1:63:56: 57:b0:c4:a7:6e:59:9a:84:8d:64:0a:f7:bb:e3:c2:fe:99:7c: 8f:23:1c:4c:d4:25:68:db:52:a1:d0:10:e9:89:34:bf:f5:0d: 2f:db:e2:40:47:ad:54:1c:77:eb:59:f3:47:85:c0:99:5d:69: 95:25:03:18:e0:b8:bd:8f:84:3d:58:67:41:d9:d7:80:bd:2c: 45:db:8b:99 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUeK9iavmYqDP9D3IFovXNgnYgV0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjYwMzI3MTkxMzM4WhcNMjcwMzI2MTkxODM4 WjAzMTEwLwYDVQQDEyhDMjFEMTU4RTYyNUEzM0Y2MkYwMzk3QTVCOEQ3RDY4OUVF MkZDNEI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ToGI3SIqyLX tz6YeRmhzzttMHx+i4IjEO9gdaU+i5J0if87qb8peyaMh3W74NWMfTBdZx+BinMt zi6REOMNTE1oiaU/6QA7mqdUcxKWfV+AhXZUKu+QLGEyEU4qS5y9lYl18AN//cHS z+kNHgqNCgCbj1VtHgH78WVYtfbvly8ET2brOa3sWg3PSl+x82foDjk21x6w41Pg oXK37jfx5obPeH+UJHCfa+pdh2gtWw5CCRvKsqSkQZOvV17iHN1y3/Wu4PQa2ofZ kpcfkAecLUSlDNIIt25kwHZlBzKLMZE1z3qEF1pcSksLdwPsK5BX9Umlxru73vp3 qN9HdEv+zwIDAQABo4IC5DCCAuAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU wh0VjmJaM/YvA5eluNfWie4vxLYwHwYDVR0jBBgwFoAUF6jocGCJm9uGaqEPh7E7 igR8rJkwDgYDVR0PAQH/BAQDAgEGMGUGA1UdHwReMFwwWqBYoFaGVHJzeW5jOi8v cnBraS5zdW5vYWtpLm5ldC9yZXBvL1NVTk9BS0kvMC8xN0E4RTg3MDYwODk5QkRC ODY2QUExMEY4N0IxM0I4QTA0N0NBQzk5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMw geAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk My9hNzM0MjBjYi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQwZTZjYWIt ZTY2Yy00Y2E3LWFiNjEtMTI2YjNjZmNiYjg2LzcyMDNkZTlhOTNhNjEzNjI0ZmVi ZjhjZWY4NWViMTc2ZmViNTQ1NDA1MWJiZjY5YzNlLmNlcjCB4gYIKwYBBQUHAQsE gdUwgdIwMwYIKwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5zdW5vYWtpLm5ldC9yZXBv L25ldDE4Ni8wLzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0 L3JlcG8vbmV0MTg2LzAvQzIxRDE1OEU2MjVBMzNGNjJGMDM5N0E1QjhEN0Q2ODlF RTJGQzRCNi5tZnQwOgYIKwYBBQUHMA2GLmh0dHBzOi8vcnBraS5zdW5vYWtpLm5l dC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYCAqMAMA0GCSqGSIb3DQEB CwUAA4IBAQBKt2omewXbzfFvJeEd73wqqcweKWN/yUa1IN4bbhWK4cm9JQVNnBib JF2EfARGCIrTciF67/rSLPjHwArGf474sWQHOTxF8g9MAYeXifXgJQMA91lhLB5H uQEqqQbr2D+9YD20M70ho33NM8XSd5ypF60HRLzSswrJ5nal4qFZvvMLbIS8MboD 094OgqqZ5KKscZlagDw0qOND9bW8nGPodAv6/I7BXY+jf8Gn21hOdB/xY1ZXsMSn blmahI1kCve748L+mXyPIxxM1CVo21Kh0BDpiTS/9Q0v2+JAR61UHHfrWfNHhcCZ XWmVJQMY4Li9j4Q9WGdB2deAvSxF24uZ -----END CERTIFICATE-----Generated at Sat Mar 28 10:31:13 2026 by rpki-client