Certificate

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
File:                     5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer (raw, json)
Hash identifier:          H/2uLnlb57X1YMKcVIfyAKK+8lDlUQn/czoQCwlQbwo=
Subject key identifier:   51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       0DD3BB4AA0D73B9A1012B6C59A3E2666E94666A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Manifest:                 rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.mft
caRepository:             rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/
Notify URL:               https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 10:44:16 +0000
Certificate not after:    Tue 20 Jan 2026 10:49:16 +0000
Subordinate resources:    IP: 140.235.37.0 -- 140.235.39.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d3:bb:4a:a0:d7:3b:9a:10:12:b6:c5:9a:3e:26:66:e9:46:66:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Jan 21 10:44:16 2025 GMT
            Not After : Jan 20 10:49:16 2026 GMT
        Subject: CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:48:71:f0:04:6d:be:25:c4:93:31:77:eb:
                    b0:74:89:77:ae:04:5c:1f:c3:60:e5:97:f0:0a:ad:
                    63:0c:ad:11:bd:5c:2b:fc:16:c6:1c:28:01:0a:54:
                    56:e4:c6:8e:95:c5:4f:7d:02:cf:e5:12:1a:7e:02:
                    61:92:f4:69:11:fd:9e:dd:46:e5:81:f0:40:06:b2:
                    9b:13:68:69:63:26:d0:e8:76:bc:db:d7:10:da:78:
                    59:5a:eb:e9:54:02:64:e4:db:f7:0b:a3:dd:0a:e5:
                    a6:73:f2:07:28:ee:71:7a:44:c8:46:af:77:48:a7:
                    9a:7b:fc:7c:8c:98:2f:6e:18:b4:4f:22:20:d8:3f:
                    e0:35:f6:62:5c:45:02:bd:7f:b7:71:55:2c:78:b0:
                    39:f3:6c:0f:a1:b9:d4:9b:af:cc:6f:7b:f5:8c:fe:
                    f8:51:6c:fe:81:84:0a:3c:50:84:45:36:23:1b:e3:
                    cf:ff:e0:d6:f7:ad:be:44:ed:60:ad:87:e9:81:82:
                    fb:3b:bf:81:0f:48:86:6b:57:95:08:f5:1d:05:01:
                    36:c0:7e:23:ce:9c:3a:2b:8b:35:2e:2e:1d:9f:e2:
                    c8:bf:d9:9d:0e:05:c9:8e:34:55:4d:8f:06:27:a5:
                    48:d4:47:42:7c:cb:0b:fb:21:b0:6f:fb:03:8a:2a:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/
                RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.mft
                RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.37.0-140.235.39.255

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:e3:e9:3a:a7:6c:7d:eb:37:5b:9d:4d:f7:77:2a:1a:1b:
         35:0f:b8:e4:1a:27:c7:9e:29:27:93:b1:c5:0f:da:62:72:33:
         4a:92:3f:85:71:95:3f:b1:42:4b:59:51:0c:7a:8e:39:47:6e:
         83:24:d0:e2:b4:22:7c:1a:30:0f:09:00:aa:63:18:3d:15:3d:
         b4:3a:b0:b3:4f:0a:59:ce:0d:fa:05:25:f3:70:26:e7:2d:8d:
         f5:06:af:7e:4a:24:61:9d:0b:3d:54:0a:e8:b3:28:2c:05:7f:
         e4:42:89:e5:17:f3:a2:1b:b7:f0:c5:f9:4b:5c:ac:45:dd:1b:
         3e:8e:89:f2:81:a6:70:3b:65:fc:d8:ba:c2:a4:de:eb:e2:29:
         16:ed:2d:5c:db:d0:51:9a:b7:b4:50:d9:08:8f:4f:ba:a4:13:
         d5:c0:1e:ea:b8:78:31:2d:8f:18:61:90:d0:44:6d:aa:2d:2b:
         60:9b:9b:65:9a:78:e4:a4:2a:bf:20:a4:dd:d0:9d:c3:e3:67:
         dc:59:ed:13:9e:39:b8:a1:6e:95:c5:50:c1:14:13:01:bf:c6:
         f3:dc:3a:cb:17:d4:c0:24:47:be:78:7e:98:92:27:5f:d3:3b:
         51:1b:5b:64:f4:3c:bf:be:5e:aa:22:7c:d5:35:b1:44:ed:6d:
         b8:c8:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----