$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa File: AS36217.roa (raw, json) Hash identifier: hXOPn6niGYBOmbmWv4YffdiCeC7n67ojs+non/VqCk8= Subject key identifier: D5:B1:B8:42:58:50:ED:DE:57:84:72:10:A9:0E:4A:54:32:D9:46:54 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 35D61626A327E395F03DB71528E779341F79F1B5 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa Signing time: Thu 12 Feb 2026 21:27:54 +0000 ROA not before: Thu 12 Feb 2026 21:22:54 +0000 ROA not after: Thu 11 Feb 2027 21:27:54 +0000 asID: 36217 IP address blocks: 66.85.249.0/24 maxlen: 24 157.53.224.0/24 maxlen: 24 157.53.233.0/24 maxlen: 24 2607:f740:e00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 23:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:16:26:a3:27:e3:95:f0:3d:b7:15:28:e7:79:34:1f:79:f1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Feb 12 21:22:54 2026 GMT Not After : Feb 11 21:27:54 2027 GMT Subject: CN=D5B1B8425850EDDE57847210A90E4A5432D94654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:37:f3:b7:88:0b:6f:62:88:83:3c:39:52: a4:7e:b7:37:86:07:60:9b:58:3d:76:cf:d5:62:d8: 97:0d:a1:40:f4:1e:35:70:d0:19:bc:96:ad:62:04: b5:99:8a:c0:20:73:7c:b9:7c:22:66:c1:b1:79:64: 1f:4f:ed:0d:75:98:7b:0f:27:7b:e6:7b:e1:60:7a: 55:1b:a6:b9:95:13:47:3f:92:40:bb:c8:66:33:1e: 07:9f:47:41:38:bd:a6:24:20:dd:8b:60:66:40:d6: ff:a1:96:1c:1e:0f:de:13:0f:76:7b:e7:a5:c9:5a: 4e:8b:f5:b6:0d:af:76:c9:a1:a5:38:5e:b8:2f:05: ae:68:03:3e:91:ac:05:65:66:e9:b8:ea:2a:65:16: fa:76:1a:ee:22:8c:cf:1d:a5:9d:aa:67:c9:e6:b9: 99:61:e9:da:01:ec:ba:ba:36:6c:92:9f:e7:87:7f: 35:72:a2:15:76:66:37:a5:11:a5:0a:28:c2:e3:21: fa:d0:65:6c:d7:d3:39:1a:9f:7c:56:87:dd:b0:b3: 7f:43:3c:d2:11:4c:cb:6b:8b:c8:bc:c4:70:39:d2: 58:0d:4e:1f:e1:0c:a6:51:d6:26:81:b6:26:fe:1c: 52:e7:94:89:f5:bd:e2:d8:d8:0b:ab:b8:5f:be:e8: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:B8:42:58:50:ED:DE:57:84:72:10:A9:0E:4A:54:32:D9:46:54 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.85.249.0/24 157.53.224.0/24 157.53.233.0/24 IPv6: 2607:f740:e00a::/48 Signature Algorithm: sha256WithRSAEncryption 53:56:a1:fc:58:b5:f2:4e:a1:1d:92:2a:5f:37:12:58:32:35: d3:8d:ad:e5:82:44:8f:0f:c9:dc:8a:3d:2a:91:1d:15:88:eb: d3:37:fd:12:a4:bd:79:1b:4c:a1:17:bd:39:48:ec:3f:c0:e3: e3:a0:fd:db:7c:f3:c5:6c:21:44:c7:cb:b9:e3:83:8e:c3:35: 40:80:dd:ba:58:20:b9:4b:d0:b3:e2:d0:58:02:0f:12:ab:e1: a6:5a:0d:44:94:e5:39:e1:78:30:1d:1a:34:2e:46:f4:fd:25: 8e:8d:33:c2:16:6e:1a:9a:18:9c:97:73:59:70:2f:1e:ed:01: 8e:c3:b3:6f:b2:b4:bb:f4:2a:2c:f5:42:da:b2:b3:0a:56:1b: 65:bb:d6:7e:b3:7f:6b:f3:b5:36:ee:8c:24:60:c6:7c:3a:f8: 27:16:b8:9f:09:83:02:6a:99:71:1d:ac:24:ed:04:dd:68:ad: 49:38:dd:e4:fb:70:99:70:47:21:b4:03:69:a3:03:45:a3:95: db:49:8d:d1:7b:37:ba:8c:b8:af:16:c1:43:ea:b4:6e:14:a4: 9c:6d:f3:b7:ec:2c:ac:3e:00:b4:07:79:25:e3:ac:7b:f5:9b: 02:35:2e:35:ab:e5:de:ad:cc:5d:9f:b2:6f:80:79:ba:17:21: 16:d0:7f:2d -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUNdYWJqMn45XwPbcVKOd5NB958bUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYwMjEyMjEyMjU0WhcNMjcwMjExMjEyNzU0 WjAzMTEwLwYDVQQDEyhENUIxQjg0MjU4NTBFRERFNTc4NDcyMTBBOTBFNEE1NDMy RDk0NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxI387eIC29i iIM8OVKkfrc3hgdgm1g9ds/VYtiXDaFA9B41cNAZvJatYgS1mYrAIHN8uXwiZsGx eWQfT+0NdZh7Dyd75nvhYHpVG6a5lRNHP5JAu8hmMx4Hn0dBOL2mJCDdi2BmQNb/ oZYcHg/eEw92e+elyVpOi/W2Da92yaGlOF64LwWuaAM+kawFZWbpuOoqZRb6dhru IozPHaWdqmfJ5rmZYenaAey6ujZskp/nh381cqIVdmY3pRGlCijC4yH60GVs19M5 Gp98VofdsLN/QzzSEUzLa4vIvMRwOdJYDU4f4QymUdYmgbYm/hxS55SJ9b3i2NgL q7hfvuhMYQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNWxuEJYUO3eV4RyEKkOSlQy 2UZUMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzM2MjE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwG CCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAQlX5AwQAnTXgAwQAnTXpMA8EAgAC MAkDBwAmB/dA4AowDQYJKoZIhvcNAQELBQADggEBAFNWofxYtfJOoR2SKl83Elgy NdONreWCRI8PydyKPSqRHRWI69M3/RKkvXkbTKEXvTlI7D/A4+Og/dt888VsIUTH y7njg47DNUCA3bpYILlL0LPi0FgCDxKr4aZaDUSU5TnheDAdGjQuRvT9JY6NM8IW bhqaGJyXc1lwLx7tAY7Ds2+ytLv0Kiz1QtqyswpWG2W71n6zf2vztTbujCRgxnw6 +CcWuJ8JgwJqmXEdrCTtBN1orUk43eT7cJlwRyG0A2mjA0WjldtJjdF7N7qMuK8W wUPqtG4UpJxt87fsLKw+ALQHeSXjrHv1mwI1LjWr5d6tzF2fsm+AeboXIRbQfy0= -----END CERTIFICATE-----Generated at Mon Mar 2 10:11:22 2026 by rpki-client