$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa File: AS36217.roa (raw, json) Hash identifier: stpxf15fbR1991KBnZUhgJ/ZoW1LN9Yj72/DaqZviVE= Subject key identifier: BC:D8:D5:E9:4C:AC:1E:3E:AA:81:A0:E6:F9:11:44:62:1F:3D:B6:9E Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 394F275BC1F9A60DE5D36B9E2319609D5B996A1E Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa Signing time: Thu 13 Mar 2025 21:03:04 +0000 ROA not before: Thu 13 Mar 2025 20:58:04 +0000 ROA not after: Thu 12 Mar 2026 21:03:04 +0000 asID: 36217 IP address blocks: 66.85.249.0/24 maxlen: 24 157.53.224.0/24 maxlen: 24 157.53.233.0/24 maxlen: 24 2607:f740:e00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 11:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4f:27:5b:c1:f9:a6:0d:e5:d3:6b:9e:23:19:60:9d:5b:99:6a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Mar 13 20:58:04 2025 GMT Not After : Mar 12 21:03:04 2026 GMT Subject: CN=BCD8D5E94CAC1E3EAA81A0E6F91144621F3DB69E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:3e:b2:64:b6:b2:12:cb:a2:cf:9f:37:99: e2:b2:14:f7:42:22:0d:68:ad:69:49:6e:32:4d:ac: 63:9f:1c:60:c2:1f:e3:f2:8b:af:52:4c:e3:98:e5: b5:28:f8:21:e7:0a:43:82:05:68:4d:79:51:e0:d3: 4b:04:b4:3b:8e:d7:7f:a9:2f:29:cd:ee:bf:a8:7d: a5:08:bd:fe:e4:eb:79:f7:2e:3a:17:77:d9:35:46: 34:cd:11:9f:73:fd:7e:53:e8:b8:aa:b5:cc:2c:24: b9:cc:af:39:67:53:0b:9f:da:68:be:8d:2f:56:a3: 8c:a0:94:44:58:a6:13:5e:2b:09:de:f2:8c:65:ed: 2d:8e:a0:a1:1f:79:08:93:90:a2:53:ba:14:86:a6: ed:b2:48:51:42:88:ce:14:d7:fa:2b:4f:78:52:35: be:19:64:c3:ba:4f:bc:c4:16:44:f8:b1:df:2d:3c: 29:ea:26:18:37:ca:c6:f4:d2:b7:07:11:ed:5e:81: 53:b4:51:9a:c0:e4:d2:97:0c:c6:f2:29:25:f2:61: 75:72:55:4c:61:93:15:5c:02:0e:40:cb:05:8f:aa: d2:d5:00:11:15:27:14:1b:63:d2:a1:08:29:22:28: 33:24:b1:b6:3d:0c:5d:48:48:bf:90:e0:f3:2b:66: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:D5:E9:4C:AC:1E:3E:AA:81:A0:E6:F9:11:44:62:1F:3D:B6:9E X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.85.249.0/24 157.53.224.0/24 157.53.233.0/24 IPv6: 2607:f740:e00a::/48 Signature Algorithm: sha256WithRSAEncryption 26:ce:b2:1c:62:a7:a1:a9:98:2d:d3:cf:73:64:e9:af:1e:b0: bf:e0:91:d2:0d:89:ac:e0:0b:8c:e0:9a:71:66:98:9e:45:f6: 3d:1f:74:ca:a0:1f:8b:7b:d2:3d:3b:ba:84:58:0f:b5:4c:c7: ad:a0:cc:2c:07:6c:b3:e3:1e:f3:16:5c:52:79:7e:b9:31:16: 6b:c0:5d:ee:20:0e:1e:3e:8f:b1:f8:ae:23:14:53:aa:ff:82: 65:bd:18:43:8e:88:b3:6f:6e:e0:2d:4b:11:47:9b:a1:fa:51: 49:64:66:c4:92:87:4e:7c:3f:ce:44:b0:39:e1:93:67:e0:12: 46:06:1f:77:85:90:46:a7:89:c2:9f:6b:84:46:71:1a:6c:cd: 7c:50:6a:ec:42:f5:90:d0:4b:c5:22:5e:35:d8:5c:a1:87:fe: 77:06:f5:0b:1b:66:96:ed:0b:78:36:50:28:2e:bf:5f:a2:81: e6:d5:3a:0a:00:75:3e:a6:d2:b2:af:57:71:2a:2d:1b:60:1e: c8:12:9c:87:84:0b:82:6b:a1:b2:3f:05:33:31:26:3f:7a:a8: 19:66:7d:da:77:6b:52:4d:b8:e0:0b:42:66:da:9b:c5:06:d7: aa:cb:f1:4b:34:ea:fc:b7:4f:23:f2:38:35:c0:e1:36:bd:14: e3:59:eb:4c -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUOU8nW8H5pg3l02ueIxlgnVuZah4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjUwMzEzMjA1ODA0WhcNMjYwMzEyMjEwMzA0 WjAzMTEwLwYDVQQDEyhCQ0Q4RDVFOTRDQUMxRTNFQUE4MUEwRTZGOTExNDQ2MjFG M0RCNjlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpM+smS2shLL os+fN5nishT3QiINaK1pSW4yTaxjnxxgwh/j8ouvUkzjmOW1KPgh5wpDggVoTXlR 4NNLBLQ7jtd/qS8pze6/qH2lCL3+5Ot59y46F3fZNUY0zRGfc/1+U+i4qrXMLCS5 zK85Z1MLn9povo0vVqOMoJREWKYTXisJ3vKMZe0tjqChH3kIk5CiU7oUhqbtskhR QojOFNf6K094UjW+GWTDuk+8xBZE+LHfLTwp6iYYN8rG9NK3BxHtXoFTtFGawOTS lwzG8ikl8mF1clVMYZMVXAIOQMsFj6rS1QARFScUG2PSoQgpIigzJLG2PQxdSEi/ kODzK2arUwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLzY1elMrB4+qoGg5vkRRGIf PbaeMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzM2MjE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwG CCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAQlX5AwQAnTXgAwQAnTXpMA8EAgAC MAkDBwAmB/dA4AowDQYJKoZIhvcNAQELBQADggEBACbOshxip6GpmC3Tz3Nk6a8e sL/gkdINiazgC4zgmnFmmJ5F9j0fdMqgH4t70j07uoRYD7VMx62gzCwHbLPjHvMW XFJ5frkxFmvAXe4gDh4+j7H4riMUU6r/gmW9GEOOiLNvbuAtSxFHm6H6UUlkZsSS h058P85EsDnhk2fgEkYGH3eFkEanicKfa4RGcRpszXxQauxC9ZDQS8UiXjXYXKGH /ncG9QsbZpbtC3g2UCguv1+igebVOgoAdT6m0rKvV3EqLRtgHsgSnIeEC4JrobI/ BTMxJj96qBlmfdp3a1JNuOALQmbam8UG16rL8Us06vy3TyPyODXA4Ta9FONZ60w= -----END CERTIFICATE-----Generated at Tue Apr 8 18:22:08 2025 by rpki-client