$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa File: AS36217.roa (raw, json) Hash identifier: FT9REOfJRUDIKN+blOgfGVeNJspWNk0nYEu4j5fHCkE= Subject key identifier: 5C:76:D6:39:C9:59:1C:45:A7:E9:CF:8F:4D:6B:F7:00:B4:4A:BF:C8 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 0B271BCFD480CC3F95017CADAED5E1846B295525 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa Signing time: Thu 12 Nov 2026 16:02:22 +0000 ROA not before: Thu 12 Nov 2026 15:57:22 +0000 ROA not after: Thu 11 Nov 2027 16:02:22 +0000 asID: 36217 IP address blocks: 45.54.25.0/24 maxlen: 24 66.85.249.0/24 maxlen: 24 157.53.224.0/24 maxlen: 24 157.53.233.0/24 maxlen: 24 2607:f740:e7::/48 maxlen: 48 2607:f740:e00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 01:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:27:1b:cf:d4:80:cc:3f:95:01:7c:ad:ae:d5:e1:84:6b:29:55:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Nov 12 15:57:22 2026 GMT Not After : Nov 11 16:02:22 2027 GMT Subject: CN=5C76D639C9591C45A7E9CF8F4D6BF700B44ABFC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:a4:da:16:ff:3d:9b:e0:16:9f:99:64:43: be:0d:10:14:5f:d6:09:34:4e:f4:c4:4f:57:0e:89: b8:53:5b:d1:45:6b:f7:01:8a:d5:69:4e:f9:47:dc: 6b:95:70:40:e5:2b:80:3a:23:80:a9:f5:4c:43:3e: 2a:2c:48:d6:bd:02:36:fb:b9:c5:1c:9e:9f:56:b5: 78:ef:10:0b:99:b2:dc:93:29:88:c1:61:3e:32:d6: e3:e4:4c:1b:0f:33:b8:82:b3:55:1b:ac:94:34:bd: 84:5f:3d:03:61:49:2d:42:96:5a:2d:be:0b:fe:f0: 80:d1:72:60:40:17:54:af:94:66:95:dc:09:d7:94: 70:13:d0:f5:79:79:8f:13:c3:35:2f:0b:29:94:02: 1b:8e:88:49:fe:20:0e:7b:05:6f:da:18:11:2c:d4: 61:b0:2d:3c:36:51:98:fc:d5:47:ba:62:1b:5c:8e: ce:03:10:a8:bf:27:34:68:7f:7e:d9:3f:74:c9:72: 37:f8:78:4e:2a:c9:aa:c2:5c:92:d5:21:4f:49:75: 20:85:d1:94:b8:34:73:8d:50:1e:0f:2c:89:eb:57: 7b:44:e0:f1:52:e6:13:8a:c1:26:4b:6e:af:c6:94: e7:df:79:d7:9f:57:15:66:f6:16:6b:42:a3:73:c0: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:76:D6:39:C9:59:1C:45:A7:E9:CF:8F:4D:6B:F7:00:B4:4A:BF:C8 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.25.0/24 66.85.249.0/24 157.53.224.0/24 157.53.233.0/24 IPv6: 2607:f740:e7::/48 2607:f740:e00a::/48 Signature Algorithm: sha256WithRSAEncryption 0d:93:ae:49:e5:8c:8a:d3:5e:5f:81:63:d7:30:ef:79:a1:dc: 14:b9:ee:c8:f7:f0:db:3d:e8:89:67:77:56:d2:47:3b:62:86: 1a:2b:0f:82:e9:64:82:56:cf:8f:6a:f8:82:8e:31:b4:72:04: e0:41:df:7a:38:84:ce:b2:a2:5c:88:9a:1f:07:3f:00:1c:b9: 34:88:e9:53:94:3b:77:48:a7:8d:1b:60:8f:78:3c:50:04:f3: 29:54:1a:aa:20:d3:1e:72:fe:87:1b:b0:21:7c:99:48:57:19: 9f:17:c5:a5:4a:79:ff:fe:41:ae:bc:8a:b0:9b:c2:de:a3:d6: 4b:df:ed:6e:04:b2:06:98:69:3b:11:df:0b:f6:0d:f6:73:cb: 0e:58:8f:e3:63:68:2b:4d:9f:68:70:3c:0a:56:ff:cc:9e:75: 78:3a:8b:72:98:cb:28:c7:5d:3a:10:a4:5f:c8:b0:a0:65:e6: 9e:3f:27:61:aa:12:07:60:37:80:bf:69:ae:7a:c2:6b:66:e4: ce:ac:80:f5:ba:27:28:97:6e:b8:dd:f9:52:63:c0:f2:e6:1e: 4f:34:2c:25:66:3a:22:90:0d:35:56:59:8e:7f:c0:c3:3b:43: 07:de:3a:09:19:69:b0:2e:39:19:71:12:2c:8f:a8:2e:1e:f3: 02:12:fa:ac -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIUCycbz9SAzD+VAXytrtXhhGspVSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYxMTEyMTU1NzIyWhcNMjcxMTExMTYwMjIy WjAzMTEwLwYDVQQDEyg1Qzc2RDYzOUM5NTkxQzQ1QTdFOUNGOEY0RDZCRjcwMEI0 NEFCRkM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HOk2hb/PZvg Fp+ZZEO+DRAUX9YJNE70xE9XDom4U1vRRWv3AYrVaU75R9xrlXBA5SuAOiOAqfVM Qz4qLEjWvQI2+7nFHJ6fVrV47xALmbLckymIwWE+Mtbj5EwbDzO4grNVG6yUNL2E Xz0DYUktQpZaLb4L/vCA0XJgQBdUr5RmldwJ15RwE9D1eXmPE8M1LwsplAIbjohJ /iAOewVv2hgRLNRhsC08NlGY/NVHumIbXI7OAxCovyc0aH9+2T90yXI3+HhOKsmq wlyS1SFPSXUghdGUuDRzjVAeDyyJ61d7RODxUuYTisEmS26vxpTn33nXn1cVZvYW a0Kjc8DbrwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFx21jnJWRxFp+nPj01r9wC0 Sr/IMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzM2MjE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsG CCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQALTYZAwQAQlX5AwQAnTXgAwQAnTXp MBgEAgACMBIDBwAmB/dAAOcDBwAmB/dA4AowDQYJKoZIhvcNAQELBQADggEBAA2T rknljIrTXl+BY9cw73mh3BS57sj38Ns96Ilnd1bSRztihhorD4LpZIJWz49q+IKO MbRyBOBB33o4hM6yolyImh8HPwAcuTSI6VOUO3dIp40bYI94PFAE8ylUGqog0x5y /ocbsCF8mUhXGZ8XxaVKef/+Qa68irCbwt6j1kvf7W4EsgaYaTsR3wv2DfZzyw5Y j+NjaCtNn2hwPApW/8yedXg6i3KYyyjHXToQpF/IsKBl5p4/J2GqEgdgN4C/aa56 wmtm5M6sgPW6JyiXbrjd+VJjwPLmHk80LCVmOiKQDTVWWY5/wMM7QwfeOgkZabAu ORlxEiyPqC4e8wIS+qw= -----END CERTIFICATE-----Generated at Sun Nov 15 19:07:44 2026 by rpki-client