$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: ctY+NS0ZPXXpYDXRm0JmN/2/VgftOEbb8rAhQWzMseo= Subject key identifier: 88:08:CA:7D:B3:95:3D:53:10:7F:D6:D3:A1:28:81:9D:BB:4F:6B:C4 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 63EEE037CCE726DF4402AC73265614350EF747CE Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa Signing time: Wed 06 May 2026 11:01:07 +0000 ROA not before: Wed 06 May 2026 10:56:07 +0000 ROA not after: Wed 05 May 2027 11:01:07 +0000 asID: 9009 IP address blocks: 140.99.2.0/24 maxlen: 24 140.99.3.0/24 maxlen: 24 140.99.4.0/24 maxlen: 24 140.99.5.0/24 maxlen: 24 140.99.6.0/24 maxlen: 24 140.99.13.0/24 maxlen: 24 140.99.14.0/24 maxlen: 24 140.99.15.0/24 maxlen: 24 140.99.16.0/24 maxlen: 24 140.99.17.0/24 maxlen: 24 140.99.18.0/24 maxlen: 24 140.99.19.0/24 maxlen: 24 140.99.20.0/24 maxlen: 24 140.99.21.0/24 maxlen: 24 140.99.22.0/24 maxlen: 24 140.99.23.0/24 maxlen: 24 140.99.24.0/24 maxlen: 24 140.99.25.0/24 maxlen: 24 140.99.26.0/24 maxlen: 24 140.99.28.0/24 maxlen: 24 140.99.29.0/24 maxlen: 24 140.99.30.0/24 maxlen: 24 140.99.31.0/24 maxlen: 24 140.99.32.0/24 maxlen: 24 140.99.33.0/24 maxlen: 24 140.99.34.0/24 maxlen: 24 140.99.36.0/24 maxlen: 24 140.99.37.0/24 maxlen: 24 140.99.38.0/24 maxlen: 24 140.99.40.0/24 maxlen: 24 140.99.41.0/24 maxlen: 24 140.99.42.0/24 maxlen: 24 140.99.46.0/24 maxlen: 24 140.99.81.0/24 maxlen: 24 140.99.86.0/24 maxlen: 24 140.99.87.0/24 maxlen: 24 140.99.88.0/24 maxlen: 24 140.99.91.0/24 maxlen: 24 140.99.92.0/24 maxlen: 24 140.99.94.0/24 maxlen: 24 140.99.95.0/24 maxlen: 24 140.99.102.0/24 maxlen: 24 140.99.112.0/24 maxlen: 24 140.99.120.0/24 maxlen: 24 140.99.124.0/24 maxlen: 24 140.99.126.0/24 maxlen: 24 140.99.128.0/24 maxlen: 24 140.99.129.0/24 maxlen: 24 140.99.140.0/24 maxlen: 24 140.99.141.0/24 maxlen: 24 140.99.142.0/24 maxlen: 24 140.99.143.0/24 maxlen: 24 140.99.148.0/24 maxlen: 24 140.99.149.0/24 maxlen: 24 140.99.216.0/24 maxlen: 24 140.99.217.0/24 maxlen: 24 140.99.218.0/24 maxlen: 24 140.99.219.0/24 maxlen: 24 140.99.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 22:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ee:e0:37:cc:e7:26:df:44:02:ac:73:26:56:14:35:0e:f7:47:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: May 6 10:56:07 2026 GMT Not After : May 5 11:01:07 2027 GMT Subject: CN=8808CA7DB3953D53107FD6D3A128819DBB4F6BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:41:6c:22:fd:f2:99:b8:a1:12:10:8a:64: ef:a8:bb:63:79:26:74:e9:5a:54:21:9a:d7:5b:fb: ed:87:e3:92:dd:2b:2d:a5:8b:5a:3e:bf:91:00:85: 1f:a8:7e:df:3e:de:48:d8:26:af:35:83:29:84:49: 45:5e:30:bb:37:58:b7:fc:1a:51:eb:d4:c7:de:d1: 5f:c5:f9:2b:c0:8d:88:d7:91:86:fc:91:19:65:50: b0:72:4e:17:f5:e5:a3:f1:5f:4e:08:ff:b4:78:3d: 71:f6:92:13:f8:99:40:8a:23:d4:28:0b:15:2d:48: 89:58:22:f8:a8:e6:db:35:f7:7c:4e:fc:56:3f:3e: 74:64:f3:4e:41:5c:bb:a4:63:a0:2e:b8:b5:44:69: 06:73:a5:0c:1b:f8:0e:7b:6d:ad:19:28:bd:a8:5d: 9f:52:00:d4:14:5f:f4:4e:a9:2b:7a:16:e6:0c:15: 02:73:b9:4c:5f:a1:eb:6f:63:41:de:f1:af:24:1d: eb:ad:84:c0:33:47:50:c5:9f:b9:e2:2b:97:ef:37: 8d:95:db:65:fe:b4:03:cf:f4:05:10:a3:8d:eb:89: 33:87:6f:0f:50:cb:f4:e3:dc:d5:91:bc:a5:7e:8b: 89:f9:77:d1:18:c1:29:04:36:29:07:86:f4:15:fd: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:08:CA:7D:B3:95:3D:53:10:7F:D6:D3:A1:28:81:9D:BB:4F:6B:C4 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.2.0-140.99.6.255 140.99.13.0-140.99.26.255 140.99.28.0-140.99.34.255 140.99.36.0-140.99.38.255 140.99.40.0-140.99.42.255 140.99.46.0/24 140.99.81.0/24 140.99.86.0-140.99.88.255 140.99.91.0-140.99.92.255 140.99.94.0/23 140.99.102.0/24 140.99.112.0/24 140.99.120.0/24 140.99.124.0/24 140.99.126.0/24 140.99.128.0/23 140.99.140.0/22 140.99.148.0/23 140.99.216.0/22 140.99.227.0/24 Signature Algorithm: sha256WithRSAEncryption 73:5e:ec:95:87:e4:dc:ce:58:6a:8d:e3:1d:91:da:2e:41:b9: 16:46:70:87:90:94:5e:ca:7c:9d:08:03:89:85:02:2f:a2:b8: 7a:37:dd:ad:c0:08:1d:fd:81:e2:02:8d:7f:22:27:dd:7e:45: 06:ac:18:db:fc:e3:ed:1d:5e:ae:e9:e2:a5:db:23:e6:00:f2: eb:b3:24:6d:34:d8:fa:ec:e6:a8:e6:c1:01:ca:65:3b:9e:41: 65:52:2c:b6:8e:34:cd:dc:8d:92:13:bb:16:30:75:b5:2d:7c: 8c:45:67:fe:ba:04:f7:dc:5e:7c:e5:34:89:74:f2:95:bd:d3: 8f:9d:db:40:6e:4d:40:8d:ff:35:bc:fb:9d:f1:57:3e:4d:b3: a3:e9:bc:fc:26:75:19:b0:53:31:18:b9:49:89:a7:90:67:08: fb:19:d4:b3:42:cf:dd:de:a1:89:f7:5f:fd:89:85:6f:34:f4: 80:cb:7f:90:a8:fe:93:6a:68:94:c0:68:d6:39:7a:4a:c9:4a: 4b:9e:05:03:ff:b5:34:f1:f1:b5:b1:e9:9b:58:14:33:88:17: ce:27:77:ae:cd:6f:cf:b8:57:3f:65:c4:c4:e2:e3:72:0e:be: f6:05:aa:f2:a1:1f:48:76:2c:bb:f9:22:4f:73:77:22:b8:11: 53:24:96:20 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIUY+7gN8znJt9EAqxzJlYUNQ73R84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwNTA2MTA1NjA3WhcNMjcwNTA1MTEwMTA3 WjAzMTEwLwYDVQQDEyg4ODA4Q0E3REIzOTUzRDUzMTA3RkQ2RDNBMTI4ODE5REJC NEY2QkM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNtBbCL98pm4 oRIQimTvqLtjeSZ06VpUIZrXW/vth+OS3SstpYtaPr+RAIUfqH7fPt5I2CavNYMp hElFXjC7N1i3/BpR69TH3tFfxfkrwI2I15GG/JEZZVCwck4X9eWj8V9OCP+0eD1x 9pIT+JlAiiPUKAsVLUiJWCL4qObbNfd8TvxWPz50ZPNOQVy7pGOgLri1RGkGc6UM G/gOe22tGSi9qF2fUgDUFF/0TqkrehbmDBUCc7lMX6Hrb2NB3vGvJB3rrYTAM0dQ xZ+54iuX7zeNldtl/rQDz/QFEKON64kzh28PUMv049zVkbylfouJ+XfRGMEpBDYp B4b0Ff3fEQIDAQABo4IDLDCCAygwHQYDVR0OBBYEFIgIyn2zlT1TEH/W06EogZ27 T2vEMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgc0G CCsGAQUFBwEHAQH/BIG9MIG6MIG3BAIAATCBsDAMAwQBjGMCAwQAjGMGMAwDBACM Yw0DBACMYxowDAMEAoxjHAMEAIxjIjAMAwQCjGMkAwQAjGMmMAwDBAOMYygDBACM YyoDBACMYy4DBACMY1EwDAMEAYxjVgMEAIxjWDAMAwQAjGNbAwQAjGNcAwQBjGNe AwQAjGNmAwQAjGNwAwQAjGN4AwQAjGN8AwQAjGN+AwQBjGOAAwQCjGOMAwQBjGOU AwQCjGPYAwQAjGPjMA0GCSqGSIb3DQEBCwUAA4IBAQBzXuyVh+TczlhqjeMdkdou QbkWRnCHkJReynydCAOJhQIvorh6N92twAgd/YHiAo1/IifdfkUGrBjb/OPtHV6u 6eKl2yPmAPLrsyRtNNj67Oao5sEBymU7nkFlUiy2jjTN3I2SE7sWMHW1LXyMRWf+ ugT33F585TSJdPKVvdOPndtAbk1Ajf81vPud8Vc+TbOj6bz8JnUZsFMxGLlJiaeQ Zwj7GdSzQs/d3qGJ91/9iYVvNPSAy3+QqP6TamiUwGjWOXpKyUpLngUD/7U08fG1 sembWBQziBfOJ3euzW/PuFc/ZcTE4uNyDr72BaryoR9Idiy7+SJPc3ciuBFTJJYg -----END CERTIFICATE-----Generated at Tue May 12 22:54:59 2026 by rpki-client