$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: QdU+CBSSWaXA0MVr9BvFu/WNgMFij1L/Qhap522kvds= Subject key identifier: E9:82:D8:7E:EF:EB:9D:9F:AC:14:B2:93:13:FE:83:DD:5A:92:20:C0 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3E2FADBB374555F7E8A4BA08D8381A49F44A77F2 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa Signing time: Tue 17 Jun 2025 07:17:44 +0000 ROA not before: Tue 17 Jun 2025 07:12:44 +0000 ROA not after: Tue 16 Jun 2026 07:17:44 +0000 asID: 9009 IP address blocks: 157.254.40.0/23 maxlen: 24 157.254.42.0/23 maxlen: 24 157.254.44.0/23 maxlen: 24 157.254.46.0/23 maxlen: 24 157.254.56.0/23 maxlen: 24 157.254.58.0/23 maxlen: 24 157.254.60.0/23 maxlen: 24 157.254.62.0/23 maxlen: 24 157.254.64.0/23 maxlen: 24 157.254.66.0/23 maxlen: 24 157.254.68.0/23 maxlen: 24 157.254.70.0/23 maxlen: 24 157.254.72.0/23 maxlen: 24 157.254.74.0/23 maxlen: 24 157.254.76.0/23 maxlen: 24 157.254.78.0/23 maxlen: 24 157.254.80.0/23 maxlen: 24 157.254.86.0/23 maxlen: 24 157.254.88.0/23 maxlen: 24 157.254.92.0/23 maxlen: 24 157.254.96.0/23 maxlen: 24 157.254.98.0/23 maxlen: 24 157.254.100.0/23 maxlen: 24 157.254.102.0/23 maxlen: 24 157.254.104.0/23 maxlen: 24 157.254.106.0/23 maxlen: 24 157.254.108.0/23 maxlen: 24 157.254.110.0/23 maxlen: 24 157.254.112.0/23 maxlen: 24 157.254.114.0/23 maxlen: 24 157.254.116.0/23 maxlen: 24 157.254.118.0/23 maxlen: 24 157.254.120.0/23 maxlen: 24 157.254.122.0/23 maxlen: 24 157.254.124.0/23 maxlen: 24 157.254.126.0/23 maxlen: 24 157.254.136.0/22 maxlen: 24 157.254.144.0/23 maxlen: 24 157.254.146.0/23 maxlen: 24 157.254.148.0/23 maxlen: 24 157.254.150.0/23 maxlen: 24 157.254.240.0/23 maxlen: 24 157.254.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 20:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2f:ad:bb:37:45:55:f7:e8:a4:ba:08:d8:38:1a:49:f4:4a:77:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 17 07:12:44 2025 GMT Not After : Jun 16 07:17:44 2026 GMT Subject: CN=E982D87EEFEB9D9FAC14B29313FE83DD5A9220C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:92:cf:6d:20:09:b8:35:71:27:a8:a9:84: 69:64:0d:57:9a:6c:5d:c8:05:2d:6b:03:55:33:ec: 89:5c:55:a6:b8:98:19:47:aa:e3:43:6f:5d:00:16: 96:fa:5d:a6:28:f5:0b:dd:8c:fb:10:19:48:4c:8f: 3d:02:ee:b6:4b:7b:e7:7e:77:d5:1c:4b:3b:4b:21: 7b:15:62:70:2f:06:08:dc:f3:c0:5d:50:1f:82:d4: be:00:0f:47:78:c2:66:bb:86:1c:3e:b7:24:17:6d: 16:0f:3f:a3:ad:66:5e:cf:94:38:48:8d:9e:3f:3a: bf:86:87:e2:d6:3e:e7:ff:24:69:3a:6c:21:8e:e1: 95:18:f4:6b:43:77:6d:64:f1:29:cb:16:c8:7f:a9: 8e:4d:7f:d8:ff:ff:12:4c:2e:65:9a:df:05:34:c6: 19:7f:33:80:39:e7:07:56:4c:67:cd:06:52:ce:3c: 81:52:e1:11:e6:97:43:1b:87:2c:01:4f:4c:8d:68: 91:20:b4:04:c2:cd:cf:b1:a0:6e:71:8c:77:54:fe: 64:4d:e4:e7:7e:07:a6:f5:23:f2:7e:f9:dc:b3:e2: 8b:54:e3:ab:81:72:d5:76:73:e4:b2:b3:21:fe:66: b8:9a:ef:c2:68:0e:e6:46:d9:87:51:16:c0:37:af: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:82:D8:7E:EF:EB:9D:9F:AC:14:B2:93:13:FE:83:DD:5A:92:20:C0 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.40.0/21 157.254.56.0-157.254.81.255 157.254.86.0-157.254.89.255 157.254.92.0/23 157.254.96.0/19 157.254.136.0/22 157.254.144.0/21 157.254.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:42:5a:b7:1d:35:85:3f:01:53:fc:48:b9:b7:d2:e1:ff:26: bf:ec:6d:e7:bb:dc:04:f4:e0:35:09:e7:16:2e:b4:a5:dd:1e: 31:78:13:ba:af:bf:02:da:ae:0d:df:13:e8:93:d5:33:3d:b7: 02:0c:a5:12:1f:61:18:59:9e:d0:07:c9:77:fa:44:12:8b:aa: 2e:b2:a5:f5:dd:11:45:aa:65:d2:7f:44:43:af:f9:ed:db:af: 4f:d5:d6:33:fb:eb:05:37:be:4e:4f:58:04:28:db:da:90:1b: 2a:12:e5:e2:8c:d9:7f:ef:dc:83:f9:a1:8c:a4:ef:c2:f5:20: 0d:52:40:ca:b5:a7:1e:70:ff:eb:35:55:dc:ed:7c:90:3d:2c: 22:8f:6d:23:5d:8c:0f:2d:57:4a:62:33:43:27:02:a5:02:65: 40:da:88:37:1e:87:1e:c6:09:91:33:af:72:a4:71:4b:79:b3: a9:dd:b6:f6:ff:4a:e2:06:98:f6:29:bc:86:2c:da:fb:4b:1c: c7:10:b2:a5:92:79:99:1c:c4:c5:6d:ab:1e:5e:2c:4d:1e:ed: a9:13:3e:e8:5e:70:70:7a:16:d0:c7:5a:e5:3e:cb:ec:b7:c7: cc:82:de:69:bd:30:54:1c:1e:99:74:73:2b:fd:78:71:b2:cb: a2:89:82:c1 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgIUPi+tuzdFVffopLoI2DgaSfRKd/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjE3MDcxMjQ0WhcNMjYwNjE2MDcxNzQ0 WjAzMTEwLwYDVQQDEyhFOTgyRDg3RUVGRUI5RDlGQUMxNEIyOTMxM0ZFODNERDVB OTIyMEMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0eSz20gCbg1 cSeoqYRpZA1XmmxdyAUtawNVM+yJXFWmuJgZR6rjQ29dABaW+l2mKPUL3Yz7EBlI TI89Au62S3vnfnfVHEs7SyF7FWJwLwYI3PPAXVAfgtS+AA9HeMJmu4YcPrckF20W Dz+jrWZez5Q4SI2ePzq/hofi1j7n/yRpOmwhjuGVGPRrQ3dtZPEpyxbIf6mOTX/Y //8STC5lmt8FNMYZfzOAOecHVkxnzQZSzjyBUuER5pdDG4csAU9MjWiRILQEws3P saBucYx3VP5kTeTnfgem9SPyfvncs+KLVOOrgXLVdnPksrMh/ma4mu/CaA7mRtmH URbAN69t3wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFOmC2H7v652frBSykxP+g91a kiDAMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWQYI KwYBBQUHAQcBAf8ESjBIMEYEAgABMEADBAOd/igwDAMEA53+OAMEAZ3+UDAMAwQB nf5WAwQBnf5YAwQBnf5cAwQFnf5gAwQCnf6IAwQDnf6QAwQCnf7wMA0GCSqGSIb3 DQEBCwUAA4IBAQAtQlq3HTWFPwFT/Ei5t9Lh/ya/7G3nu9wE9OA1CecWLrSl3R4x eBO6r78C2q4N3xPok9UzPbcCDKUSH2EYWZ7QB8l3+kQSi6ousqX13RFFqmXSf0RD r/nt269P1dYz++sFN75OT1gEKNvakBsqEuXijNl/79yD+aGMpO/C9SANUkDKtace cP/rNVXc7XyQPSwij20jXYwPLVdKYjNDJwKlAmVA2og3HocexgmRM69ypHFLebOp 3bb2/0riBpj2KbyGLNr7SxzHELKlknmZHMTFbaseXixNHu2pEz7oXnBwehbQx1rl Psvst8fMgt5pvTBUHB6ZdHMr/XhxssuiiYLB -----END CERTIFICATE-----Generated at Sun Jun 29 00:43:07 2025 by rpki-client