$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: nfoodovV27CS3NNO02KbOAJbsPpm4gLFSQA1CyRjcpc= Subject key identifier: 34:CB:30:D5:5D:45:CF:9D:78:5F:81:40:61:F2:4F:15:49:5C:18:7D Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 2B2AD892CE772BF751CD1A8B38E258FA3CF66588 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa Signing time: Mon 26 Feb 2024 16:03:13 +0000 ROA not before: Mon 26 Feb 2024 15:58:13 +0000 ROA not after: Mon 24 Feb 2025 16:03:13 +0000 asID: 9009 IP address blocks: 140.99.2.0/24 maxlen: 24 140.99.3.0/24 maxlen: 24 140.99.4.0/24 maxlen: 24 140.99.5.0/24 maxlen: 24 140.99.6.0/24 maxlen: 24 140.99.13.0/24 maxlen: 24 140.99.14.0/24 maxlen: 24 140.99.15.0/24 maxlen: 24 140.99.16.0/24 maxlen: 24 140.99.17.0/24 maxlen: 24 140.99.18.0/24 maxlen: 24 140.99.19.0/24 maxlen: 24 140.99.20.0/24 maxlen: 24 140.99.21.0/24 maxlen: 24 140.99.22.0/24 maxlen: 24 140.99.23.0/24 maxlen: 24 140.99.24.0/24 maxlen: 24 140.99.25.0/24 maxlen: 24 140.99.26.0/24 maxlen: 24 140.99.28.0/24 maxlen: 24 140.99.29.0/24 maxlen: 24 140.99.30.0/24 maxlen: 24 140.99.31.0/24 maxlen: 24 140.99.32.0/24 maxlen: 24 140.99.33.0/24 maxlen: 24 140.99.34.0/24 maxlen: 24 140.99.36.0/24 maxlen: 24 140.99.37.0/24 maxlen: 24 140.99.38.0/24 maxlen: 24 140.99.40.0/24 maxlen: 24 140.99.41.0/24 maxlen: 24 140.99.42.0/24 maxlen: 24 140.99.46.0/24 maxlen: 24 140.99.81.0/24 maxlen: 24 140.99.86.0/24 maxlen: 24 140.99.87.0/24 maxlen: 24 140.99.88.0/24 maxlen: 24 140.99.91.0/24 maxlen: 24 140.99.92.0/24 maxlen: 24 140.99.94.0/24 maxlen: 24 140.99.95.0/24 maxlen: 24 140.99.102.0/24 maxlen: 24 140.99.112.0/24 maxlen: 24 140.99.120.0/24 maxlen: 24 140.99.124.0/24 maxlen: 24 140.99.126.0/24 maxlen: 24 140.99.128.0/24 maxlen: 24 140.99.129.0/24 maxlen: 24 140.99.140.0/24 maxlen: 24 140.99.141.0/24 maxlen: 24 140.99.142.0/24 maxlen: 24 140.99.143.0/24 maxlen: 24 140.99.148.0/24 maxlen: 24 140.99.149.0/24 maxlen: 24 140.99.188.0/24 maxlen: 24 140.99.189.0/24 maxlen: 24 140.99.191.0/24 maxlen: 24 140.99.192.0/24 maxlen: 24 140.99.193.0/24 maxlen: 24 140.99.194.0/24 maxlen: 24 140.99.195.0/24 maxlen: 24 140.99.196.0/24 maxlen: 24 140.99.197.0/24 maxlen: 24 140.99.198.0/24 maxlen: 24 140.99.199.0/24 maxlen: 24 140.99.200.0/24 maxlen: 24 140.99.201.0/24 maxlen: 24 140.99.202.0/24 maxlen: 24 140.99.203.0/24 maxlen: 24 140.99.204.0/24 maxlen: 24 140.99.206.0/24 maxlen: 24 140.99.207.0/24 maxlen: 24 140.99.212.0/24 maxlen: 24 140.99.214.0/24 maxlen: 24 140.99.215.0/24 maxlen: 24 140.99.216.0/24 maxlen: 24 140.99.217.0/24 maxlen: 24 140.99.218.0/24 maxlen: 24 140.99.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 06:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2a:d8:92:ce:77:2b:f7:51:cd:1a:8b:38:e2:58:fa:3c:f6:65:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Feb 26 15:58:13 2024 GMT Not After : Feb 24 16:03:13 2025 GMT Subject: CN=34CB30D55D45CF9D785F814061F24F15495C187D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:e0:ba:6f:38:e4:1a:fb:3f:d7:2d:ce:ed: 79:e1:1e:e2:6d:51:97:0a:69:55:f0:45:33:10:6d: ff:cf:7b:d3:ac:f3:45:84:a2:e2:94:d8:d8:8c:32: 57:be:a9:b8:59:4b:bf:57:bb:44:aa:5b:70:cb:f5: c2:96:3c:dc:d9:a0:15:6a:36:ac:96:d7:98:69:83: 20:1f:14:85:1f:b9:18:4e:ba:2f:9e:29:50:eb:20: ce:6e:0f:61:f7:67:a2:cf:86:60:9f:3c:6c:ca:8d: 64:5c:53:49:29:08:58:4e:e8:44:ea:6f:7a:61:c1: 6d:86:eb:ce:d3:02:d6:c8:67:84:47:85:ae:dc:2d: 42:3d:51:ce:c9:9c:ca:1a:e1:8d:c3:fd:22:8c:2d: 37:4d:b0:3d:7d:9b:d8:13:6f:94:93:cb:00:e9:b5: 62:a7:b5:ec:b8:7f:e2:24:b7:ab:cc:25:22:53:62: ee:eb:eb:bb:91:ee:b6:0a:8d:79:94:1c:31:88:45: b8:c9:1b:54:c6:af:3a:5a:a4:b0:60:b7:2e:f1:dd: 99:12:42:a3:dc:2a:ce:74:75:3a:76:a6:74:aa:b2: 59:cc:17:bf:65:bb:bb:65:bd:7f:38:2f:4b:42:a2: 28:b4:49:a9:2c:92:ef:c5:29:1b:57:5e:9a:a0:c9: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CB:30:D5:5D:45:CF:9D:78:5F:81:40:61:F2:4F:15:49:5C:18:7D X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.2.0-140.99.6.255 140.99.13.0-140.99.26.255 140.99.28.0-140.99.34.255 140.99.36.0-140.99.38.255 140.99.40.0-140.99.42.255 140.99.46.0/24 140.99.81.0/24 140.99.86.0-140.99.88.255 140.99.91.0-140.99.92.255 140.99.94.0/23 140.99.102.0/24 140.99.112.0/24 140.99.120.0/24 140.99.124.0/24 140.99.126.0/24 140.99.128.0/23 140.99.140.0/22 140.99.148.0/23 140.99.188.0/23 140.99.191.0-140.99.204.255 140.99.206.0/23 140.99.212.0/24 140.99.214.0-140.99.219.255 Signature Algorithm: sha256WithRSAEncryption ac:9b:a5:23:e6:66:df:94:0e:5d:9e:61:89:6f:f2:99:70:15: 87:c5:68:5b:f8:32:51:73:b5:3c:16:12:e0:f7:11:e9:b1:54: 36:d8:cb:1e:c8:35:62:4a:06:81:45:ef:db:a9:62:53:10:66: 58:ac:14:05:f9:a3:ec:ec:b4:43:fd:01:3c:5f:7c:e8:61:20: e3:56:38:4a:ab:cb:4c:52:33:c5:9e:ea:71:9f:f0:7d:1a:33: aa:52:16:53:8c:7e:b9:59:d2:47:8b:d3:2b:aa:d8:1d:53:57: 71:b9:5f:2f:9e:4a:0c:e9:5b:dc:d5:d4:fe:af:5f:d9:54:df: b0:d1:ce:bc:30:82:fb:f2:46:bb:3b:2b:02:a0:c4:ce:81:3f: 54:8c:d2:c1:d4:2d:15:70:b5:65:3a:29:43:11:c0:b2:3f:0b: 7e:82:9c:fd:9b:a3:cb:39:1a:a8:9f:fc:47:ea:28:e7:d3:0e: d6:a7:f4:83:b7:90:91:1e:1c:b5:29:56:cb:62:03:32:cf:bd: cc:c1:0b:c6:f6:6a:20:59:d4:08:44:78:9d:7e:7b:14:2d:21: 7a:f0:56:03:24:40:48:c9:67:c5:20:e8:37:9f:3c:22:a5:29: 38:9f:6b:91:00:24:90:0f:1c:c0:85:09:ef:ef:ff:71:b7:52: b8:84:1c:47 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUKyrYks53K/dRzRqLOOJY+jz2ZYgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMjI2MTU1ODEzWhcNMjUwMjI0MTYwMzEz WjAzMTEwLwYDVQQDEygzNENCMzBENTVENDVDRjlENzg1RjgxNDA2MUYyNEYxNTQ5 NUMxODdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQDgum845Br7 P9ctzu154R7ibVGXCmlV8EUzEG3/z3vTrPNFhKLilNjYjDJXvqm4WUu/V7tEqltw y/XCljzc2aAVajaslteYaYMgHxSFH7kYTrovnilQ6yDObg9h92eiz4Zgnzxsyo1k XFNJKQhYTuhE6m96YcFthuvO0wLWyGeER4Wu3C1CPVHOyZzKGuGNw/0ijC03TbA9 fZvYE2+Uk8sA6bVip7XsuH/iJLerzCUiU2Lu6+u7ke62Co15lBwxiEW4yRtUxq86 WqSwYLcu8d2ZEkKj3CrOdHU6dqZ0qrJZzBe/Zbu7Zb1/OC9LQqIotEmpLJLvxSkb V16aoMldWQIDAQABo4IDTjCCA0owHQYDVR0OBBYEFDTLMNVdRc+deF+BQGHyTxVJ XBh9MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwge8G CCsGAQUFBwEHAQH/BIHfMIHcMIHZBAIAATCB0jAMAwQBjGMCAwQAjGMGMAwDBACM Yw0DBACMYxowDAMEAoxjHAMEAIxjIjAMAwQCjGMkAwQAjGMmMAwDBAOMYygDBACM YyoDBACMYy4DBACMY1EwDAMEAYxjVgMEAIxjWDAMAwQAjGNbAwQAjGNcAwQBjGNe AwQAjGNmAwQAjGNwAwQAjGN4AwQAjGN8AwQAjGN+AwQBjGOAAwQCjGOMAwQBjGOU AwQBjGO8MAwDBACMY78DBACMY8wDBAGMY84DBACMY9QwDAMEAYxj1gMEAoxj2DAN BgkqhkiG9w0BAQsFAAOCAQEArJulI+Zm35QOXZ5hiW/ymXAVh8VoW/gyUXO1PBYS 4PcR6bFUNtjLHsg1YkoGgUXv26liUxBmWKwUBfmj7Oy0Q/0BPF986GEg41Y4SqvL TFIzxZ7qcZ/wfRozqlIWU4x+uVnSR4vTK6rYHVNXcblfL55KDOlb3NXU/q9f2VTf sNHOvDCC+/JGuzsrAqDEzoE/VIzSwdQtFXC1ZTopQxHAsj8LfoKc/ZujyzkaqJ/8 R+oo59MO1qf0g7eQkR4ctSlWy2IDMs+9zMELxvZqIFnUCER4nX57FC0hevBWAyRA SMlnxSDoN588IqUpOJ9rkQAkkA8cwIUJ7+//cbdSuIQcRw== -----END CERTIFICATE-----Generated at Sun Apr 28 05:32:16 2024 by rpki-client on console-ams.rpki-client.org