$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: rMkc3EniFD23f9DND19mI1M9UKjSXXqG6aGs6F+G0R4= Subject key identifier: A8:78:50:B2:59:B2:E0:5C:33:80:A8:37:76:E1:10:F8:28:11:97:62 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 5C83F8217F344380AB8962DCCAD011AB8D7ED006 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa Signing time: Fri 19 Jan 2024 11:56:09 +0000 ROA not before: Fri 19 Jan 2024 11:51:09 +0000 ROA not after: Fri 17 Jan 2025 11:56:09 +0000 asID: 9009 IP address blocks: 157.254.56.0/23 maxlen: 24 157.254.58.0/23 maxlen: 24 157.254.60.0/23 maxlen: 24 157.254.62.0/23 maxlen: 24 157.254.64.0/23 maxlen: 24 157.254.66.0/23 maxlen: 24 157.254.68.0/23 maxlen: 24 157.254.70.0/23 maxlen: 24 157.254.72.0/23 maxlen: 24 157.254.74.0/23 maxlen: 24 157.254.76.0/23 maxlen: 24 157.254.78.0/23 maxlen: 24 157.254.96.0/23 maxlen: 24 157.254.98.0/23 maxlen: 24 157.254.100.0/23 maxlen: 24 157.254.102.0/23 maxlen: 24 157.254.104.0/23 maxlen: 24 157.254.106.0/23 maxlen: 24 157.254.108.0/23 maxlen: 24 157.254.110.0/23 maxlen: 24 157.254.112.0/23 maxlen: 24 157.254.114.0/23 maxlen: 24 157.254.116.0/23 maxlen: 24 157.254.118.0/23 maxlen: 24 157.254.120.0/23 maxlen: 24 157.254.122.0/23 maxlen: 24 157.254.124.0/23 maxlen: 24 157.254.126.0/23 maxlen: 24 157.254.144.0/23 maxlen: 24 157.254.146.0/23 maxlen: 24 157.254.148.0/23 maxlen: 24 157.254.150.0/23 maxlen: 24 157.254.240.0/23 maxlen: 24 157.254.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 09:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:83:f8:21:7f:34:43:80:ab:89:62:dc:ca:d0:11:ab:8d:7e:d0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 19 11:51:09 2024 GMT Not After : Jan 17 11:56:09 2025 GMT Subject: CN=A87850B259B2E05C3380A83776E110F828119762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:7c:0f:8c:f2:2d:6c:c3:83:8e:a9:59:ba: 35:53:13:c3:62:e9:28:e6:8b:02:46:14:75:ac:04: 86:03:fb:3c:2c:21:ec:54:cc:36:e3:93:b1:cd:8d: 6d:18:94:4f:ca:c9:b4:87:d4:82:e8:66:56:a2:bb: 41:37:74:be:bf:62:bf:24:22:42:00:e1:77:5a:41: d0:28:96:40:2c:c3:06:d5:bb:8b:ad:96:94:b1:15: 6c:31:63:eb:5c:34:b8:f6:e8:a6:a1:9e:a4:2d:2a: fa:7a:09:02:b7:04:d0:03:99:75:a8:61:df:e0:39: c2:e0:5d:c2:1c:e3:85:5a:6c:62:99:7a:78:3c:c5: 7b:fc:49:1d:b0:bd:8e:c0:d7:bc:c6:cf:80:92:39: e3:26:82:c3:6b:84:4e:29:83:f5:a5:09:3c:47:e1: 8c:1d:0c:54:cd:e8:e4:fa:ca:23:95:12:7b:55:c1: 91:c1:aa:7d:57:3f:49:ee:b2:3a:eb:9a:2f:fe:21: f5:f7:ac:ca:a9:f6:47:fe:34:44:09:38:93:94:a6: 99:96:5f:fd:3c:3c:44:92:3c:fb:5c:d2:e8:83:7f: 91:be:bb:53:54:68:10:98:3e:2a:08:3d:3a:d1:51: 99:35:eb:ea:48:4f:40:28:9c:34:4b:e9:73:e0:47: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:50:B2:59:B2:E0:5C:33:80:A8:37:76:E1:10:F8:28:11:97:62 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.56.0-157.254.79.255 157.254.96.0/19 157.254.144.0/21 157.254.240.0/22 Signature Algorithm: sha256WithRSAEncryption ac:e1:c8:ba:ce:e4:61:ea:11:90:94:8d:7d:78:d2:55:b7:e6: 2c:35:33:ee:09:31:23:31:e7:99:0d:0b:e0:ec:55:56:33:a3: fe:6d:24:10:2c:3e:0a:3c:f8:2c:7e:49:e6:d8:51:84:73:0d: 31:2e:f6:4b:3d:5b:cc:36:fa:ec:b5:36:cc:56:5f:3d:65:74: e5:cc:8d:fe:d1:d1:8e:b6:5f:c4:ec:7e:89:c5:1e:79:af:2f: be:fc:e8:86:85:ab:d0:c7:98:4d:b1:a2:67:78:bc:9f:69:ec: 93:24:4c:eb:ad:08:a7:7d:0d:70:d5:42:07:e1:35:52:25:c0: b2:6b:7f:92:fd:8e:9b:25:da:ce:5b:76:ab:ea:29:0b:fd:05: 18:91:d9:9b:6f:f5:9e:c9:9b:8d:90:e8:93:74:c0:2c:dd:11: ef:82:ca:91:29:d3:59:50:93:2b:17:09:44:25:92:a4:40:73: b0:f2:03:5e:e4:7c:18:2b:8c:15:25:7c:c9:56:eb:c0:fb:0f: e9:d7:ae:e0:7a:a2:23:b5:21:a1:c3:01:4b:83:76:fe:5f:f3: fe:80:d7:98:4a:d4:0b:bf:19:f5:53:5b:15:ae:94:bd:37:c2: 77:2c:cb:24:e6:f0:1e:ea:96:07:e1:19:d2:3b:03:44:4f:97: aa:8a:1c:81 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUXIP4IX80Q4CriWLcytARq41+0AYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwMTE5MTE1MTA5WhcNMjUwMTE3MTE1NjA5 WjAzMTEwLwYDVQQDEyhBODc4NTBCMjU5QjJFMDVDMzM4MEE4Mzc3NkUxMTBGODI4 MTE5NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofp8D4zyLWzD g46pWbo1UxPDYuko5osCRhR1rASGA/s8LCHsVMw245OxzY1tGJRPysm0h9SC6GZW ortBN3S+v2K/JCJCAOF3WkHQKJZALMMG1buLrZaUsRVsMWPrXDS49uimoZ6kLSr6 egkCtwTQA5l1qGHf4DnC4F3CHOOFWmximXp4PMV7/EkdsL2OwNe8xs+AkjnjJoLD a4ROKYP1pQk8R+GMHQxUzejk+sojlRJ7VcGRwap9Vz9J7rI665ov/iH196zKqfZH /jRECTiTlKaZll/9PDxEkjz7XNLog3+RvrtTVGgQmD4qCD060VGZNevqSE9AKJw0 S+lz4EfpVQIDAQABo4IClzCCApMwHQYDVR0OBBYEFKh4ULJZsuBcM4CoN3bhEPgo EZdiMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYI KwYBBQUHAQcBAf8EKjAoMCYEAgABMCAwDAMEA53+OAMEBJ3+QAMEBZ3+YAMEA53+ kAMEAp3+8DANBgkqhkiG9w0BAQsFAAOCAQEArOHIus7kYeoRkJSNfXjSVbfmLDUz 7gkxIzHnmQ0L4OxVVjOj/m0kECw+Cjz4LH5J5thRhHMNMS72Sz1bzDb67LU2zFZf PWV05cyN/tHRjrZfxOx+icUeea8vvvzohoWr0MeYTbGiZ3i8n2nskyRM660Ip30N cNVCB+E1UiXAsmt/kv2OmyXazlt2q+opC/0FGJHZm2/1nsmbjZDok3TALN0R74LK kSnTWVCTKxcJRCWSpEBzsPIDXuR8GCuMFSV8yVbrwPsP6deu4HqiI7UhocMBS4N2 /l/z/oDXmErUC78Z9VNbFa6UvTfCdyzLJObwHuqWB+EZ0jsDRE+XqoocgQ== -----END CERTIFICATE-----Generated at Sun Apr 28 07:23:59 2024 by rpki-client on console-ams.rpki-client.org