
$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: VE8SZ5MB74k6k9dZb7ZMSDSEKvq27MvaIV7gJS44R9s=
Subject key identifier: A6:8D:F6:35:DB:BB:7A:B0:46:E9:CA:DF:B9:3C:91:ED:FC:77:0A:6F
Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial: 688AE3296EC86AB08898B2471BA4C5319F7A13D8
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS9009.roa
Signing time: Tue 19 May 2026 12:28:38 +0000
ROA not before: Tue 19 May 2026 12:23:38 +0000
ROA not after: Tue 18 May 2027 12:28:38 +0000
asID: 9009
IP address blocks: 216.75.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 03 Jun 2026 09:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8a:e3:29:6e:c8:6a:b0:88:98:b2:47:1b:a4:c5:31:9f:7a:13:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Validity
Not Before: May 19 12:23:38 2026 GMT
Not After : May 18 12:28:38 2027 GMT
Subject: CN=A68DF635DBBB7AB046E9CADFB93C91EDFC770A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:cd:4c:bd:c3:b8:70:ca:d7:95:bf:26:ce:
7b:b8:ad:1c:5d:4a:fb:64:5f:f6:82:5b:40:02:4c:
8e:9e:f1:51:59:09:af:2d:d0:d3:ba:9c:28:0d:b9:
60:b8:36:fd:ee:6b:7f:9e:c6:60:04:aa:86:54:ec:
2c:46:6a:b7:99:17:57:2e:f7:2f:04:67:3b:a7:8c:
5f:6e:bc:f3:6b:20:c8:f8:1e:f7:a4:9b:7f:84:40:
c5:91:98:ac:9d:90:f5:6f:ca:ea:5a:27:a1:60:5c:
ed:24:81:e7:66:b8:02:e0:4d:79:10:73:1f:96:08:
6e:76:a4:e7:4e:0c:6f:0e:d0:4f:72:23:e3:de:93:
f9:ef:00:e1:23:63:4f:da:24:01:60:77:b9:04:ea:
2d:d1:c9:cd:d5:77:85:83:74:ad:f7:29:59:a5:b3:
33:03:04:49:de:05:f7:75:60:34:d9:56:cd:0b:32:
fb:92:19:cb:16:b9:6b:24:c9:98:39:1a:db:7e:6a:
a1:90:86:18:22:62:1a:6d:69:8b:23:ff:ad:ff:7a:
82:ca:ad:51:12:02:a8:21:1a:a8:97:08:ec:87:5c:
f3:a4:a2:66:16:c7:63:53:80:7d:93:2d:01:9a:3f:
ce:83:c4:7a:5d:75:20:3b:e7:00:9b:c0:f4:b7:89:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:F6:35:DB:BB:7A:B0:46:E9:CA:DF:B9:3C:91:ED:FC:77:0A:6F
X509v3 Authority Key Identifier:
keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.75.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5b:e0:bf:a9:2b:20:8d:3c:bb:1c:81:a9:6d:f5:20:2d:47:
ca:b7:0d:66:77:da:2b:ae:8c:13:ff:7d:92:3d:d6:e5:39:d0:
cf:8b:2f:47:19:e7:4d:f7:d3:90:dd:67:c8:03:82:a3:96:79:
e2:9d:f4:3d:db:1c:36:be:2c:6c:b3:e9:1e:9b:c6:4b:76:20:
cf:b7:57:eb:5c:21:3e:25:5c:9a:82:cc:fc:d9:cc:b6:1c:15:
4a:25:1b:e1:59:47:77:c3:45:68:89:91:54:42:e0:f2:82:dc:
76:a0:03:12:1d:23:9b:c0:96:ec:9c:92:d3:b8:f8:60:9a:a2:
34:d0:0d:51:b7:48:89:a3:0b:19:5a:e6:a1:81:cb:10:61:1c:
69:a5:94:95:42:08:0d:e9:16:57:d7:32:26:9d:d5:90:9f:c5:
e9:34:22:18:58:bb:90:b3:eb:12:d5:c3:4d:cc:5f:6f:14:46:
f5:73:26:e4:32:ad:9c:43:ec:f5:15:9f:53:52:b3:ff:d6:23:
e5:1c:18:34:06:69:8d:5d:1e:55:59:3d:06:fc:cc:0c:1a:7e:
fc:f5:3b:e7:50:9a:a9:aa:b9:74:03:cb:57:0f:41:35:e3:2a:
ee:2b:86:4d:29:b5:78:70:74:7e:12:29:ab:9d:91:28:06:06:
a5:a8:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:14 2026 by rpki-client