This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: ivfC8/0od2adW0WJqXK6Vg2kP21rR3fquxJjSXFG+mk= Subject key identifier: 72:4F:5F:A5:41:EB:C3:15:88:5F:AC:C9:4A:D5:FD:00:FE:B5:34:5A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7382D2851710E077AD585DA88C110147F6EC6C18 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa Signing time: Wed 14 Jan 2026 00:50:46 +0000 ROA not before: Wed 14 Jan 2026 00:45:46 +0000 ROA not after: Wed 13 Jan 2027 00:50:46 +0000 asID: 9009 IP address blocks: 206.53.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 03:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:82:d2:85:17:10:e0:77:ad:58:5d:a8:8c:11:01:47:f6:ec:6c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 14 00:45:46 2026 GMT Not After : Jan 13 00:50:46 2027 GMT Subject: CN=724F5FA541EBC315885FACC94AD5FD00FEB5345A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:fd:cf:d1:31:9d:0d:7c:d8:0e:59:b3:95: 11:09:56:2e:f0:dc:87:55:7b:a4:77:77:8c:7e:81: 16:c7:23:50:08:18:7d:9c:f4:11:38:96:c3:e7:8e: f1:28:44:6f:bf:49:45:4f:0f:cd:92:9b:44:3c:04: 06:0a:38:22:f2:7b:07:f6:8b:9b:ed:14:67:49:67: 24:d5:45:ac:64:81:d6:ab:58:2d:53:75:78:02:19: a0:82:7a:4f:3a:b8:a2:93:0d:37:d8:1c:a1:6d:80: ad:db:40:36:82:bb:f2:26:ee:99:37:fa:22:b2:5f: 30:22:4f:7a:c2:9f:9d:bc:e4:19:7c:7c:fe:6d:5e: 20:1e:b7:63:9f:c3:c6:f9:c5:87:5e:9e:20:41:7c: a1:0b:c4:8b:53:d7:81:b1:da:3b:6d:e3:64:3a:e7: d7:d0:41:b8:57:e9:31:f5:e7:d5:d7:e5:2c:9a:d6: fe:8b:fc:a8:04:17:7a:bf:1d:3c:46:15:a7:a6:a4: d6:4f:e8:89:01:b1:42:7b:55:a8:04:32:f9:28:c1: 96:79:6b:cf:da:b1:b0:44:67:58:16:d5:40:1b:e8: cd:5f:dc:c4:0b:d7:cf:d0:f0:4c:81:83:e4:41:3d: f6:2e:1a:ac:07:db:bf:68:1e:fd:81:4a:f8:cb:ef: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:5F:A5:41:EB:C3:15:88:5F:AC:C9:4A:D5:FD:00:FE:B5:34:5A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.53.59.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c0:14:b3:96:e1:a6:4b:7f:53:68:31:2c:8e:94:ea:73:d2: 00:73:a8:c1:2f:19:32:c8:2e:4a:88:37:08:61:b7:dc:96:9f: 90:cb:5b:07:f1:fa:7c:26:86:08:d2:76:3a:91:ef:26:0e:4d: b3:bd:88:67:b4:95:49:5b:31:67:76:34:29:a6:52:bd:a9:b1: 56:72:e5:3e:35:b1:22:5f:43:1b:50:fb:94:40:ed:72:9d:c8: ee:81:10:16:83:33:11:b7:c1:91:24:6b:a1:fe:a6:ac:d5:9c: 1d:e3:2d:60:d0:97:a6:e9:7e:8a:1b:45:aa:86:55:c0:36:d0: 8d:33:04:69:f2:55:d1:04:82:1f:c1:eb:91:14:1e:53:9c:ab: dc:23:7a:1a:65:73:13:e9:cd:2c:1b:05:a8:1d:d4:96:96:5d: cc:51:e7:96:36:2f:61:76:35:cc:14:8c:1e:b0:c1:96:f5:15: f2:84:1b:4f:ec:f3:c8:51:59:04:f8:be:d2:ce:b0:a4:7e:53: 08:8e:4d:31:72:db:cf:2e:2b:59:4c:d0:3e:37:09:4c:f2:c7: 92:c6:a9:be:0b:90:7d:5d:de:35:89:dc:53:9c:4a:c9:ee:c5: 64:81:c2:6d:c8:54:29:97:52:06:b2:2a:70:3d:8d:6a:10:e0: 18:6f:4b:ce -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUc4LShRcQ4HetWF2ojBEBR/bsbBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMTE0MDA0NTQ2WhcNMjcwMTEzMDA1MDQ2 WjAzMTEwLwYDVQQDEyg3MjRGNUZBNTQxRUJDMzE1ODg1RkFDQzk0QUQ1RkQwMEZF QjUzNDVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5b9z9ExnQ18 2A5Zs5URCVYu8NyHVXukd3eMfoEWxyNQCBh9nPQROJbD547xKERvv0lFTw/NkptE PAQGCjgi8nsH9oub7RRnSWck1UWsZIHWq1gtU3V4AhmggnpPOriikw032ByhbYCt 20A2grvyJu6ZN/oisl8wIk96wp+dvOQZfHz+bV4gHrdjn8PG+cWHXp4gQXyhC8SL U9eBsdo7beNkOufX0EG4V+kx9efV1+Usmtb+i/yoBBd6vx08RhWnpqTWT+iJAbFC e1WoBDL5KMGWeWvP2rGwRGdYFtVAG+jNX9zEC9fP0PBMgYPkQT32LhqsB9u/aB79 gUr4y+/INQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFHJPX6VB68MViF+syUrV/QD+ tTRaMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADONTswDQYJKoZIhvcNAQELBQADggEB AKfAFLOW4aZLf1NoMSyOlOpz0gBzqMEvGTLILkqINwhht9yWn5DLWwfx+nwmhgjS djqR7yYOTbO9iGe0lUlbMWd2NCmmUr2psVZy5T41sSJfQxtQ+5RA7XKdyO6BEBaD MxG3wZEka6H+pqzVnB3jLWDQl6bpfoobRaqGVcA20I0zBGnyVdEEgh/B65EUHlOc q9wjehplcxPpzSwbBagd1JaWXcxR55Y2L2F2NcwUjB6wwZb1FfKEG0/s88hRWQT4 vtLOsKR+UwiOTTFy288uK1lM0D43CUzyx5LGqb4LkH1d3jWJ3FOcSsnuxWSBwm3I VCmXUgayKnA9jWoQ4BhvS84= -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:14 2026 by rpki-client