$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: vwQM1VXfto6ttCI+/1Go7sRlWF3ZqlWkWNzzF9qJWsQ= Subject key identifier: 94:66:1E:D3:DD:EF:1E:11:DB:EC:02:23:A8:BE:05:26:95:54:BB:01 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 70BE42775BF720AF0B50B9C98D524867FD8829E1 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa Signing time: Thu 22 Feb 2024 18:01:13 +0000 ROA not before: Thu 22 Feb 2024 17:56:13 +0000 ROA not after: Thu 20 Feb 2025 18:01:13 +0000 asID: 9009 IP address blocks: 67.210.110.0/24 maxlen: 24 67.210.112.0/24 maxlen: 24 67.210.113.0/24 maxlen: 24 67.210.114.0/24 maxlen: 24 67.210.115.0/24 maxlen: 24 67.210.116.0/24 maxlen: 24 67.210.117.0/24 maxlen: 24 67.210.118.0/24 maxlen: 24 67.210.119.0/24 maxlen: 24 67.210.120.0/24 maxlen: 24 67.210.122.0/24 maxlen: 24 67.210.123.0/24 maxlen: 24 216.97.230.0/24 maxlen: 24 216.97.231.0/24 maxlen: 24 216.97.232.0/24 maxlen: 24 216.97.233.0/24 maxlen: 24 216.97.234.0/24 maxlen: 24 216.227.219.0/24 maxlen: 24 216.227.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 02:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:be:42:77:5b:f7:20:af:0b:50:b9:c9:8d:52:48:67:fd:88:29:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Feb 22 17:56:13 2024 GMT Not After : Feb 20 18:01:13 2025 GMT Subject: CN=94661ED3DDEF1E11DBEC0223A8BE05269554BB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:2d:07:dd:14:2c:6d:7b:70:ef:04:04:f8: 66:87:38:6d:ff:7b:7e:fe:8b:1a:4a:98:1e:0a:f5: 47:29:e5:7a:14:c8:04:42:9d:16:a3:a6:bf:50:ba: ed:e3:d3:f8:a1:cf:5d:c4:57:41:7a:70:03:82:76: b2:d6:ed:54:6f:b3:f6:67:ec:4c:6f:f3:df:2d:f8: a8:a4:39:b3:a5:51:d8:12:1a:b9:cf:a3:4f:c9:7f: 72:88:9c:1b:28:d7:51:53:57:93:c2:06:c8:40:2e: 39:20:1c:69:98:37:c3:8f:b0:c3:6f:02:27:33:fe: 08:18:e8:d7:0e:cc:40:69:2d:28:dd:ab:c8:83:4f: 38:09:95:0f:49:6d:d2:c4:fd:cf:a6:46:5c:44:86: 90:47:0a:dd:fb:47:d7:63:fd:3f:c9:9f:e3:bf:6e: 4b:c9:0c:44:db:37:37:c7:d8:1a:c8:19:0d:58:c8: 38:7d:3a:6e:a3:b5:58:2c:15:70:1d:2f:ee:32:13: 7e:d6:3e:62:de:a4:10:41:67:2a:d3:91:a3:81:bf: f4:76:0f:62:1c:87:5e:d5:e4:df:f0:1d:46:1f:3b: a5:d3:d1:a4:0e:32:ca:e7:c9:c5:44:a2:4e:99:d8: e0:dc:dc:48:63:5b:4b:75:5f:39:b5:87:f8:48:43: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:66:1E:D3:DD:EF:1E:11:DB:EC:02:23:A8:BE:05:26:95:54:BB:01 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.110.0/24 67.210.112.0-67.210.120.255 67.210.122.0/23 216.97.230.0-216.97.234.255 216.227.219.0/24 216.227.221.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7f:0f:6e:f2:f8:a1:b1:52:f2:87:c0:9e:cc:6e:89:01:62: 5a:75:9e:87:85:9a:68:b0:42:1c:b2:5d:36:ab:95:36:3b:81: c3:13:86:4b:a0:d1:f9:7e:65:67:93:1c:2b:d5:fb:73:71:33: cd:81:4f:14:f6:78:d1:d3:06:bf:f4:c5:44:ca:c3:37:4a:95: cc:6a:c7:97:1b:41:9a:fc:a8:2f:9e:cc:22:17:62:e2:57:bc: 4f:02:8a:f9:f3:d5:c7:05:fa:ed:79:e5:8e:40:91:92:a6:b5: 7c:2e:6b:9a:10:90:1c:68:9f:29:cb:8e:fa:bd:c7:2c:36:27: cd:6f:8d:c7:99:7f:c1:61:51:6f:ee:e5:78:a6:86:52:5e:dd: 05:1f:ab:13:d2:ff:6c:ab:67:4c:ef:1e:81:c1:c5:c5:03:54: 71:d3:c1:50:4c:e3:cf:ce:07:b4:ca:38:35:17:80:c5:56:5f: 77:25:af:68:24:f3:aa:e7:53:a4:34:f6:a5:54:ac:7d:0a:ce: 32:16:eb:d7:6e:5b:2d:8d:ff:36:f6:3e:71:8b:e5:91:9e:58: 98:c7:a5:37:e0:03:03:c4:5d:52:88:50:ed:6e:d7:00:f0:7d: 5d:11:06:b1:1c:e0:98:70:4d:ac:7f:ea:15:dc:5e:27:e7:f1: 9c:c0:26:1b -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUcL5Cd1v3IK8LULnJjVJIZ/2IKeEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwMjIyMTc1NjEzWhcNMjUwMjIwMTgwMTEz WjAzMTEwLwYDVQQDEyg5NDY2MUVEM0RERUYxRTExREJFQzAyMjNBOEJFMDUyNjk1 NTRCQjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lAtB90ULG17 cO8EBPhmhzht/3t+/osaSpgeCvVHKeV6FMgEQp0Wo6a/ULrt49P4oc9dxFdBenAD gnay1u1Ub7P2Z+xMb/PfLfiopDmzpVHYEhq5z6NPyX9yiJwbKNdRU1eTwgbIQC45 IBxpmDfDj7DDbwInM/4IGOjXDsxAaS0o3avIg084CZUPSW3SxP3PpkZcRIaQRwrd +0fXY/0/yZ/jv25LyQxE2zc3x9gayBkNWMg4fTpuo7VYLBVwHS/uMhN+1j5i3qQQ QWcq05Gjgb/0dg9iHIde1eTf8B1GHzul09GkDjLK58nFRKJOmdjg3NxIY1tLdV85 tYf4SEPZGwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJRmHtPd7x4R2+wCI6i+BSaV VLsBMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYI KwYBBQUHAQcBAf8EPjA8MDoEAgABMDQDBABD0m4wDAMEBEPScAMEAEPSeAMEAUPS ejAMAwQB2GHmAwQA2GHqAwQA2OPbAwQA2OPdMA0GCSqGSIb3DQEBCwUAA4IBAQBT fw9u8vihsVLyh8CezG6JAWJadZ6HhZposEIcsl02q5U2O4HDE4ZLoNH5fmVnkxwr 1ftzcTPNgU8U9njR0wa/9MVEysM3SpXMaseXG0Ga/KgvnswiF2LiV7xPAor589XH BfrteeWOQJGSprV8LmuaEJAcaJ8py476vccsNifNb43HmX/BYVFv7uV4poZSXt0F H6sT0v9sq2dM7x6BwcXFA1Rx08FQTOPPzge0yjg1F4DFVl93Ja9oJPOq51OkNPal VKx9Cs4yFuvXblstjf829j5xi+WRnliYx6U34AMDxF1SiFDtbtcA8H1dEQaxHOCY cE2sf+oV3F4n5/GcwCYb -----END CERTIFICATE-----Generated at Wed May 1 01:02:41 2024 by rpki-client on console-fra.rpki-client.org