$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: bHXgP3e3JAm2+muU9nyoUDgk6QiQLu0k7AglN+yT0Os= Subject key identifier: 4D:B9:C0:50:86:0C:BE:61:ED:D4:11:F1:F2:8A:36:C4:FF:65:10:6F Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 7AD2B70937E297C64A53653C425F76D64EDF733F Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa Signing time: Tue 21 Oct 2025 14:35:26 +0000 ROA not before: Tue 21 Oct 2025 14:30:26 +0000 ROA not after: Tue 20 Oct 2026 14:35:26 +0000 asID: 9009 IP address blocks: 23.95.179.0/24 maxlen: 24 67.210.110.0/24 maxlen: 24 67.210.112.0/24 maxlen: 24 67.210.113.0/24 maxlen: 24 67.210.114.0/24 maxlen: 24 67.210.115.0/24 maxlen: 24 67.210.116.0/24 maxlen: 24 67.210.117.0/24 maxlen: 24 67.210.118.0/24 maxlen: 24 67.210.119.0/24 maxlen: 24 67.210.120.0/24 maxlen: 24 67.210.122.0/24 maxlen: 24 67.210.123.0/24 maxlen: 24 216.97.230.0/24 maxlen: 24 216.97.231.0/24 maxlen: 24 216.97.232.0/24 maxlen: 24 216.97.233.0/24 maxlen: 24 216.97.234.0/24 maxlen: 24 216.227.219.0/24 maxlen: 24 216.227.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d2:b7:09:37:e2:97:c6:4a:53:65:3c:42:5f:76:d6:4e:df:73:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 21 14:30:26 2025 GMT Not After : Oct 20 14:35:26 2026 GMT Subject: CN=4DB9C050860CBE61EDD411F1F28A36C4FF65106F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:17:1f:59:fb:4a:4b:54:3b:1f:e0:56:d9:b0: 43:d6:db:d1:8f:69:8c:d6:f4:9e:c7:86:33:e6:7d: 37:9c:c9:79:30:a4:95:16:93:44:2a:fa:c6:c6:f0: 03:48:0e:de:c5:d6:43:31:e6:c4:59:bf:05:0d:84: 5e:d9:dc:6f:19:c2:3e:00:c5:99:17:9c:fa:36:34: 6c:bf:50:1d:85:3e:da:47:2e:60:6f:24:b6:81:f4: 91:66:8a:97:ff:54:52:e6:b9:2f:be:74:29:56:63: 46:c5:bc:9f:e4:86:3f:02:e1:bc:94:eb:3f:85:03: 42:b5:e1:79:70:a5:7b:f4:2f:62:66:c5:06:85:f8: de:e3:4a:c3:b8:25:f2:63:76:30:ed:ab:e5:d4:f4: 34:4e:4d:2a:92:4e:14:5c:d7:fa:cf:75:18:8b:2f: 5f:7e:2e:d0:17:ff:3d:8a:c1:f0:c7:be:f4:09:ab: 20:a9:89:ab:1c:ef:ee:85:97:73:6e:90:6a:38:eb: d6:c4:16:7b:28:00:c5:71:09:61:e5:88:d9:de:6f: 14:b3:eb:76:93:01:4a:a5:18:c0:be:e0:a9:12:a9: d7:e0:3a:1c:b6:83:f8:17:d8:08:f3:4d:9c:64:20: e8:1e:c6:b2:a7:74:4a:9c:f7:5a:11:78:ee:86:95: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:C0:50:86:0C:BE:61:ED:D4:11:F1:F2:8A:36:C4:FF:65:10:6F X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.179.0/24 67.210.110.0/24 67.210.112.0-67.210.120.255 67.210.122.0/23 216.97.230.0-216.97.234.255 216.227.219.0/24 216.227.221.0/24 Signature Algorithm: sha256WithRSAEncryption 08:34:d8:54:ee:10:11:5e:7c:74:07:49:c0:d0:1a:c1:a5:6e: 05:ef:b4:bb:c4:03:a3:bf:5d:ea:a1:a7:f0:fb:c4:fe:8d:f9: 4d:d3:02:45:63:a6:b8:fe:12:05:d7:bb:54:82:b3:5d:62:7e: ed:e1:05:77:fb:eb:c7:bb:6c:4d:6f:01:da:09:f9:33:13:34: f6:6a:65:b6:26:61:e4:97:77:65:d9:d1:13:08:89:e8:40:da: 66:9e:e3:0c:a3:6c:da:3d:d9:02:25:ed:ab:fc:b8:da:53:09: 23:7c:84:0f:c1:15:9b:b1:df:42:16:0f:7d:54:d1:85:fe:f5: a9:1d:3e:07:ca:00:ea:11:24:f5:37:ae:e8:ab:86:e7:c7:57: b2:b3:01:db:3e:cc:fc:d1:af:5c:e1:9c:80:9b:05:57:0f:18: 48:f7:bb:3c:07:ef:02:4d:c0:ea:ed:21:57:ec:11:8f:81:4e: e3:83:c3:a1:56:40:9b:60:31:38:2a:e9:3f:4a:1e:c7:47:88: fb:bf:74:b5:ba:53:dd:57:b6:cf:5a:73:1e:38:66:be:81:65: 7f:d2:e4:04:b4:85:5e:19:7b:94:86:9f:66:86:f1:77:05:c1: 17:1f:9f:0c:56:a3:d8:25:00:bc:c6:01:ca:92:2c:1a:7d:7d: f9:a7:46:fb -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgIUetK3CTfil8ZKU2U8Ql921k7fcz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDIxMTQzMDI2WhcNMjYxMDIwMTQzNTI2 WjAzMTEwLwYDVQQDEyg0REI5QzA1MDg2MENCRTYxRURENDExRjFGMjhBMzZDNEZG NjUxMDZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihcfWftKS1Q7 H+BW2bBD1tvRj2mM1vSex4Yz5n03nMl5MKSVFpNEKvrGxvADSA7exdZDMebEWb8F DYRe2dxvGcI+AMWZF5z6NjRsv1AdhT7aRy5gbyS2gfSRZoqX/1RS5rkvvnQpVmNG xbyf5IY/AuG8lOs/hQNCteF5cKV79C9iZsUGhfje40rDuCXyY3Yw7avl1PQ0Tk0q kk4UXNf6z3UYiy9ffi7QF/89isHwx770CasgqYmrHO/uhZdzbpBqOOvWxBZ7KADF cQlh5YjZ3m8Us+t2kwFKpRjAvuCpEqnX4DoctoP4F9gI802cZCDoHsayp3RKnPda EXjuhpUTiQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFE25wFCGDL5h7dQR8fKKNsT/ ZRBvMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYI KwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBAAXX7MDBABD0m4wDAMEBEPScAMEAEPS eAMEAUPSejAMAwQB2GHmAwQA2GHqAwQA2OPbAwQA2OPdMA0GCSqGSIb3DQEBCwUA A4IBAQAINNhU7hARXnx0B0nA0BrBpW4F77S7xAOjv13qoafw+8T+jflN0wJFY6a4 /hIF17tUgrNdYn7t4QV3++vHu2xNbwHaCfkzEzT2amW2JmHkl3dl2dETCInoQNpm nuMMo2zaPdkCJe2r/LjaUwkjfIQPwRWbsd9CFg99VNGF/vWpHT4HygDqEST1N67o q4bnx1eyswHbPsz80a9c4ZyAmwVXDxhI97s8B+8CTcDq7SFX7BGPgU7jg8OhVkCb YDE4Kuk/Sh7HR4j7v3S1ulPdV7bPWnMeOGa+gWV/0uQEtIVeGXuUhp9mhvF3BcEX H58MVqPYJQC8xgHKkiwafX35p0b7 -----END CERTIFICATE-----Generated at Wed Nov 5 21:51:12 2025 by rpki-client