$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: 99ikrUUcs8iEnaPxaNVpO+WslVa6y6vmDmHciQ6hG90= Subject key identifier: 66:14:5E:AB:E6:14:1D:26:3D:6A:5D:3A:FE:D5:C0:2A:7F:18:F6:59 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 6072464A9E2E47BC89555DCFB1BF567B724EA733 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa Signing time: Thu 23 Jan 2025 18:28:26 +0000 ROA not before: Thu 23 Jan 2025 18:23:26 +0000 ROA not after: Thu 22 Jan 2026 18:28:26 +0000 asID: 9009 IP address blocks: 67.210.110.0/24 maxlen: 24 67.210.112.0/24 maxlen: 24 67.210.113.0/24 maxlen: 24 67.210.114.0/24 maxlen: 24 67.210.115.0/24 maxlen: 24 67.210.116.0/24 maxlen: 24 67.210.117.0/24 maxlen: 24 67.210.118.0/24 maxlen: 24 67.210.119.0/24 maxlen: 24 67.210.120.0/24 maxlen: 24 67.210.122.0/24 maxlen: 24 67.210.123.0/24 maxlen: 24 216.97.230.0/24 maxlen: 24 216.97.231.0/24 maxlen: 24 216.97.232.0/24 maxlen: 24 216.97.233.0/24 maxlen: 24 216.97.234.0/24 maxlen: 24 216.227.219.0/24 maxlen: 24 216.227.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:72:46:4a:9e:2e:47:bc:89:55:5d:cf:b1:bf:56:7b:72:4e:a7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jan 23 18:23:26 2025 GMT Not After : Jan 22 18:28:26 2026 GMT Subject: CN=66145EABE6141D263D6A5D3AFED5C02A7F18F659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:1a:86:12:b6:44:f5:57:72:8e:c1:4e:ac: 7b:af:d9:0c:59:f9:06:d6:54:32:01:f3:d1:be:6b: 67:14:0d:a7:1e:fd:fd:10:97:83:b2:57:ab:10:f0: 9f:72:13:4b:d8:18:5e:cc:87:41:e5:61:9f:1b:26: a2:59:0f:0a:6b:69:50:73:82:8f:28:a7:7d:0d:80: d9:e0:7e:96:44:9d:21:a7:5c:70:68:ff:23:d6:89: ce:ce:ed:f5:79:4d:7c:98:e2:19:fe:ea:80:02:d7: 29:e2:fc:1b:52:e5:64:b8:df:94:8b:93:0a:26:a8: 26:7b:00:06:86:0d:cc:d4:b9:24:61:08:2b:15:3a: a3:d0:90:0d:e0:e5:8d:be:39:1b:97:11:6b:d0:1e: 5f:0b:41:57:b3:8e:9d:e5:4c:01:cf:5b:ea:bd:c2: 91:8a:08:0c:5f:b3:2c:90:ab:4a:75:5b:87:ee:d8: 07:3c:76:6e:44:76:a9:a6:80:37:c2:7b:be:fc:4f: a7:dd:8e:47:94:13:aa:48:fb:25:f5:c4:ac:48:fc: c6:ef:5e:58:4b:51:94:27:d1:e4:26:89:49:e6:99: 4e:48:79:a7:aa:e6:7b:cd:62:ea:93:f3:19:5f:2d: c8:3c:1a:ef:71:25:b1:5f:fa:fb:46:15:a1:e9:ba: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:14:5E:AB:E6:14:1D:26:3D:6A:5D:3A:FE:D5:C0:2A:7F:18:F6:59 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.110.0/24 67.210.112.0-67.210.120.255 67.210.122.0/23 216.97.230.0-216.97.234.255 216.227.219.0/24 216.227.221.0/24 Signature Algorithm: sha256WithRSAEncryption 44:77:50:33:cf:f7:36:c6:42:f1:58:c4:d4:75:42:80:3c:60: 4b:13:ef:05:b3:a4:2a:f9:42:2b:95:32:de:ce:d2:6d:33:81: 6c:98:68:3a:4c:ae:6d:53:8d:27:7f:e5:2e:ef:77:ea:b6:f2: f5:90:aa:00:2b:b2:5e:af:3a:72:9d:84:1d:3c:3f:73:f9:a7: ab:6c:7a:c9:4c:a2:55:60:9f:63:67:20:64:c1:85:98:da:53: 9a:29:a5:a5:fa:06:52:69:ad:e6:85:b8:c2:b0:d5:6c:91:e3: 17:c6:f5:88:4b:0e:f1:7e:91:d5:10:24:bc:96:fe:8c:fc:dc: 37:be:6e:74:66:34:9e:2f:94:a0:71:d3:e8:ff:d9:b3:e2:11: 0f:16:bf:a6:55:20:87:d2:1d:ae:ec:13:f8:3c:38:58:a2:1e: 4e:2b:b7:df:4c:d9:52:53:24:d9:cb:c4:d8:c0:60:45:99:0c: c8:e8:ed:7c:db:3f:f4:23:81:79:a5:55:38:58:34:a3:24:5b: 6c:08:55:26:2f:cf:71:8d:2e:f9:77:f5:fd:75:65:a5:28:ba: 35:f8:c7:72:3a:0d:b1:6a:0e:73:41:b5:18:a3:46:bf:e3:ba: 74:8d:91:03:4a:86:57:11:87:1b:3c:b5:83:f2:70:fa:51:5a: 83:a8:47:d6 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUYHJGSp4uR7yJVV3Psb9We3JOpzMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTIzMTgyMzI2WhcNMjYwMTIyMTgyODI2 WjAzMTEwLwYDVQQDEyg2NjE0NUVBQkU2MTQxRDI2M0Q2QTVEM0FGRUQ1QzAyQTdG MThGNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCsahhK2RPVX co7BTqx7r9kMWfkG1lQyAfPRvmtnFA2nHv39EJeDslerEPCfchNL2BhezIdB5WGf GyaiWQ8Ka2lQc4KPKKd9DYDZ4H6WRJ0hp1xwaP8j1onOzu31eU18mOIZ/uqAAtcp 4vwbUuVkuN+Ui5MKJqgmewAGhg3M1LkkYQgrFTqj0JAN4OWNvjkblxFr0B5fC0FX s46d5UwBz1vqvcKRiggMX7MskKtKdVuH7tgHPHZuRHappoA3wnu+/E+n3Y5HlBOq SPsl9cSsSPzG715YS1GUJ9HkJolJ5plOSHmnquZ7zWLqk/MZXy3IPBrvcSWxX/r7 RhWh6bomBQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGYUXqvmFB0mPWpdOv7VwCp/ GPZZMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYI KwYBBQUHAQcBAf8EPjA8MDoEAgABMDQDBABD0m4wDAMEBEPScAMEAEPSeAMEAUPS ejAMAwQB2GHmAwQA2GHqAwQA2OPbAwQA2OPdMA0GCSqGSIb3DQEBCwUAA4IBAQBE d1Azz/c2xkLxWMTUdUKAPGBLE+8Fs6Qq+UIrlTLeztJtM4FsmGg6TK5tU40nf+Uu 73fqtvL1kKoAK7JerzpynYQdPD9z+aerbHrJTKJVYJ9jZyBkwYWY2lOaKaWl+gZS aa3mhbjCsNVskeMXxvWISw7xfpHVECS8lv6M/Nw3vm50ZjSeL5SgcdPo/9mz4hEP Fr+mVSCH0h2u7BP4PDhYoh5OK7ffTNlSUyTZy8TYwGBFmQzI6O182z/0I4F5pVU4 WDSjJFtsCFUmL89xjS75d/X9dWWlKLo1+MdyOg2xag5zQbUYo0a/47p0jZEDSoZX EYcbPLWD8nD6UVqDqEfW -----END CERTIFICATE-----Generated at Sat Apr 5 04:30:27 2025 by rpki-client