$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: YkIP1O3WbS5rVaXLLAlhaVXmTyTKTHV3pHJBtVhT8os= Subject key identifier: B0:6C:ED:F5:59:A7:D3:66:FD:F0:65:13:00:B0:FF:63:EA:B4:74:70 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 789178F584E8E294B319D68B88CA58AA01BCFDC0 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa Signing time: Wed 03 Jun 2026 15:36:54 +0000 ROA not before: Wed 03 Jun 2026 15:31:54 +0000 ROA not after: Wed 02 Jun 2027 15:36:54 +0000 asID: 9009 IP address blocks: 157.254.40.0/23 maxlen: 24 157.254.42.0/23 maxlen: 24 157.254.44.0/23 maxlen: 24 157.254.46.0/23 maxlen: 24 157.254.56.0/23 maxlen: 24 157.254.58.0/23 maxlen: 24 157.254.60.0/23 maxlen: 24 157.254.62.0/23 maxlen: 24 157.254.64.0/23 maxlen: 24 157.254.66.0/23 maxlen: 24 157.254.68.0/23 maxlen: 24 157.254.70.0/23 maxlen: 24 157.254.72.0/23 maxlen: 24 157.254.74.0/23 maxlen: 24 157.254.76.0/23 maxlen: 24 157.254.78.0/23 maxlen: 24 157.254.80.0/23 maxlen: 24 157.254.86.0/23 maxlen: 24 157.254.88.0/23 maxlen: 24 157.254.92.0/23 maxlen: 24 157.254.96.0/23 maxlen: 24 157.254.98.0/23 maxlen: 24 157.254.100.0/23 maxlen: 24 157.254.102.0/23 maxlen: 24 157.254.104.0/23 maxlen: 24 157.254.106.0/23 maxlen: 24 157.254.108.0/23 maxlen: 24 157.254.110.0/23 maxlen: 24 157.254.112.0/23 maxlen: 24 157.254.114.0/23 maxlen: 24 157.254.116.0/23 maxlen: 24 157.254.118.0/23 maxlen: 24 157.254.120.0/23 maxlen: 24 157.254.122.0/23 maxlen: 24 157.254.124.0/23 maxlen: 24 157.254.126.0/23 maxlen: 24 157.254.136.0/22 maxlen: 24 157.254.144.0/23 maxlen: 24 157.254.146.0/23 maxlen: 24 157.254.148.0/23 maxlen: 24 157.254.150.0/23 maxlen: 24 157.254.214.0/24 maxlen: 24 157.254.240.0/23 maxlen: 24 157.254.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 20:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:91:78:f5:84:e8:e2:94:b3:19:d6:8b:88:ca:58:aa:01:bc:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 3 15:31:54 2026 GMT Not After : Jun 2 15:36:54 2027 GMT Subject: CN=B06CEDF559A7D366FDF0651300B0FF63EAB47470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:b7:b5:4e:24:0f:21:de:8c:44:a2:fe:60: 01:87:1e:dc:52:e3:b5:fb:81:90:f5:04:87:0c:e0: d6:c8:f9:1d:17:d1:a0:e8:0e:41:1c:82:36:11:24: 0e:ce:bb:7e:de:67:ff:f5:fa:00:76:dc:59:eb:08: 94:4e:76:8d:7a:09:36:57:be:70:18:f5:af:37:2d: 93:46:23:e6:6d:b5:79:82:7b:0b:3e:5d:58:1c:88: e7:db:81:65:26:b5:64:c9:58:6d:a1:3c:5a:c3:d9: ec:a2:cf:24:d2:ca:c6:65:47:8e:cf:dc:56:4d:b0: 4c:25:0e:f5:c1:af:60:a4:97:91:73:54:c0:43:4c: 1c:71:68:62:ab:2d:4a:f6:c3:0b:de:81:db:b3:2e: 27:70:43:c7:58:29:ad:bd:6e:11:01:fe:b6:44:0f: fe:c2:96:fb:60:0e:b2:6e:17:b5:5c:dc:6c:42:77: 98:9c:00:3b:59:2a:6f:d2:20:ab:2c:bc:af:9b:1c: 97:66:39:ee:23:61:7f:15:14:f9:bd:d1:e5:f0:f3: 9c:a3:53:c2:b3:f4:f6:97:ce:e7:37:a3:c6:90:76: f2:c7:2c:d7:fd:be:35:1e:0a:ac:62:17:44:25:9a: da:40:f4:31:51:07:a7:34:80:d3:b7:f5:50:9b:10: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6C:ED:F5:59:A7:D3:66:FD:F0:65:13:00:B0:FF:63:EA:B4:74:70 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.40.0/21 157.254.56.0-157.254.81.255 157.254.86.0-157.254.89.255 157.254.92.0/23 157.254.96.0/19 157.254.136.0/22 157.254.144.0/21 157.254.214.0/24 157.254.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:d0:72:f1:02:06:58:b4:69:a9:19:4e:80:83:e1:f3:64:91: 13:32:82:fc:31:6a:d6:17:45:a4:b1:cf:1d:4f:67:b7:81:c2: 70:ef:2d:8f:e8:f6:7e:0d:cc:5c:60:ca:4e:48:d1:db:ea:d2: b1:c4:45:a3:5d:df:18:53:82:fd:37:b1:7d:04:07:ae:7e:d9: 61:b3:c1:f0:60:a0:7e:ab:29:dd:62:c8:db:4f:de:49:db:fb: 5a:f3:f6:5c:37:83:43:6d:24:05:24:2b:8d:4b:7c:a2:80:5e: 3b:82:cc:e0:7c:36:48:29:70:07:3c:a9:73:5a:fa:a8:1f:27: c2:b1:ce:cc:c5:13:84:7a:a4:17:d3:b2:d2:cb:2c:f1:6d:02: 61:a9:77:04:43:b3:88:8f:df:0a:aa:7e:d7:ab:cf:e5:51:59: fd:6e:28:13:86:21:d9:94:8c:1e:76:e9:ee:65:51:fb:11:0c: bf:ad:f6:a0:de:24:7d:07:de:57:2f:4d:1f:74:03:dc:ea:49: 9f:d1:97:ca:cc:f0:02:f2:5e:7d:7e:5e:2e:65:05:a3:88:3e: ce:d1:21:f4:43:3f:5f:60:fa:07:75:06:8a:ef:a6:e9:31:ac: 8c:ec:4c:ef:cb:80:81:c3:3b:45:c5:33:6e:2b:85:11:49:19: 9f:5c:2e:9f -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUeJF49YTo4pSzGdaLiMpYqgG8/cAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjAzMTUzMTU0WhcNMjcwNjAyMTUzNjU0 WjAzMTEwLwYDVQQDEyhCMDZDRURGNTU5QTdEMzY2RkRGMDY1MTMwMEIwRkY2M0VB QjQ3NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmq3tU4kDyHe jESi/mABhx7cUuO1+4GQ9QSHDODWyPkdF9Gg6A5BHII2ESQOzrt+3mf/9foAdtxZ 6wiUTnaNegk2V75wGPWvNy2TRiPmbbV5gnsLPl1YHIjn24FlJrVkyVhtoTxaw9ns os8k0srGZUeOz9xWTbBMJQ71wa9gpJeRc1TAQ0wccWhiqy1K9sML3oHbsy4ncEPH WCmtvW4RAf62RA/+wpb7YA6ybhe1XNxsQneYnAA7WSpv0iCrLLyvmxyXZjnuI2F/ FRT5vdHl8POco1PCs/T2l87nN6PGkHbyxyzX/b41HgqsYhdEJZraQPQxUQenNIDT t/VQmxCMdQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFLBs7fVZp9Nm/fBlEwCw/2Pq tHRwMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXwYI KwYBBQUHAQcBAf8EUDBOMEwEAgABMEYDBAOd/igwDAMEA53+OAMEAZ3+UDAMAwQB nf5WAwQBnf5YAwQBnf5cAwQFnf5gAwQCnf6IAwQDnf6QAwQAnf7WAwQCnf7wMA0G CSqGSIb3DQEBCwUAA4IBAQBr0HLxAgZYtGmpGU6Ag+HzZJETMoL8MWrWF0Wksc8d T2e3gcJw7y2P6PZ+DcxcYMpOSNHb6tKxxEWjXd8YU4L9N7F9BAeuftlhs8HwYKB+ qyndYsjbT95J2/ta8/ZcN4NDbSQFJCuNS3yigF47gszgfDZIKXAHPKlzWvqoHyfC sc7MxROEeqQX07LSyyzxbQJhqXcEQ7OIj98Kqn7Xq8/lUVn9bigThiHZlIwedunu ZVH7EQy/rfag3iR9B95XL00fdAPc6kmf0ZfKzPAC8l59fl4uZQWjiD7O0SH0Qz9f YPoHdQaK76bpMayM7Ezvy4CBwztFxTNuK4URSRmfXC6f -----END CERTIFICATE-----Generated at Sat Jun 13 02:20:09 2026 by rpki-client