$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: qJs/ZZU38QkH1NYTZdt0yqNmofOCf5Jxlrwwv0fPLvg= Subject key identifier: 6C:C6:4B:2F:53:30:78:71:6B:F4:72:07:ED:10:56:BE:0E:46:E9:A2 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2CFE9D98A50132E85B6A94E96DA0BE85BC0361BB Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa Signing time: Tue 20 Oct 2026 04:16:11 +0000 ROA not before: Tue 20 Oct 2026 04:11:11 +0000 ROA not after: Tue 19 Oct 2027 04:16:11 +0000 asID: 9009 IP address blocks: 157.254.40.0/23 maxlen: 24 157.254.42.0/23 maxlen: 24 157.254.44.0/23 maxlen: 24 157.254.46.0/23 maxlen: 24 157.254.56.0/23 maxlen: 24 157.254.58.0/23 maxlen: 24 157.254.60.0/23 maxlen: 24 157.254.62.0/23 maxlen: 24 157.254.64.0/23 maxlen: 24 157.254.66.0/23 maxlen: 24 157.254.68.0/23 maxlen: 24 157.254.70.0/23 maxlen: 24 157.254.72.0/23 maxlen: 24 157.254.74.0/23 maxlen: 24 157.254.76.0/23 maxlen: 24 157.254.78.0/23 maxlen: 24 157.254.80.0/23 maxlen: 24 157.254.86.0/23 maxlen: 24 157.254.88.0/23 maxlen: 24 157.254.92.0/23 maxlen: 24 157.254.96.0/23 maxlen: 24 157.254.98.0/23 maxlen: 24 157.254.100.0/23 maxlen: 24 157.254.102.0/23 maxlen: 24 157.254.104.0/23 maxlen: 24 157.254.106.0/23 maxlen: 24 157.254.108.0/23 maxlen: 24 157.254.110.0/23 maxlen: 24 157.254.112.0/23 maxlen: 24 157.254.114.0/23 maxlen: 24 157.254.116.0/23 maxlen: 24 157.254.118.0/23 maxlen: 24 157.254.120.0/23 maxlen: 24 157.254.122.0/23 maxlen: 24 157.254.124.0/23 maxlen: 24 157.254.126.0/23 maxlen: 24 157.254.136.0/22 maxlen: 24 157.254.144.0/23 maxlen: 24 157.254.146.0/23 maxlen: 24 157.254.148.0/23 maxlen: 24 157.254.150.0/23 maxlen: 24 157.254.214.0/24 maxlen: 24 157.254.240.0/23 maxlen: 24 157.254.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 10:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fe:9d:98:a5:01:32:e8:5b:6a:94:e9:6d:a0:be:85:bc:03:61:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Oct 20 04:11:11 2026 GMT Not After : Oct 19 04:16:11 2027 GMT Subject: CN=6CC64B2F533078716BF47207ED1056BE0E46E9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9b:fd:fe:95:dd:3c:33:0c:70:46:ae:73:14: 57:63:15:56:94:93:80:e2:e4:55:01:0e:14:95:95: b4:c9:aa:a8:ee:00:62:e8:af:a6:4c:fd:1a:a4:33: fa:52:c4:8f:86:4c:d9:38:3c:7f:1a:55:70:63:c4: 82:b1:31:c6:27:34:fe:ba:03:66:dc:8f:42:6c:2c: 55:a6:dc:19:a3:e2:37:1a:d9:d7:f3:67:de:65:f3: 49:41:b1:d5:a6:ef:d1:83:95:e9:95:6d:73:2d:a3: 32:f6:a4:b1:02:97:30:0a:fa:14:a6:d2:cd:72:c8: ea:3d:32:ed:05:72:5e:04:4d:c8:9a:77:2b:5a:f1: 5f:be:4c:84:22:a6:2c:d6:ec:09:af:45:d4:82:55: 3c:95:01:e4:76:86:91:60:bc:63:47:f6:fd:80:10: c7:32:49:7f:44:16:5b:e1:c3:64:4a:06:b7:65:77: e5:cf:7f:df:9f:6e:9b:f2:0b:27:7d:74:79:87:7f: 9b:1e:2c:e4:a4:95:ea:fa:cb:79:a2:59:f7:0c:3c: a3:50:d5:4b:f8:a3:92:a1:af:79:c2:ba:15:e2:99: b3:3d:b4:48:7a:fe:1e:f2:6c:62:74:f9:48:1f:fd: f3:e9:67:48:26:59:f4:4f:f7:f3:d5:bd:98:83:bb: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:4B:2F:53:30:78:71:6B:F4:72:07:ED:10:56:BE:0E:46:E9:A2 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.40.0/21 157.254.56.0-157.254.81.255 157.254.86.0-157.254.89.255 157.254.92.0/23 157.254.96.0/19 157.254.136.0/22 157.254.144.0/21 157.254.214.0/24 157.254.240.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:a6:b1:9b:0c:b3:f1:d0:69:d8:a9:eb:15:4a:00:7e:5e:75: c5:9d:ed:88:9d:c7:44:e5:d0:d1:ca:aa:d1:da:a0:f7:a8:13: 8d:ee:54:34:c6:9a:97:a8:2d:ab:27:4c:75:fd:71:66:fd:fe: 4e:1c:25:db:dd:c4:ee:3b:a3:5d:3e:13:f4:53:0e:25:8e:a3: 5f:d6:ec:96:66:d9:7e:3e:cb:5b:3b:ab:ad:c0:9a:62:9c:55: e4:e0:cc:bb:cd:28:3a:4a:6d:f1:0d:05:84:8d:5f:ea:2e:89: d6:c9:ab:78:d5:c1:4e:4e:00:34:ed:78:7b:bc:10:f5:0f:08: 2e:b8:e7:ab:35:50:3c:5a:59:5a:42:4d:61:32:1e:8c:0d:c7: 94:54:b5:07:c0:bd:80:cd:7b:4c:1c:87:85:92:87:60:10:a5: 01:10:23:c0:1c:fe:ef:89:00:f5:58:c3:81:bb:83:a9:9e:7c: c1:ae:10:91:83:f5:78:0f:70:a0:05:5e:21:dc:91:74:96:7c: 6e:e2:4e:87:74:58:1a:31:1e:1b:fa:67:13:ff:9a:11:df:4c: 94:1a:fb:7a:78:b7:b9:62:d0:c5:be:09:aa:00:89:58:73:e3: b9:ee:37:65:7f:be:9e:c6:8f:7f:8f:0e:1f:f5:13:72:b9:2d: 06:2e:dc:6f -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIULP6dmKUBMuhbapTpbaC+hbwDYbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMDIwMDQxMTExWhcNMjcxMDE5MDQxNjEx WjAzMTEwLwYDVQQDEyg2Q0M2NEIyRjUzMzA3ODcxNkJGNDcyMDdFRDEwNTZCRTBF NDZFOUEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pv9/pXdPDMM cEaucxRXYxVWlJOA4uRVAQ4UlZW0yaqo7gBi6K+mTP0apDP6UsSPhkzZODx/GlVw Y8SCsTHGJzT+ugNm3I9CbCxVptwZo+I3GtnX82feZfNJQbHVpu/Rg5XplW1zLaMy 9qSxApcwCvoUptLNcsjqPTLtBXJeBE3ImncrWvFfvkyEIqYs1uwJr0XUglU8lQHk doaRYLxjR/b9gBDHMkl/RBZb4cNkSga3ZXflz3/fn26b8gsnfXR5h3+bHizkpJXq +st5oln3DDyjUNVL+KOSoa95wroV4pmzPbRIev4e8mxidPlIH/3z6WdIJln0T/fz 1b2Yg7tBJQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGzGSy9TMHhxa/RyB+0QVr4O RumiMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXwYI KwYBBQUHAQcBAf8EUDBOMEwEAgABMEYDBAOd/igwDAMEA53+OAMEAZ3+UDAMAwQB nf5WAwQBnf5YAwQBnf5cAwQFnf5gAwQCnf6IAwQDnf6QAwQAnf7WAwQCnf7wMA0G CSqGSIb3DQEBCwUAA4IBAQAcprGbDLPx0GnYqesVSgB+XnXFne2IncdE5dDRyqrR 2qD3qBON7lQ0xpqXqC2rJ0x1/XFm/f5OHCXb3cTuO6NdPhP0Uw4ljqNf1uyWZtl+ PstbO6utwJpinFXk4My7zSg6Sm3xDQWEjV/qLonWyat41cFOTgA07Xh7vBD1Dwgu uOerNVA8WllaQk1hMh6MDceUVLUHwL2AzXtMHIeFkodgEKUBECPAHP7viQD1WMOB u4OpnnzBrhCRg/V4D3CgBV4h3JF0lnxu4k6HdFgaMR4b+mcT/5oR30yUGvt6eLe5 YtDFvgmqAIlYc+O57jdlf76exo9/jw4f9RNyuS0GLtxv -----END CERTIFICATE-----Generated at Tue Oct 27 22:23:20 2026 by rpki-client