$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: wji2eTBIcrn3J/8gmf62Ko5w9xHiq+83g8AtjeFtb/w= Subject key identifier: E0:EE:E5:B9:76:5A:71:A5:DE:39:03:83:88:CC:C9:8F:7E:EE:11:F3 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2423B119DF4F1DE35D3DDBE6B28D726025642324 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa Signing time: Thu 22 May 2025 10:45:35 +0000 ROA not before: Thu 22 May 2025 10:40:35 +0000 ROA not after: Thu 21 May 2026 10:45:35 +0000 asID: 9009 IP address blocks: 157.254.40.0/23 maxlen: 24 157.254.42.0/23 maxlen: 24 157.254.44.0/23 maxlen: 24 157.254.46.0/23 maxlen: 24 157.254.56.0/23 maxlen: 24 157.254.58.0/23 maxlen: 24 157.254.60.0/23 maxlen: 24 157.254.62.0/23 maxlen: 24 157.254.64.0/23 maxlen: 24 157.254.66.0/23 maxlen: 24 157.254.68.0/23 maxlen: 24 157.254.70.0/23 maxlen: 24 157.254.72.0/23 maxlen: 24 157.254.74.0/23 maxlen: 24 157.254.76.0/23 maxlen: 24 157.254.78.0/23 maxlen: 24 157.254.80.0/23 maxlen: 24 157.254.86.0/23 maxlen: 24 157.254.88.0/23 maxlen: 24 157.254.92.0/23 maxlen: 24 157.254.94.0/23 maxlen: 24 157.254.96.0/23 maxlen: 24 157.254.98.0/23 maxlen: 24 157.254.100.0/23 maxlen: 24 157.254.102.0/23 maxlen: 24 157.254.104.0/23 maxlen: 24 157.254.106.0/23 maxlen: 24 157.254.108.0/23 maxlen: 24 157.254.110.0/23 maxlen: 24 157.254.112.0/23 maxlen: 24 157.254.114.0/23 maxlen: 24 157.254.116.0/23 maxlen: 24 157.254.118.0/23 maxlen: 24 157.254.120.0/23 maxlen: 24 157.254.122.0/23 maxlen: 24 157.254.124.0/23 maxlen: 24 157.254.126.0/23 maxlen: 24 157.254.136.0/22 maxlen: 24 157.254.144.0/23 maxlen: 24 157.254.146.0/23 maxlen: 24 157.254.148.0/23 maxlen: 24 157.254.150.0/23 maxlen: 24 157.254.240.0/23 maxlen: 24 157.254.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 02:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:23:b1:19:df:4f:1d:e3:5d:3d:db:e6:b2:8d:72:60:25:64:23:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: May 22 10:40:35 2025 GMT Not After : May 21 10:45:35 2026 GMT Subject: CN=E0EEE5B9765A71A5DE39038388CCC98F7EEE11F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:7d:82:af:66:4e:77:5d:6e:5a:e5:0c:d5: be:82:54:b8:bf:d3:cf:e5:66:13:8d:e2:c7:1f:ea: 25:90:d4:a2:3b:28:64:63:b8:19:8d:45:b5:89:4e: 67:b1:e9:81:61:1d:80:40:41:66:16:90:5a:c3:43: d5:e9:8c:0d:eb:a5:a3:fe:d1:fb:2b:bb:7c:77:d5: 99:f4:51:e1:f2:48:0c:0e:40:9e:f2:38:6b:2d:dc: 55:fc:df:52:47:88:96:85:6b:0f:55:b5:e3:23:db: 95:ea:5c:c0:bf:37:d1:60:32:a2:b8:47:bd:bf:4a: 44:48:9f:a9:40:26:c6:11:8e:e2:b3:40:66:a3:2c: 08:1f:2f:81:26:04:bb:4d:3f:14:b3:1d:19:f7:e6: e1:2c:93:37:32:47:0c:df:1e:c2:b7:c2:f9:a8:9f: 32:31:9b:ef:9e:2b:26:c7:0a:7f:67:c8:eb:a8:79: c1:2b:05:b7:08:97:c5:12:04:df:b1:6b:ba:ba:07: db:f9:f0:31:7d:db:79:7d:a0:7a:5d:30:9b:e8:48: dd:c3:43:3e:7c:a9:01:80:4c:f9:32:91:86:f2:05: 84:e4:78:04:0e:58:5c:1a:db:93:86:73:ea:b7:42: f3:c1:db:4c:3c:c5:83:14:40:a7:c1:8e:63:0a:0d: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:E5:B9:76:5A:71:A5:DE:39:03:83:88:CC:C9:8F:7E:EE:11:F3 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.40.0/21 157.254.56.0-157.254.81.255 157.254.86.0-157.254.89.255 157.254.92.0-157.254.127.255 157.254.136.0/22 157.254.144.0/21 157.254.240.0/22 Signature Algorithm: sha256WithRSAEncryption 93:d2:c8:a2:19:83:9d:ae:c5:98:de:d5:57:7c:62:a2:7b:b3: d5:50:54:75:7d:fb:a6:68:45:72:19:54:23:81:a8:be:08:4a: d9:d3:42:b5:bd:60:3d:42:13:11:4b:11:16:71:5d:c4:c2:c3: b3:50:f7:77:d8:20:3b:bb:5b:4b:f6:0f:0d:39:e5:6e:d9:98: 3e:9c:df:4e:2a:93:12:a7:6b:af:dd:ec:01:cc:71:c5:24:50: f5:f7:79:fc:ea:f8:13:bc:67:7a:78:e4:43:0c:33:6a:fb:a5: 9d:c6:10:37:bc:dc:3c:d6:52:c9:dd:08:c8:e5:c9:9f:48:83: 1d:e3:d2:a6:fb:1b:c0:44:33:7c:07:8e:2e:0f:2c:fa:28:7d: 3c:4b:19:83:b3:a3:3d:b9:4b:c8:82:34:06:35:c6:e1:37:6e: 0b:b4:10:1c:3d:0b:b7:35:95:5f:64:ef:10:1b:9a:1a:40:32: e6:61:27:70:d1:6a:11:35:8b:95:62:c6:92:e7:0e:f8:80:ef: 0c:30:60:3f:59:57:56:ab:11:4b:32:ed:0d:2f:09:5f:6a:8b: 23:b7:88:f5:14:b4:ad:a9:36:60:83:b9:89:45:c0:05:55:5c: 52:1d:58:10:46:e5:3c:2a:df:97:1f:bc:c3:9c:d3:55:dc:c1: e3:ba:14:3d -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUJCOxGd9PHeNdPdvmso1yYCVkIyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNTIyMTA0MDM1WhcNMjYwNTIxMTA0NTM1 WjAzMTEwLwYDVQQDEyhFMEVFRTVCOTc2NUE3MUE1REUzOTAzODM4OENDQzk4RjdF RUUxMUYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf59gq9mTndd blrlDNW+glS4v9PP5WYTjeLHH+olkNSiOyhkY7gZjUW1iU5nsemBYR2AQEFmFpBa w0PV6YwN66Wj/tH7K7t8d9WZ9FHh8kgMDkCe8jhrLdxV/N9SR4iWhWsPVbXjI9uV 6lzAvzfRYDKiuEe9v0pESJ+pQCbGEY7is0BmoywIHy+BJgS7TT8Usx0Z9+bhLJM3 MkcM3x7Ct8L5qJ8yMZvvnismxwp/Z8jrqHnBKwW3CJfFEgTfsWu6ugfb+fAxfdt5 faB6XTCb6Ejdw0M+fKkBgEz5MpGG8gWE5HgEDlhcGtuThnPqt0LzwdtMPMWDFECn wY5jCg2Z9wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFODu5bl2WnGl3jkDg4jMyY9+ 7hHzMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWwYI KwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBAOd/igwDAMEA53+OAMEAZ3+UDAMAwQB nf5WAwQBnf5YMAwDBAKd/lwDBAed/gADBAKd/ogDBAOd/pADBAKd/vAwDQYJKoZI hvcNAQELBQADggEBAJPSyKIZg52uxZje1Vd8YqJ7s9VQVHV9+6ZoRXIZVCOBqL4I StnTQrW9YD1CExFLERZxXcTCw7NQ93fYIDu7W0v2Dw055W7ZmD6c304qkxKna6/d 7AHMccUkUPX3efzq+BO8Z3p45EMMM2r7pZ3GEDe83DzWUsndCMjlyZ9Igx3j0qb7 G8BEM3wHji4PLPoofTxLGYOzoz25S8iCNAY1xuE3bgu0EBw9C7c1lV9k7xAbmhpA MuZhJ3DRahE1i5VixpLnDviA7wwwYD9ZV1arEUsy7Q0vCV9qiyO3iPUUtK2pNmCD uYlFwAVVXFIdWBBG5Twq35cfvMOc01XcweO6FD0= -----END CERTIFICATE-----Generated at Tue Jun 3 10:11:45 2025 by rpki-client