$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: +G/gBhXKi1aJc+AGljR7s+qbkICw1WM9KdkktaxfHj4= Subject key identifier: 41:4D:22:06:A5:BF:2E:3C:18:6C:DF:11:6D:AA:E3:4E:F5:A8:FA:61 Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 27DF00FD3F98251B92ED6D026AACCE533D046CDF Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa Signing time: Fri 15 Nov 2024 18:38:32 +0000 ROA not before: Fri 15 Nov 2024 18:33:32 +0000 ROA not after: Fri 14 Nov 2025 18:38:32 +0000 asID: 9009 IP address blocks: 66.225.209.0/24 maxlen: 24 104.245.213.0/24 maxlen: 24 204.93.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:df:00:fd:3f:98:25:1b:92:ed:6d:02:6a:ac:ce:53:3d:04:6c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Nov 15 18:33:32 2024 GMT Not After : Nov 14 18:38:32 2025 GMT Subject: CN=414D2206A5BF2E3C186CDF116DAAE34EF5A8FA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:05:90:c0:9c:fd:33:1e:e0:4d:5a:a3:d5: 6e:f5:73:89:85:7d:7c:d2:dd:bd:d3:91:8c:fd:ff: ae:9c:94:44:1e:a7:29:10:54:7e:76:b5:85:84:2e: 29:9b:41:70:a8:bc:35:0e:df:2d:7c:e7:6b:14:88: fb:60:10:66:ba:c0:2a:fe:a6:36:c6:45:aa:46:89: d6:5e:63:09:2d:38:0b:00:c9:27:48:2b:00:73:1d: 67:15:58:ad:f4:ec:bf:c2:a0:3c:d2:ec:ba:7b:a4: a6:6a:7a:e9:5b:e2:c2:51:b1:17:3b:e1:fd:02:2d: f9:dc:cf:f8:aa:82:75:92:30:a0:2f:4b:c0:b2:d6: a2:40:7c:24:7f:ee:45:12:58:18:4f:95:e4:da:8d: 46:3a:5a:0c:1b:28:0a:b1:01:c1:e8:cc:7c:73:94: 4e:f3:0e:d8:cb:19:ea:a4:33:84:b4:54:f0:48:43: 71:9c:d3:d8:5e:6e:cf:2b:c3:4b:93:d3:a3:36:09: f3:2b:99:96:15:6d:90:23:ff:e4:46:e7:f5:b9:91: 27:a7:1c:b8:b2:80:9d:e6:52:c8:fc:2e:96:e3:10: 9f:6f:de:ea:a8:6e:59:bd:ac:2c:b2:0e:6a:e6:bf: 3d:3c:fd:2b:14:fc:fd:58:22:3d:41:29:ea:5a:8b: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4D:22:06:A5:BF:2E:3C:18:6C:DF:11:6D:AA:E3:4E:F5:A8:FA:61 X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.225.209.0/24 104.245.213.0/24 204.93.187.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5d:71:85:3f:93:9c:c2:e1:79:60:8b:13:94:44:05:ff:1e: 78:31:c8:88:42:c7:70:b0:8f:ea:3c:c1:4e:9b:7e:be:46:f0: fc:79:71:63:0c:bf:41:03:2c:b6:7e:37:e1:75:4f:a4:38:02: 12:88:6c:a2:9f:f0:f6:0a:92:cb:3a:9d:8f:6d:0b:3c:be:fc: a4:f3:42:2d:e8:89:df:f9:27:e6:0d:78:8b:ee:0c:b0:a1:67: 09:dc:1e:26:70:40:c4:28:0c:c4:25:a6:1c:b1:f7:b1:f9:b2: ef:5a:61:33:5a:26:f9:1f:e1:45:86:b1:88:b4:8d:80:12:a7: 5f:26:4b:b6:a0:ec:82:f2:3b:0e:72:c6:e1:11:db:b8:76:8d: e5:9c:69:b1:c7:89:91:2f:59:df:0c:dd:1f:2d:cd:93:31:ce: 49:53:a7:7d:fd:d1:92:4c:67:f6:54:41:69:29:5c:ae:e9:ff: 29:7e:25:b5:de:85:2b:10:f3:81:02:92:86:c0:13:3a:f0:cb: 71:13:b0:cf:64:9c:fa:63:43:b5:be:d0:99:98:e6:71:da:40: 59:f2:0c:f6:e2:f2:5f:a0:dc:e0:c8:8b:fb:62:97:b7:a9:6d: 3e:0e:bd:c7:17:4b:83:d6:ec:6c:41:79:2b:bb:40:9b:de:70: f7:d0:f4:22 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUJ98A/T+YJRuS7W0CaqzOUz0EbN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE1MTgzMzMyWhcNMjUxMTE0MTgzODMy WjAzMTEwLwYDVQQDEyg0MTREMjIwNkE1QkYyRTNDMTg2Q0RGMTE2REFBRTM0RUY1 QThGQTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/wFkMCc/TMe 4E1ao9Vu9XOJhX180t2905GM/f+unJREHqcpEFR+drWFhC4pm0FwqLw1Dt8tfOdr FIj7YBBmusAq/qY2xkWqRonWXmMJLTgLAMknSCsAcx1nFVit9Oy/wqA80uy6e6Sm anrpW+LCUbEXO+H9Ai353M/4qoJ1kjCgL0vAstaiQHwkf+5FElgYT5Xk2o1GOloM GygKsQHB6Mx8c5RO8w7YyxnqpDOEtFTwSENxnNPYXm7PK8NLk9OjNgnzK5mWFW2Q I//kRuf1uZEnpxy4soCd5lLI/C6W4xCfb97qqG5Zvawssg5q5r89PP0rFPz9WCI9 QSnqWouJWQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFEFNIgalvy48GGzfEW2q4071 qPphMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABC4dEDBABo9dUDBADMXbswDQYJKoZI hvcNAQELBQADggEBADtdcYU/k5zC4XlgixOURAX/HngxyIhCx3Cwj+o8wU6bfr5G 8Px5cWMMv0EDLLZ+N+F1T6Q4AhKIbKKf8PYKkss6nY9tCzy+/KTzQi3oid/5J+YN eIvuDLChZwncHiZwQMQoDMQlphyx97H5su9aYTNaJvkf4UWGsYi0jYASp18mS7ag 7ILyOw5yxuER27h2jeWcabHHiZEvWd8M3R8tzZMxzklTp3390ZJMZ/ZUQWkpXK7p /yl+JbXehSsQ84ECkobAEzrwy3ETsM9knPpjQ7W+0JmY5nHaQFnyDPbi8l+g3ODI i/til7epbT4OvccXS4PW7GxBeSu7QJvecPfQ9CI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org