$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: w6kf5BO7hra5zIy9K9Uri4y5M+5wTp2gqYtydbCVSd0= Subject key identifier: 83:53:47:67:E2:64:3B:E5:75:EB:C5:1D:94:D0:B8:CC:D5:EE:70:F1 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 23EF6D7316AE83F50E668C7076FBB85042585F51 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa Signing time: Mon 26 Oct 2026 11:36:09 +0000 ROA not before: Mon 26 Oct 2026 11:31:09 +0000 ROA not after: Mon 25 Oct 2027 11:36:09 +0000 asID: 9009 IP address blocks: 67.210.110.0/24 maxlen: 24 67.210.112.0/24 maxlen: 24 67.210.113.0/24 maxlen: 24 67.210.114.0/24 maxlen: 24 67.210.115.0/24 maxlen: 24 67.210.116.0/24 maxlen: 24 67.210.117.0/24 maxlen: 24 67.210.118.0/24 maxlen: 24 67.210.119.0/24 maxlen: 24 67.210.120.0/24 maxlen: 24 67.210.122.0/24 maxlen: 24 67.210.123.0/24 maxlen: 24 192.228.119.0/24 maxlen: 24 216.97.230.0/24 maxlen: 24 216.97.231.0/24 maxlen: 24 216.97.232.0/24 maxlen: 24 216.97.233.0/24 maxlen: 24 216.97.234.0/24 maxlen: 24 216.227.219.0/24 maxlen: 24 216.227.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 19:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:6d:73:16:ae:83:f5:0e:66:8c:70:76:fb:b8:50:42:58:5f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 26 11:31:09 2026 GMT Not After : Oct 25 11:36:09 2027 GMT Subject: CN=83534767E2643BE575EBC51D94D0B8CCD5EE70F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:c7:86:c2:4f:e9:82:03:74:fb:14:50:1b: 0c:da:59:09:98:b1:90:ae:d9:d8:69:3a:63:97:65: b1:6e:6a:c0:58:cc:88:eb:b1:a7:5b:87:f1:99:cb: 21:ab:51:08:70:64:0f:b8:ba:35:52:da:03:3b:e5: 06:a7:1b:0f:56:ba:d2:06:ef:7c:06:50:2c:51:46: 07:dd:80:59:8a:f3:34:df:20:c6:7f:ec:4e:31:ac: f5:9c:0c:5a:7f:cd:ac:26:48:55:4d:9b:94:fd:fa: 1d:cc:20:c4:cf:7f:2e:38:63:4f:8b:c4:5d:53:ef: 44:fa:ae:d0:f7:85:08:f5:4a:e1:17:e4:f8:f5:16: 5c:1c:8a:34:47:1b:0f:8e:d2:ff:5d:d5:a8:52:1f: 3e:77:2a:5b:26:c3:c1:75:21:13:5b:19:6e:0b:64: 2b:f7:10:bc:82:c8:29:86:57:9c:07:54:77:b6:b0: d0:a8:c1:13:9a:da:d3:f1:af:89:a9:d0:13:24:f1: 4d:bc:16:b8:d4:93:e7:b5:30:e5:27:41:04:e7:d1: 6a:f0:48:f4:81:e0:db:12:99:9e:6d:f9:91:f5:8f: cc:8c:91:ec:ce:8a:9b:33:d8:67:76:86:ac:36:e7: bf:9e:a4:16:a4:21:28:9f:7c:1c:3f:10:21:20:24: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:47:67:E2:64:3B:E5:75:EB:C5:1D:94:D0:B8:CC:D5:EE:70:F1 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.110.0/24 67.210.112.0-67.210.120.255 67.210.122.0/23 192.228.119.0/24 216.97.230.0-216.97.234.255 216.227.219.0/24 216.227.221.0/24 Signature Algorithm: sha256WithRSAEncryption ac:db:fe:f2:92:ad:a6:93:44:7a:8e:c2:46:2e:8d:3a:49:82: 09:3d:b8:74:f2:33:6c:9a:11:52:0a:69:cb:e6:46:e5:bc:51: d4:7d:3b:f7:02:fa:f0:78:f3:13:9c:3a:54:1d:f2:f0:84:f2: 7f:2b:34:5d:aa:0a:d8:52:64:d5:7d:7a:cc:b2:6f:44:47:7e: 33:e0:40:80:d4:fb:b6:96:16:e5:5f:8e:8e:f6:b2:8e:b1:c2: fd:19:c7:4e:d1:59:c4:0a:94:af:3f:a2:5b:e6:b2:98:e6:08: 19:4c:3e:55:cd:89:95:45:86:71:5d:9a:13:e6:49:7f:5d:67: e9:66:13:cf:db:4f:7c:66:19:7c:a5:ea:41:af:5b:44:b2:11: 46:67:ca:ad:ed:c2:52:8f:d4:4d:f5:31:aa:c0:85:b4:c4:e3: f1:1b:90:a8:c9:3b:1f:6a:b9:b2:4b:8b:7b:04:8a:9a:be:95: 28:40:6b:d0:54:05:99:6d:ac:2a:3d:e4:07:68:20:9a:2e:10: 6c:29:c5:f6:44:87:3a:2f:a0:16:f7:2f:98:7b:a1:6e:0d:64: 39:f5:a7:6c:2f:25:38:1f:22:75:08:9b:db:d4:04:b4:5a:cb: 82:bd:8d:bf:c8:b1:68:5a:b3:94:94:2a:22:30:b7:b9:a8:9f: e4:60:d8:65 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgIUI+9tcxaug/UOZoxwdvu4UEJYX1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYxMDI2MTEzMTA5WhcNMjcxMDI1MTEzNjA5 WjAzMTEwLwYDVQQDEyg4MzUzNDc2N0UyNjQzQkU1NzVFQkM1MUQ5NEQwQjhDQ0Q1 RUU3MEYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJHHhsJP6YID dPsUUBsM2lkJmLGQrtnYaTpjl2WxbmrAWMyI67GnW4fxmcshq1EIcGQPuLo1UtoD O+UGpxsPVrrSBu98BlAsUUYH3YBZivM03yDGf+xOMaz1nAxaf82sJkhVTZuU/fod zCDEz38uOGNPi8RdU+9E+q7Q94UI9UrhF+T49RZcHIo0RxsPjtL/XdWoUh8+dypb JsPBdSETWxluC2Qr9xC8gsgphlecB1R3trDQqMETmtrT8a+JqdATJPFNvBa41JPn tTDlJ0EE59Fq8Ej0geDbEpmebfmR9Y/MjJHszoqbM9hndoasNue/nqQWpCEon3wc PxAhICTxlwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFINTR2fiZDvldevFHZTQuMzV 7nDxMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYI KwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBABD0m4wDAMEBEPScAMEAEPSeAMEAUPS egMEAMDkdzAMAwQB2GHmAwQA2GHqAwQA2OPbAwQA2OPdMA0GCSqGSIb3DQEBCwUA A4IBAQCs2/7ykq2mk0R6jsJGLo06SYIJPbh08jNsmhFSCmnL5kblvFHUfTv3Avrw ePMTnDpUHfLwhPJ/KzRdqgrYUmTVfXrMsm9ER34z4ECA1Pu2lhblX46O9rKOscL9 GcdO0VnECpSvP6Jb5rKY5ggZTD5VzYmVRYZxXZoT5kl/XWfpZhPP2098Zhl8pepB r1tEshFGZ8qt7cJSj9RN9TGqwIW0xOPxG5CoyTsfarmyS4t7BIqavpUoQGvQVAWZ bawqPeQHaCCaLhBsKcX2RIc6L6AW9y+Ye6FuDWQ59adsLyU4HyJ1CJvb1AS0WsuC vY2/yLFoWrOUlCoiMLe5qJ/kYNhl -----END CERTIFICATE-----Generated at Thu Nov 5 09:34:53 2026 by rpki-client