This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2856.roa File: AS2856.roa (raw, json) Hash identifier: 494rqXWEYrFJLDLFnFQ22exhfncmsbIBglFkByWcXZc= Subject key identifier: CF:8B:FD:A0:80:62:55:DB:E3:D1:1A:27:80:22:B9:12:A9:2D:31:9D Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 54DAE0B63577FB48133BFF9CFDAA8D33CB607F6C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2856.roa Signing time: Mon 01 Dec 2025 12:14:39 +0000 ROA not before: Mon 01 Dec 2025 12:09:39 +0000 ROA not after: Mon 30 Nov 2026 12:14:39 +0000 asID: 2856 IP address blocks: 40.27.28.0/24 maxlen: 24 40.27.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 01:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:da:e0:b6:35:77:fb:48:13:3b:ff:9c:fd:aa:8d:33:cb:60:7f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Dec 1 12:09:39 2025 GMT Not After : Nov 30 12:14:39 2026 GMT Subject: CN=CF8BFDA0806255DBE3D11A278022B912A92D319D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:b3:7b:74:07:3e:16:84:1c:e3:7f:21:8d: b2:11:93:b8:37:13:d8:e5:8d:46:ba:01:e2:8d:16: 60:4a:90:91:61:4d:ea:4c:72:87:28:17:1c:9f:24: 69:bd:0e:9f:d7:22:df:de:ef:9d:bc:88:67:57:96: eb:e9:0a:84:38:6c:76:ef:90:42:fc:c8:f2:e9:ad: 26:4b:e1:1d:a2:78:4a:45:12:7c:24:e9:10:90:b8: b7:70:91:af:81:92:4a:63:14:4d:a6:58:fb:3d:62: 25:2e:56:1d:72:9c:58:fb:7f:44:ba:10:1e:3b:0f: a4:87:e6:c2:0c:86:64:7e:30:04:32:0c:c2:79:7a: 69:52:52:63:e3:e5:ee:08:c4:48:31:b5:3d:29:b5: 3e:5b:6b:c6:f5:10:eb:6d:2a:de:8d:e1:aa:aa:67: c2:56:0d:89:53:5e:6f:d3:0d:5f:3e:b9:24:4e:eb: a2:fc:cb:53:cb:19:cf:66:33:e2:e7:e3:53:a1:d1: ef:25:71:ca:5d:23:51:89:e6:dd:ee:a9:a6:96:92: 2d:0f:79:fa:94:da:34:d9:d4:02:5b:ff:dd:b6:fe: 25:0d:e2:73:6f:83:70:32:ab:a1:28:7c:8d:4a:ab: ff:86:ed:29:35:fa:38:53:43:fc:ef:b1:75:f2:63: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8B:FD:A0:80:62:55:DB:E3:D1:1A:27:80:22:B9:12:A9:2D:31:9D X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.28.0/24 40.27.72.0/24 Signature Algorithm: sha256WithRSAEncryption 66:18:12:ad:d6:48:db:6a:b9:7f:94:75:31:a8:e9:c0:d7:c2: 62:bb:47:01:63:cc:e6:3d:ad:87:76:30:e0:09:56:ee:ff:28: 89:d0:93:6d:4d:48:10:6c:b5:73:a0:d8:56:a4:fe:a3:14:e3: 0e:8d:33:65:83:3b:07:fb:55:33:98:62:6f:c2:cd:08:b9:75: 1b:7c:98:6c:80:67:32:9d:b3:0d:93:45:c7:cd:2a:9f:4f:27: 2b:16:ed:c2:05:da:c2:1c:01:b1:84:0f:c2:ab:82:ae:8f:ce: 12:5a:30:0e:cf:78:2d:31:fd:75:50:01:2e:99:9e:2f:7c:20: d0:16:90:c5:db:f9:88:a4:2d:52:16:be:57:e7:c8:b5:92:77: 48:65:bf:04:c0:ee:b9:23:70:d3:de:b4:1d:bc:e5:8a:56:be: 6e:b0:e3:c4:96:25:8d:cf:4f:50:db:46:5c:b4:ab:4d:7f:c5: af:71:59:91:86:17:66:a2:c4:32:03:8a:c1:49:bc:15:ef:1f: 99:ea:9a:8b:f9:cd:b8:5b:00:0d:dc:b0:d5:bc:f3:52:a6:99: 5c:63:0e:3a:06:ee:33:90:1e:9c:23:a7:cb:81:ca:aa:04:af: 86:03:b7:a2:41:b7:37:dc:45:b5:96:ef:15:8f:19:b6:2d:ff: 2b:1e:67:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUVNrgtjV3+0gTO/+c/aqNM8tgf2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMjAxMTIwOTM5WhcNMjYxMTMwMTIxNDM5 WjAzMTEwLwYDVQQDEyhDRjhCRkRBMDgwNjI1NURCRTNEMTFBMjc4MDIyQjkxMkE5 MkQzMTlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIOze3QHPhaE HON/IY2yEZO4NxPY5Y1GugHijRZgSpCRYU3qTHKHKBccnyRpvQ6f1yLf3u+dvIhn V5br6QqEOGx275BC/Mjy6a0mS+EdonhKRRJ8JOkQkLi3cJGvgZJKYxRNplj7PWIl LlYdcpxY+39EuhAeOw+kh+bCDIZkfjAEMgzCeXppUlJj4+XuCMRIMbU9KbU+W2vG 9RDrbSrejeGqqmfCVg2JU15v0w1fPrkkTuui/MtTyxnPZjPi5+NTodHvJXHKXSNR iebd7qmmlpItD3n6lNo02dQCW//dtv4lDeJzb4NwMquhKHyNSqv/hu0pNfo4U0P8 77F18mN/awIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFM+L/aCAYlXb49EaJ4AiuRKp LTGdMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzI4NTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAoGxwDBAAoG0gwDQYJKoZIhvcNAQEL BQADggEBAGYYEq3WSNtquX+UdTGo6cDXwmK7RwFjzOY9rYd2MOAJVu7/KInQk21N SBBstXOg2Fak/qMU4w6NM2WDOwf7VTOYYm/CzQi5dRt8mGyAZzKdsw2TRcfNKp9P JysW7cIF2sIcAbGED8Krgq6PzhJaMA7PeC0x/XVQAS6Zni98INAWkMXb+YikLVIW vlfnyLWSd0hlvwTA7rkjcNPetB285YpWvm6w48SWJY3PT1DbRly0q01/xa9xWZGG F2aixDIDisFJvBXvH5nqmov5zbhbAA3csNW881KmmVxjDjoG7jOQHpwjp8uByqoE r4YDt6JBtzfcRbWW7xWPGbYt/yseZ5o= -----END CERTIFICATE-----Generated at Fri Dec 5 14:07:40 2025 by rpki-client