$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS134835.roa File: AS134835.roa (raw, json) Hash identifier: dP4qpd9VJoWh3VPp/1+oEgexBDfNwWUz2zlXPAP+ezs= Subject key identifier: 03:FB:76:74:8B:05:F1:9F:DA:3D:0C:C3:6F:32:41:8A:9F:A4:70:CB Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 1CEE13E2DE73E270971DC5F1866EA53B0B5156D6 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS134835.roa Signing time: Wed 15 Jan 2025 20:02:42 +0000 ROA not before: Wed 15 Jan 2025 19:57:42 +0000 ROA not after: Wed 14 Jan 2026 20:02:42 +0000 asID: 134835 IP address blocks: 2602:fed2:7004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Mar 2025 07:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ee:13:e2:de:73:e2:70:97:1d:c5:f1:86:6e:a5:3b:0b:51:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Jan 15 19:57:42 2025 GMT Not After : Jan 14 20:02:42 2026 GMT Subject: CN=03FB76748B05F19FDA3D0CC36F32418A9FA470CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:1c:09:34:3a:20:23:30:84:8d:a6:e9:c0: 88:a4:da:8a:0e:95:f2:6a:3c:a7:4c:0a:fd:de:8b: 2e:0e:a5:6f:09:e1:3f:a6:18:e1:56:01:49:07:b2: ba:89:56:e7:18:ba:ca:46:a6:d0:7f:24:88:39:90: 58:18:26:88:74:08:1d:71:80:46:ed:9f:69:37:02: ee:59:4b:a3:f2:d3:1f:da:b8:d5:51:31:ee:34:bb: be:c8:58:9c:69:85:01:41:08:4a:77:e9:34:c5:ec: 12:82:83:7b:ef:29:2b:fe:5f:46:24:3b:58:b8:18: 0f:4d:53:09:49:55:b6:ca:27:35:fe:97:29:39:1d: 5b:4e:27:6c:87:7d:c0:b5:fa:fb:07:f7:2c:b9:31: 35:70:5f:66:22:46:d3:77:52:9e:d2:84:9f:b3:61: 8a:5f:d8:0d:77:04:19:c0:37:48:ee:4a:08:f3:fb: d7:98:54:23:9b:c9:9a:73:af:b1:40:32:0f:48:62: d4:2e:ae:ac:be:ee:be:59:69:0d:c7:c3:f7:a9:b6: 80:c6:b7:6d:5e:78:eb:12:5d:67:6c:93:67:36:27: 98:27:4c:9f:93:45:18:4d:20:b2:1f:ed:b7:09:ab: 1b:98:9b:72:d9:eb:29:cf:be:68:38:24:11:d4:9e: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:76:74:8B:05:F1:9F:DA:3D:0C:C3:6F:32:41:8A:9F:A4:70:CB X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS134835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7004::/48 Signature Algorithm: sha256WithRSAEncryption 96:60:24:00:f7:a0:3c:a1:52:ae:0f:12:61:36:23:cd:6a:11: 60:08:67:73:ae:70:82:52:b0:ea:34:d4:e1:2b:dd:d9:ed:e3: 62:17:4b:2e:75:44:23:b1:aa:d2:0e:3d:d3:d5:d9:ea:99:b8: 32:70:44:47:b9:a2:b6:d9:e4:db:d8:25:79:d5:9d:ce:97:1d: d1:58:01:92:33:c0:4d:bf:03:f6:0c:75:8c:9b:ad:d8:15:0e: 2d:e0:7e:b0:60:ad:30:b9:1b:78:0f:e1:b8:f0:8a:0e:63:41: 92:d2:52:59:43:0a:95:e4:d6:8a:f7:ec:57:c6:41:eb:9d:2b: 6a:82:c9:f7:c4:97:a4:8e:53:af:af:8a:b9:a4:0e:3e:78:08: 1a:f8:ae:75:29:58:8d:d3:7e:89:c3:75:ff:a5:03:12:49:18: ef:7b:01:14:27:4f:91:14:97:ff:89:02:82:e5:9d:51:cb:80: 7e:e5:c6:7c:0d:21:af:68:47:1c:c1:15:a3:7b:1d:c7:96:e9: d3:ec:32:d2:16:33:de:7d:3f:a1:b0:c8:d0:ce:dc:1a:24:3e: 9c:87:64:a0:88:7d:5c:bc:1d:c7:61:12:06:82:99:6a:82:2f: b2:91:fc:d8:8b:8b:ee:4b:47:7b:55:5e:85:e5:3c:83:ef:47: b4:9a:95:09 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUHO4T4t5z4nCXHcXxhm6lOwtRVtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMTE1MTk1NzQyWhcNMjYwMTE0MjAwMjQy WjAzMTEwLwYDVQQDEygwM0ZCNzY3NDhCMDVGMTlGREEzRDBDQzM2RjMyNDE4QTlG QTQ3MENCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wccCTQ6ICMw hI2m6cCIpNqKDpXyajynTAr93osuDqVvCeE/phjhVgFJB7K6iVbnGLrKRqbQfySI OZBYGCaIdAgdcYBG7Z9pNwLuWUuj8tMf2rjVUTHuNLu+yFicaYUBQQhKd+k0xewS goN77ykr/l9GJDtYuBgPTVMJSVW2yic1/pcpOR1bTidsh33Atfr7B/csuTE1cF9m IkbTd1Ke0oSfs2GKX9gNdwQZwDdI7koI8/vXmFQjm8mac6+xQDIPSGLULq6svu6+ WWkNx8P3qbaAxrdtXnjrEl1nbJNnNieYJ0yfk0UYTSCyH+23CasbmJty2espz75o OCQR1J48kwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFAP7dnSLBfGf2j0Mw28yQYqf pHDLMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMxMzQ4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScAQwDQYJKoZI hvcNAQELBQADggEBAJZgJAD3oDyhUq4PEmE2I81qEWAIZ3OucIJSsOo01OEr3dnt 42IXSy51RCOxqtIOPdPV2eqZuDJwREe5orbZ5NvYJXnVnc6XHdFYAZIzwE2/A/YM dYybrdgVDi3gfrBgrTC5G3gP4bjwig5jQZLSUllDCpXk1or37FfGQeudK2qCyffE l6SOU6+virmkDj54CBr4rnUpWI3TfonDdf+lAxJJGO97ARQnT5EUl/+JAoLlnVHL gH7lxnwNIa9oRxzBFaN7HceW6dPsMtIWM959P6GwyNDO3BokPpyHZKCIfVy8Hcdh EgaCmWqCL7KR/NiLi+5LR3tVXoXlPIPvR7SalQk= -----END CERTIFICATE-----Generated at Wed Mar 12 21:24:15 2025 by rpki-client