$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: kBYrE8Enc+vqgqPSMB+Nfcx1DKKkrdn/uW45Xi1NYdA= Subject key identifier: 49:D4:72:D1:9D:A9:6E:B9:21:1F:7E:B5:F2:15:71:25:48:06:DB:E3 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 48E8BD41AA21FC28E1807D959934F2173EC501A9 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa Signing time: Tue 05 Sep 2023 14:58:00 +0000 ROA not before: Tue 05 Sep 2023 14:53:00 +0000 ROA not after: Tue 03 Sep 2024 14:58:00 +0000 asID: 20473 IP address blocks: 2602:fed2:7083::/48 maxlen: 48 2602:fed2:7085::/48 maxlen: 48 2602:fed2:7086::/48 maxlen: 48 2602:fed2:7087::/48 maxlen: 48 2602:fed2:7106::/48 maxlen: 48 2602:fed2:710e::/48 maxlen: 48 2602:fed2:718f::/48 maxlen: 48 2602:fed2:7220::/44 maxlen: 48 2602:fed2:7301::/48 maxlen: 48 2602:fed2:731b::/48 maxlen: 48 2602:fed2:731c::/48 maxlen: 48 2602:fed2:770e::/48 maxlen: 48 2602:fed2:7e02::/48 maxlen: 48 2602:fed2:7e82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Sep 2023 17:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e8:bd:41:aa:21:fc:28:e1:80:7d:95:99:34:f2:17:3e:c5:01:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Sep 5 14:53:00 2023 GMT Not After : Sep 3 14:58:00 2024 GMT Subject: CN=49D472D19DA96EB9211F7EB5F21571254806DBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:c7:92:ee:c6:51:c1:a6:f9:af:d4:55:3e: 36:b2:d9:4c:d5:7d:b6:12:ee:c4:72:c0:03:67:ec: 3b:26:0a:59:94:25:c3:b2:d5:b5:d6:51:5d:83:05: da:ea:13:7a:b6:5b:b0:f2:11:a3:d3:79:08:ca:18: 46:64:88:c7:a0:0d:14:fe:7b:ce:77:3e:9d:a9:4f: 2a:85:25:c8:c0:04:5a:11:63:5f:b0:c8:66:ab:d7: 84:5a:76:9d:ea:97:a1:19:07:f2:08:23:22:85:3a: 4a:57:ae:70:45:65:9d:91:63:7e:e0:70:c7:73:19: a0:6d:09:50:86:7b:5b:7e:f1:9d:26:c0:1c:9c:33: ae:76:c7:2b:1c:6d:d6:a1:0f:3f:d5:e5:bf:73:9f: 5b:b4:bf:4e:d0:77:5e:30:a1:94:1e:ed:57:15:97: 07:37:48:60:a4:54:2d:6d:ee:c6:90:9a:48:e6:a0: 21:d0:11:72:82:3f:fa:99:f7:10:10:8d:8b:d8:cc: 06:c7:fd:83:4c:77:7f:0f:7d:7e:7e:fc:86:7c:2a: 51:74:84:f5:80:84:21:28:a9:39:8b:d7:06:e4:d8: 5a:d2:c2:4c:44:ac:ac:86:c5:63:c4:7b:8b:98:76: c9:24:27:f2:b4:13:60:93:6b:13:4b:c3:03:92:0a: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D4:72:D1:9D:A9:6E:B9:21:1F:7E:B5:F2:15:71:25:48:06:DB:E3 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7083::/48 2602:fed2:7085::-2602:fed2:7087:ffff:ffff:ffff:ffff:ffff 2602:fed2:7106::/48 2602:fed2:710e::/48 2602:fed2:718f::/48 2602:fed2:7220::/44 2602:fed2:7301::/48 2602:fed2:731b::-2602:fed2:731c:ffff:ffff:ffff:ffff:ffff 2602:fed2:770e::/48 2602:fed2:7e02::/48 2602:fed2:7e82::/48 Signature Algorithm: sha256WithRSAEncryption 8a:9f:df:a2:6d:e2:3e:ca:50:8e:b5:5f:ad:c3:69:16:a6:e1: 09:88:59:1b:af:c5:a7:1c:23:9a:5e:4d:52:f2:60:e1:1a:95: 43:d4:01:69:4c:5d:26:c1:a2:d2:c4:90:79:77:8e:9e:2c:dc: a2:62:a1:2d:76:38:c9:03:92:e2:28:4d:3b:ec:37:99:26:bb: 62:5b:50:a8:73:f9:a7:79:72:f2:d6:71:b8:23:25:26:58:52: e5:e3:3b:4b:b0:76:29:2f:5e:97:97:38:db:72:48:1c:f5:1d: 0d:c1:cd:46:6a:99:2c:49:9f:0a:7f:df:bd:b3:b0:08:3d:ef: d9:93:fb:5f:63:43:81:a1:5c:84:9d:8e:74:51:92:a7:cf:39: 8a:2d:f4:7d:eb:f4:24:9e:71:fe:ef:bf:95:97:5a:13:2b:86: 2b:d9:ce:51:01:ab:14:9d:fa:a7:cb:cf:2f:37:12:7f:be:0a: 6a:44:e7:c0:94:d2:68:a2:6d:7b:68:d6:3c:ec:42:12:da:75: 12:11:1a:2d:30:bf:d0:cc:31:ac:6e:5c:42:5a:b2:81:85:d8: cb:f8:73:08:dc:69:88:1d:13:1b:af:a6:e4:10:bf:8e:4c:93: ce:8d:ce:eb:25:23:7d:71:e3:79:ac:bf:82:0c:bd:fc:81:44: 7f:b1:ed:99 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUSOi9Qaoh/CjhgH2VmTTyFz7FAakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwOTA1MTQ1MzAwWhcNMjQwOTAzMTQ1ODAw WjAzMTEwLwYDVQQDEyg0OUQ0NzJEMTlEQTk2RUI5MjExRjdFQjVGMjE1NzEyNTQ4 MDZEQkUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrTHku7GUcGm +a/UVT42stlM1X22Eu7EcsADZ+w7JgpZlCXDstW11lFdgwXa6hN6tluw8hGj03kI yhhGZIjHoA0U/nvOdz6dqU8qhSXIwARaEWNfsMhmq9eEWnad6pehGQfyCCMihTpK V65wRWWdkWN+4HDHcxmgbQlQhntbfvGdJsAcnDOudscrHG3WoQ8/1eW/c59btL9O 0HdeMKGUHu1XFZcHN0hgpFQtbe7GkJpI5qAh0BFygj/6mfcQEI2L2MwGx/2DTHd/ D31+fvyGfCpRdIT1gIQhKKk5i9cG5Nha0sJMRKyshsVjxHuLmHbJJCfytBNgk2sT S8MDkgquWwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFEnUctGdqW65IR9+tfIVcSVI BtvjMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyMDQ3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjCBlAYIKwYBBQUHAQcBAf8EgYQwgYEwfwQCAAIweQMHACYC/tJwgzASAwcA JgL+0nCFAwcDJgL+0nCAAwcAJgL+0nEGAwcAJgL+0nEOAwcAJgL+0nGPAwcEJgL+ 0nIgAwcAJgL+0nMBMBIDBwAmAv7ScxsDBwAmAv7ScxwDBwAmAv7Sdw4DBwAmAv7S fgIDBwAmAv7SfoIwDQYJKoZIhvcNAQELBQADggEBAIqf36Jt4j7KUI61X63DaRam 4QmIWRuvxaccI5peTVLyYOEalUPUAWlMXSbBotLEkHl3jp4s3KJioS12OMkDkuIo TTvsN5kmu2JbUKhz+ad5cvLWcbgjJSZYUuXjO0uwdikvXpeXONtySBz1HQ3BzUZq mSxJnwp/372zsAg979mT+19jQ4GhXISdjnRRkqfPOYot9H3r9CSecf7vv5WXWhMr hivZzlEBqxSd+qfLzy83En++CmpE58CU0miibXto1jzsQhLadRIRGi0wv9DMMaxu XEJasoGF2Mv4cwjcaYgdExuvpuQQv45Mk86NzuslI31x43msv4IMvfyBRH+x7Zk= -----END CERTIFICATE-----Generated at Tue Sep 5 15:37:35 2023 by rpki-client on console-fra.rpki-client.org