$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205212.roa File: AS205212.roa (raw, json) Hash identifier: aDiyI7Nwszu+UYeIyMvc5pys+EpqrZmSHdYSNvygLlc= Subject key identifier: D9:FD:42:93:C1:AD:5B:50:3C:F7:CF:5A:FF:7D:14:07:50:76:4A:5D Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 4B08A555BF9D408E267A9CBA9BC79181B933BDB8 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205212.roa Signing time: Sat 14 Dec 2024 00:46:22 +0000 ROA not before: Sat 14 Dec 2024 00:41:22 +0000 ROA not after: Sat 13 Dec 2025 00:46:22 +0000 asID: 205212 IP address blocks: 2602:fed2:7070::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:08:a5:55:bf:9d:40:8e:26:7a:9c:ba:9b:c7:91:81:b9:33:bd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Dec 14 00:41:22 2024 GMT Not After : Dec 13 00:46:22 2025 GMT Subject: CN=D9FD4293C1AD5B503CF7CF5AFF7D140750764A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:58:4a:3d:41:2e:be:23:42:4b:f1:f2:98: f2:88:8f:7d:d5:cd:31:cb:4d:33:b7:94:b8:47:b6: 8c:b9:c8:e0:f1:d0:a2:33:91:1c:38:9f:09:a6:46: e8:75:72:76:e8:45:a7:e3:2b:c9:c2:98:96:a7:0a: bf:20:c0:8b:93:07:1d:61:d3:fd:f4:50:84:a1:71: 6c:eb:49:91:0f:f8:c6:cb:2a:26:fd:be:42:e0:8b: be:b7:5e:c8:51:c7:d7:dc:91:5a:4d:a4:be:c1:3b: 56:0b:af:96:7d:c4:73:3b:4f:22:07:44:c2:8e:d8: 1d:13:9b:27:77:31:9f:55:90:03:e9:6c:93:5e:57: d0:99:fe:49:98:d1:2c:c1:ef:81:b0:79:1a:b3:92: 73:75:93:64:b1:c0:2e:cf:fe:18:8e:d1:3f:3b:e9: 17:1b:c8:f0:4d:72:97:f5:5a:c6:04:31:0a:49:88: 2f:d1:75:c2:b5:c1:c7:b0:09:28:40:ed:40:28:fc: ef:35:4f:0a:c5:1a:26:30:de:02:57:69:b5:a8:f2: ec:d9:d6:9a:f1:2e:96:91:20:87:36:bb:ac:63:66: 07:24:a2:28:ea:bc:e0:a0:21:1e:d9:6f:2e:d9:a4: e7:3e:21:b0:76:f4:10:40:77:19:dd:10:be:18:57: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:42:93:C1:AD:5B:50:3C:F7:CF:5A:FF:7D:14:07:50:76:4A:5D X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7070::/44 Signature Algorithm: sha256WithRSAEncryption be:69:67:34:fd:49:98:1c:c5:cd:e1:de:ae:2b:5b:86:a9:5f: 9e:ad:8f:c3:79:dc:20:f3:83:92:c0:f4:b3:d6:65:23:0d:2c: 1c:ed:a1:92:bd:82:f2:a9:f3:9e:5f:93:81:38:83:64:c1:7b: d8:7b:ca:ac:5f:a8:26:26:cc:e4:31:15:a7:0a:26:67:26:08: d2:37:d3:12:28:68:96:ad:27:8c:42:83:4d:95:6a:ad:4f:bd: 00:be:8b:76:f7:e7:a6:80:68:0d:e7:46:69:be:e2:35:f5:4b: 3c:eb:76:d2:d6:ce:95:7f:ac:90:de:9b:6e:13:7b:5f:4e:43: 2d:42:b0:b6:9c:76:e9:9e:fb:7d:3a:d7:07:da:cc:c3:42:2b: 0e:d5:0f:a7:86:49:92:3e:33:5d:c5:30:f1:af:f2:af:d1:04: 1f:cf:b6:9d:d4:88:fa:67:f3:d2:01:f3:45:45:22:18:1b:fb: 8f:68:dd:49:00:13:30:34:b8:d8:b5:27:f3:e1:e0:dd:9d:76: 88:15:dd:ae:9e:5f:26:36:f7:6d:62:f8:08:ed:e6:ed:ac:b6: 13:41:92:a1:14:42:9a:0e:00:00:ff:02:d0:ad:53:40:1f:14: 41:f4:51:ef:22:ea:87:14:c9:2d:9f:1b:54:e5:81:1c:e5:15: 23:e5:78:49 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUSwilVb+dQI4mepy6m8eRgbkzvbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQxMjE0MDA0MTIyWhcNMjUxMjEzMDA0NjIy WjAzMTEwLwYDVQQDEyhEOUZENDI5M0MxQUQ1QjUwM0NGN0NGNUFGRjdEMTQwNzUw NzY0QTVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0NYSj1BLr4j Qkvx8pjyiI991c0xy00zt5S4R7aMucjg8dCiM5EcOJ8JpkbodXJ26EWn4yvJwpiW pwq/IMCLkwcdYdP99FCEoXFs60mRD/jGyyom/b5C4Iu+t17IUcfX3JFaTaS+wTtW C6+WfcRzO08iB0TCjtgdE5sndzGfVZAD6WyTXlfQmf5JmNEswe+BsHkas5JzdZNk scAuz/4YjtE/O+kXG8jwTXKX9VrGBDEKSYgv0XXCtcHHsAkoQO1AKPzvNU8KxRom MN4CV2m1qPLs2daa8S6WkSCHNrusY2YHJKIo6rzgoCEe2W8u2aTnPiGwdvQQQHcZ 3RC+GFeo5QIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFNn9QpPBrVtQPPfPWv99FAdQ dkpdMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyMDUyMTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAv7ScHAwDQYJKoZI hvcNAQELBQADggEBAL5pZzT9SZgcxc3h3q4rW4apX56tj8N53CDzg5LA9LPWZSMN LBztoZK9gvKp855fk4E4g2TBe9h7yqxfqCYmzOQxFacKJmcmCNI30xIoaJatJ4xC g02Vaq1PvQC+i3b356aAaA3nRmm+4jX1SzzrdtLWzpV/rJDem24Te19OQy1CsLac dume+3061wfazMNCKw7VD6eGSZI+M13FMPGv8q/RBB/Ptp3UiPpn89IB80VFIhgb +49o3UkAEzA0uNi1J/Ph4N2ddogV3a6eXyY2921i+Ajt5u2sthNBkqEUQpoOAAD/ AtCtU0AfFEH0Ue8i6ocUyS2fG1TlgRzlFSPleEk= -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:19 2025 by rpki-client