$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205552.roa File: AS205552.roa (raw, json) Hash identifier: AR0hiXGuQg6ENo4ocyQFW/D8+omvMQo+N7zztwxO8pE= Subject key identifier: E1:8C:BF:D6:D3:C0:B4:03:2C:36:3B:4C:5E:E1:57:F4:F1:B7:75:70 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 4EDEBDC584486E25C795D51C28A0FE94D0B222A9 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205552.roa Signing time: Mon 01 Sep 2025 14:57:19 +0000 ROA not before: Mon 01 Sep 2025 14:52:19 +0000 ROA not after: Mon 31 Aug 2026 14:57:19 +0000 asID: 205552 IP address blocks: 161.129.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 23:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:de:bd:c5:84:48:6e:25:c7:95:d5:1c:28:a0:fe:94:d0:b2:22:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Sep 1 14:52:19 2025 GMT Not After : Aug 31 14:57:19 2026 GMT Subject: CN=E18CBFD6D3C0B4032C363B4C5EE157F4F1B77570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:98:3e:bf:40:e8:c0:fc:5f:61:d4:44:fe: 88:32:4f:3a:00:51:15:40:bc:da:52:5d:78:3b:00: 4e:d4:b2:88:89:e3:79:39:5b:c4:51:52:f0:53:cd: f1:75:e9:0c:3e:ed:5b:50:d1:9f:f0:99:75:cc:cf: 64:4c:90:2c:c0:33:68:ab:cd:4c:32:fa:6f:1c:1c: e5:97:32:d2:ba:57:61:e7:dc:32:f7:9e:1f:69:4d: e7:92:ac:a9:c9:bb:d3:b6:5e:3c:ef:bf:43:ff:4f: b0:f7:62:40:f7:79:25:c3:64:c3:d1:7c:fb:bd:21: ca:22:21:05:ee:e9:4a:29:0a:c3:eb:f3:9f:12:7a: 3e:41:72:4d:2f:c3:c2:c6:c1:5e:53:c4:0d:81:5a: 4b:b9:bf:45:96:cd:7a:f3:ac:8e:e8:3c:78:66:c9: f7:22:fe:00:90:f9:58:5a:11:0d:cc:c5:4c:52:19: f6:cb:47:b6:3a:3a:eb:16:9f:2d:ce:7e:09:5b:5b: 1e:f8:bf:22:b4:23:d7:9f:d4:2d:de:46:03:98:25: 0b:86:2b:1c:af:00:01:2a:7a:b3:5f:71:4c:7b:ae: da:28:d2:57:0a:34:82:c1:5d:11:5b:98:cd:5c:2b: b6:4b:d8:9e:dd:1d:90:ff:6e:e9:a1:f9:76:0d:54: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:BF:D6:D3:C0:B4:03:2C:36:3B:4C:5E:E1:57:F4:F1:B7:75:70 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205552.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.129.60.0/24 Signature Algorithm: sha256WithRSAEncryption a1:73:61:7e:76:57:fa:2b:60:0f:04:fa:8b:a6:34:58:b9:a3: c0:bf:6f:4b:22:17:7a:f0:95:66:f0:70:38:35:10:bc:53:fc: a4:52:46:dd:78:00:84:07:66:d0:f4:2e:ee:8f:43:b9:e0:59: 21:7b:d9:3c:32:fc:bc:1a:c6:0f:15:f0:a1:07:35:71:cc:5e: ad:6f:71:32:be:43:9a:ab:7e:1a:a4:76:e9:2d:63:a0:e7:e8: 97:49:06:32:b1:9c:d4:28:6e:52:b4:e8:18:76:e8:85:75:62: fe:e6:e7:63:b7:cd:37:be:8a:ec:af:ed:af:83:65:99:9a:13: 44:19:f0:a2:a6:04:5f:6b:1e:18:e0:3d:b4:68:f5:15:64:22: a9:b4:f6:e7:cb:a0:90:2b:16:3f:72:c0:66:d6:c8:f7:49:03: 1f:66:e0:2d:1e:e4:18:68:31:89:fc:37:d9:4b:b8:28:80:d3: 62:05:6f:4b:7d:47:da:10:67:47:14:7e:6d:38:5e:79:18:9b: 52:c2:08:b0:47:19:49:c4:49:74:0d:0d:c4:23:9d:cc:77:c6: 15:9f:08:bb:b1:57:1c:fb:3f:c3:c2:32:01:06:a4:ee:c9:32: 92:a9:31:0e:a4:17:6e:66:2d:ff:5b:ea:da:dd:46:f3:2f:63: 7b:84:d5:65 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUTt69xYRIbiXHldUcKKD+lNCyIqkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwOTAxMTQ1MjE5WhcNMjYwODMxMTQ1NzE5 WjAzMTEwLwYDVQQDEyhFMThDQkZENkQzQzBCNDAzMkMzNjNCNEM1RUUxNTdGNEYx Qjc3NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8yYPr9A6MD8 X2HURP6IMk86AFEVQLzaUl14OwBO1LKIieN5OVvEUVLwU83xdekMPu1bUNGf8Jl1 zM9kTJAswDNoq81MMvpvHBzllzLSuldh59wy954faU3nkqypybvTtl48779D/0+w 92JA93klw2TD0Xz7vSHKIiEF7ulKKQrD6/OfEno+QXJNL8PCxsFeU8QNgVpLub9F ls1686yO6Dx4Zsn3Iv4AkPlYWhENzMVMUhn2y0e2OjrrFp8tzn4JW1se+L8itCPX n9Qt3kYDmCULhiscrwABKnqzX3FMe67aKNJXCjSCwV0RW5jNXCu2S9ie3R2Q/27p ofl2DVQjdwIDAQABo4ICVjCCAlIwHQYDVR0OBBYEFOGMv9bTwLQDLDY7TF7hV/Tx t3VwMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyMDU1NTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChgTwwDQYJKoZIhvcN AQELBQADggEBAKFzYX52V/orYA8E+oumNFi5o8C/b0siF3rwlWbwcDg1ELxT/KRS Rt14AIQHZtD0Lu6PQ7ngWSF72Twy/Lwaxg8V8KEHNXHMXq1vcTK+Q5qrfhqkdukt Y6Dn6JdJBjKxnNQoblK06Bh26IV1Yv7m52O3zTe+iuyv7a+DZZmaE0QZ8KKmBF9r HhjgPbRo9RVkIqm09ufLoJArFj9ywGbWyPdJAx9m4C0e5BhoMYn8N9lLuCiA02IF b0t9R9oQZ0cUfm04XnkYm1LCCLBHGUnESXQNDcQjncx3xhWfCLuxVxz7P8PCMgEG pO7JMpKpMQ6kF25mLf9b6trdRvMvY3uE1WU= -----END CERTIFICATE-----Generated at Fri Oct 24 09:50:24 2025 by rpki-client