$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa File: AS214995.roa (raw, json) Hash identifier: pGO2ikJLFhrJQVHk1wcCmkOVJP+k9JKxD5udd966/4s= Subject key identifier: BA:F7:E7:81:C8:C2:A3:05:08:A1:9C:4B:9D:E4:D0:A3:BB:B9:D1:2A Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 4CBB0A51B903CFA6C7D03FAD28B315387D04A72E Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa Signing time: Sat 04 May 2024 02:41:16 +0000 ROA not before: Sat 04 May 2024 02:36:16 +0000 ROA not after: Sat 03 May 2025 02:41:16 +0000 asID: 214995 IP address blocks: 2602:fed2:7300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bb:0a:51:b9:03:cf:a6:c7:d0:3f:ad:28:b3:15:38:7d:04:a7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: May 4 02:36:16 2024 GMT Not After : May 3 02:41:16 2025 GMT Subject: CN=BAF7E781C8C2A30508A19C4B9DE4D0A3BBB9D12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:21:a7:37:be:de:ac:b5:eb:28:50:d6:38: 6e:0d:76:ee:c9:a1:f7:c7:13:cd:b6:a3:86:74:60: 99:42:dd:a0:16:c8:3f:af:ed:68:8d:ab:dd:b5:14: cc:93:ae:0c:8e:92:11:69:4b:71:bb:79:fb:9b:ce: d5:25:87:f4:bf:26:2f:35:d7:88:4f:83:b3:2b:35: e9:58:ef:29:e0:2d:c7:20:b1:fe:e4:4b:d2:b1:d8: 18:b4:50:2e:6e:67:80:3c:ca:dc:a6:6e:54:4c:cd: 20:2b:67:9e:9b:c5:56:f7:5b:d7:1d:b3:8a:a3:9c: d1:2e:48:5d:ac:2a:7b:80:2c:ef:a7:4f:3f:7c:f6: 2b:e9:f4:25:7f:73:f8:34:ae:37:35:09:8e:76:18: eb:7e:0a:a4:95:c2:70:85:ab:c5:50:e9:7e:19:5b: 3b:40:5e:88:2e:8c:80:0e:ab:53:48:aa:c6:72:3e: be:c8:65:96:5e:2f:4f:aa:fa:66:87:26:0b:ad:82: 7a:76:7a:6e:0d:ff:25:28:cb:bd:e6:3b:31:77:11: 31:45:84:b2:0a:2a:ed:63:56:f8:2b:63:b1:c7:56: 8c:7d:08:02:11:9b:92:81:23:cd:6e:8a:47:03:c6: df:fe:2f:fd:a6:53:da:ea:f4:58:3b:07:23:67:ff: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F7:E7:81:C8:C2:A3:05:08:A1:9C:4B:9D:E4:D0:A3:BB:B9:D1:2A X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7300::/48 Signature Algorithm: sha256WithRSAEncryption 77:bf:88:1a:0c:49:9c:27:4e:f8:12:93:ef:9a:61:93:5d:26: e1:fb:5c:62:e0:88:87:1f:8c:40:a0:ec:8f:db:2f:74:0c:88: 12:02:4e:ba:83:e0:1d:24:a4:10:6b:15:38:6b:65:44:53:17: 69:f2:f8:5b:22:f0:96:7f:33:d6:b8:1f:0c:1b:88:8a:2c:6f: 84:df:85:48:aa:ca:7a:a3:f2:a2:82:2f:c8:46:53:1e:f8:c0: 35:f5:61:14:9c:8e:cd:a0:47:39:c0:39:8f:87:d8:2c:a1:4f: fc:e8:8e:93:c1:d7:39:a6:fa:5e:38:8b:b9:1a:63:bf:f6:f9: f3:b3:06:38:38:5d:fc:42:ae:63:88:81:de:ef:d5:51:80:78: 85:d9:4a:e2:d4:6b:8c:0a:50:d1:ff:a2:7e:2a:74:04:a1:b1: 4b:83:8a:91:44:16:66:a3:ab:a1:c9:9f:ad:c6:32:64:72:85: 30:bf:44:fb:e2:c4:c4:42:cb:99:7c:3a:b0:2c:0f:cc:39:23: f4:cd:11:23:c0:14:4f:3a:12:ec:cc:d2:da:42:0e:d8:06:61: af:45:54:53:13:82:40:f7:93:21:5b:be:e0:34:9c:b0:a9:82: 1b:93:77:ae:fa:78:56:dd:79:40:1f:05:b2:29:dd:d8:e2:eb: ba:4d:3d:7b -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUTLsKUbkDz6bH0D+tKLMVOH0Epy4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNTA0MDIzNjE2WhcNMjUwNTAzMDI0MTE2 WjAzMTEwLwYDVQQDEyhCQUY3RTc4MUM4QzJBMzA1MDhBMTlDNEI5REU0RDBBM0JC QjlEMTJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Ahpze+3qy1 6yhQ1jhuDXbuyaH3xxPNtqOGdGCZQt2gFsg/r+1ojavdtRTMk64MjpIRaUtxu3n7 m87VJYf0vyYvNdeIT4OzKzXpWO8p4C3HILH+5EvSsdgYtFAubmeAPMrcpm5UTM0g K2eem8VW91vXHbOKo5zRLkhdrCp7gCzvp08/fPYr6fQlf3P4NK43NQmOdhjrfgqk lcJwhavFUOl+GVs7QF6ILoyADqtTSKrGcj6+yGWWXi9PqvpmhyYLrYJ6dnpuDf8l KMu95jsxdxExRYSyCirtY1b4K2Oxx1aMfQgCEZuSgSPNbopHA8bf/i/9plPa6vRY OwcjZ/9vOwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFLr354HIwqMFCKGcS53k0KO7 udEqMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyMTQ5OTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScwAwDQYJKoZI hvcNAQELBQADggEBAHe/iBoMSZwnTvgSk++aYZNdJuH7XGLgiIcfjECg7I/bL3QM iBICTrqD4B0kpBBrFThrZURTF2ny+Fsi8JZ/M9a4HwwbiIosb4TfhUiqynqj8qKC L8hGUx74wDX1YRScjs2gRznAOY+H2CyhT/zojpPB1zmm+l44i7kaY7/2+fOzBjg4 XfxCrmOIgd7v1VGAeIXZSuLUa4wKUNH/on4qdAShsUuDipFEFmajq6HJn63GMmRy hTC/RPvixMRCy5l8OrAsD8w5I/TNESPAFE86EuzM0tpCDtgGYa9FVFMTgkD3kyFb vuA0nLCpghuTd676eFbdeUAfBbIp3dji67pNPXs= -----END CERTIFICATE-----Generated at Sun Feb 16 20:20:21 2025 by rpki-client