$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa File: AS25846.roa (raw, json) Hash identifier: JXHU8bwew/kjF2tlfE0FuVvqMEv6d5PDWgyIaj2pUgQ= Subject key identifier: C7:C2:12:89:C2:75:B9:CF:2D:2A:58:9C:72:61:E7:7C:F7:C3:CB:88 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 3779DBFE89E68FAE29D85D67B8B93A1004C8B94F Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa Signing time: Wed 18 Sep 2024 11:09:39 +0000 ROA not before: Wed 18 Sep 2024 11:04:39 +0000 ROA not after: Wed 17 Sep 2025 11:09:39 +0000 asID: 25846 IP address blocks: 2602:fed2:770a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:79:db:fe:89:e6:8f:ae:29:d8:5d:67:b8:b9:3a:10:04:c8:b9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Sep 18 11:04:39 2024 GMT Not After : Sep 17 11:09:39 2025 GMT Subject: CN=C7C21289C275B9CF2D2A589C7261E77CF7C3CB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:73:78:e9:d1:aa:47:41:3d:ec:0c:7c:b5: c6:bc:84:56:50:56:0a:71:02:f6:8b:40:fd:8e:99: 6b:f8:31:8e:0a:f9:d4:10:f8:0d:df:74:b3:e4:c9: e3:c4:d3:1b:d1:47:49:88:54:44:a5:7c:fa:e0:bb: 90:7c:17:58:08:5b:e8:00:9e:3f:42:6b:c4:73:b0: 70:72:a3:e4:d0:12:98:4d:d1:17:aa:0d:0d:7c:68: c3:41:95:47:82:9e:5c:0f:ee:08:8c:f9:0f:2e:cb: c6:97:be:a8:bb:6c:4a:ff:88:44:c2:f3:8a:4c:0c: 0a:ec:3d:97:fa:fe:f7:00:f3:9a:a0:66:d0:62:ac: 3f:69:d3:98:4b:e2:15:2a:32:1b:fe:e4:c9:c5:b2: 9d:1a:50:69:10:2d:c2:e7:99:63:3e:d5:68:57:4b: 3c:65:2d:20:ac:f9:e1:24:d4:0d:6d:6f:26:97:94: 6c:0c:69:7d:a3:d1:aa:5a:1c:58:ff:aa:06:07:56: 4e:70:23:d7:ea:9e:19:f0:21:c8:b0:ef:9a:b4:60: 0f:b3:0f:1b:fc:f0:55:db:f6:e4:30:d0:90:6f:02: 44:09:23:6f:4d:a7:84:6e:99:93:35:ac:f5:b4:8d: 4f:f7:3c:3e:2f:6f:cf:a4:e5:65:fd:97:71:7c:d5: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:12:89:C2:75:B9:CF:2D:2A:58:9C:72:61:E7:7C:F7:C3:CB:88 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:770a::/48 Signature Algorithm: sha256WithRSAEncryption 4e:60:66:3c:95:60:06:f2:5f:ac:7f:2d:71:30:e5:06:95:36: 08:35:3c:00:c0:bf:b3:d2:fe:fc:fb:36:30:73:c7:a7:ea:1f: 8c:b4:9b:ce:85:56:96:a4:b1:9a:6d:d8:16:b7:db:82:81:58: 5e:43:52:1e:48:73:d7:fb:d9:ee:c3:84:fd:2e:68:7d:2e:58: a2:00:d2:97:bc:4e:b1:cc:5d:44:30:a6:75:4d:2d:a9:9b:f9: 77:b0:3d:2f:f4:28:cb:e1:56:54:e2:f2:1b:8f:40:87:6f:f5: 31:68:47:48:e9:7d:24:e4:84:10:fa:46:b8:99:fb:f9:72:e9: 06:64:36:d1:2f:38:86:b9:c8:8f:08:54:78:74:f2:b7:a6:5a: ec:aa:98:8d:8d:77:2b:6c:90:d8:8e:14:36:37:4a:ad:66:6f: 7f:75:85:d8:36:3c:16:13:43:4c:8f:e6:0e:f2:8d:80:15:ea: 9d:cc:cd:fd:53:0c:5a:7d:4b:8b:06:c9:d3:82:0d:c3:1c:ba: 58:ca:01:69:e1:73:27:15:bb:f8:26:80:3b:59:82:2a:e8:d0: f4:79:c8:4d:d8:61:5e:af:70:24:6b:a0:b6:45:f7:36:71:12: b0:5f:fc:12:22:9d:f0:20:dc:cb:d7:d9:31:7a:db:8d:ce:93: 02:7f:5d:4b -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUN3nb/onmj64p2F1nuLk6EATIuU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwOTE4MTEwNDM5WhcNMjUwOTE3MTEwOTM5 WjAzMTEwLwYDVQQDEyhDN0MyMTI4OUMyNzVCOUNGMkQyQTU4OUM3MjYxRTc3Q0Y3 QzNDQjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLRzeOnRqkdB PewMfLXGvIRWUFYKcQL2i0D9jplr+DGOCvnUEPgN33Sz5MnjxNMb0UdJiFREpXz6 4LuQfBdYCFvoAJ4/QmvEc7BwcqPk0BKYTdEXqg0NfGjDQZVHgp5cD+4IjPkPLsvG l76ou2xK/4hEwvOKTAwK7D2X+v73APOaoGbQYqw/adOYS+IVKjIb/uTJxbKdGlBp EC3C55ljPtVoV0s8ZS0grPnhJNQNbW8ml5RsDGl9o9GqWhxY/6oGB1ZOcCPX6p4Z 8CHIsO+atGAPsw8b/PBV2/bkMNCQbwJECSNvTaeEbpmTNaz1tI1P9zw+L2/PpOVl /ZdxfNV9FQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFMfCEonCdbnPLSpYnHJh53z3 w8uIMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyNTg0Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ3CjANBgkqhkiG 9w0BAQsFAAOCAQEATmBmPJVgBvJfrH8tcTDlBpU2CDU8AMC/s9L+/Ps2MHPHp+of jLSbzoVWlqSxmm3YFrfbgoFYXkNSHkhz1/vZ7sOE/S5ofS5YogDSl7xOscxdRDCm dU0tqZv5d7A9L/Qoy+FWVOLyG49Ah2/1MWhHSOl9JOSEEPpGuJn7+XLpBmQ20S84 hrnIjwhUeHTyt6Za7KqYjY13K2yQ2I4UNjdKrWZvf3WF2DY8FhNDTI/mDvKNgBXq nczN/VMMWn1LiwbJ04INwxy6WMoBaeFzJxW7+CaAO1mCKujQ9HnITdhhXq9wJGug tkX3NnESsF/8EiKd8CDcy9fZMXrbjc6TAn9dSw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:28:52 2025 by rpki-client