$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa File: AS26042.roa (raw, json) Hash identifier: lmFfhycxFUFMmxP+VL45O/FCgkcVhKTTIMl2fCnJ31I= Subject key identifier: 92:9C:85:4D:D9:1D:F1:F7:56:83:4E:92:BA:6A:D9:EC:16:12:34:10 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 49A5CD0D2B2ADA42BFB13BEA66FDDFC582236049 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa Signing time: Thu 21 Dec 2023 04:46:33 +0000 ROA not before: Thu 21 Dec 2023 04:41:33 +0000 ROA not after: Thu 19 Dec 2024 04:46:33 +0000 asID: 26042 IP address blocks: 2602:fed2:708a::/48 maxlen: 48 2602:fed2:7114::/48 maxlen: 48 2602:fed2:7128::/48 maxlen: 48 2602:fed2:7185::/48 maxlen: 48 2602:fed2:7e05::/48 maxlen: 48 2602:fed2:7e06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 18:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a5:cd:0d:2b:2a:da:42:bf:b1:3b:ea:66:fd:df:c5:82:23:60:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Dec 21 04:41:33 2023 GMT Not After : Dec 19 04:46:33 2024 GMT Subject: CN=929C854DD91DF1F756834E92BA6AD9EC16123410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:f3:41:f1:c5:19:31:ad:26:5c:bd:98:a7: 80:98:ba:d8:4a:fa:65:f3:dd:12:89:fb:da:d3:28: e9:47:84:2f:85:30:9e:6b:9c:7a:05:6d:88:3c:77: 26:44:c4:73:4e:20:17:58:88:59:99:06:a8:39:6c: 3d:d6:90:50:53:38:57:76:7a:51:bb:01:f3:6f:52: 99:6c:32:0a:3a:14:8c:e6:3b:4b:2c:ca:a7:c2:80: 4f:14:65:8f:19:6a:a3:33:ef:d5:ba:71:2f:82:d9: 75:ff:5e:c1:c6:51:40:31:db:77:be:f8:1f:ea:9c: 81:b3:ab:41:5e:52:b7:d4:f5:fc:4e:91:dc:0f:03: 2a:1b:8e:a8:07:bb:87:97:5f:cf:90:be:55:71:db: e0:9f:57:24:b8:81:1c:27:37:5f:ea:8d:1d:56:e3: 4b:32:f0:30:82:b9:3a:c7:02:1b:2b:a4:05:56:06: 99:e4:56:c8:05:11:fb:e5:aa:25:68:d6:f3:03:50: e9:ab:7c:b7:0c:cf:f8:65:87:e7:a2:bb:96:8c:a7: 27:5f:b0:b3:cb:bc:5c:f3:e1:bc:f5:55:c7:68:ef: a0:8a:6f:49:d4:80:c7:49:eb:53:7a:57:2f:f2:cd: 99:6a:63:ac:54:66:24:43:65:a5:ca:00:81:fb:0d: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9C:85:4D:D9:1D:F1:F7:56:83:4E:92:BA:6A:D9:EC:16:12:34:10 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:708a::/48 2602:fed2:7114::/48 2602:fed2:7128::/48 2602:fed2:7185::/48 2602:fed2:7e05::-2602:fed2:7e06:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 67:ea:f0:60:12:25:72:f2:24:b4:83:54:06:d4:88:73:b8:24: 2e:c5:86:25:c0:6b:38:63:a7:5d:9e:72:97:46:d1:94:4c:32: f6:a9:92:42:5f:9a:75:02:c0:1d:de:81:9e:2d:37:9f:d4:29: 37:29:f0:e5:b8:a2:26:17:21:7e:84:94:40:aa:d7:3b:b5:da: 06:e0:95:9f:7f:56:c6:6d:56:09:89:16:69:9a:88:55:90:0f: 47:61:3c:04:11:cb:1d:75:8d:17:e7:39:57:97:8e:56:c1:df: 4a:bb:81:ad:dd:0e:5c:d1:c7:4f:25:d0:b3:23:3b:7b:46:7d: 14:e8:b1:04:94:83:64:07:ad:d0:25:b3:da:46:03:6f:b0:31: b7:9c:55:a9:aa:6c:9d:8a:e1:60:18:e4:d1:11:43:5e:7e:ce: f9:5c:9e:4e:13:8f:ae:fd:ae:41:70:da:a9:32:a4:d6:8c:1f: 7b:80:1c:31:3a:8d:43:d4:e3:6e:b8:0b:d3:a4:da:7c:5f:81: 46:15:7c:48:59:41:47:27:f6:c7:70:e3:28:a8:78:f0:52:d6: c5:43:4f:be:d6:8d:86:70:8d:53:7f:1e:d6:11:02:9e:71:5c: a2:be:1a:e8:17:fe:8d:ff:d2:ab:e0:7e:f4:a9:7d:09:3b:1e: ae:1b:17:20 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUSaXNDSsq2kK/sTvqZv3fxYIjYEkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMxMjIxMDQ0MTMzWhcNMjQxMjE5MDQ0NjMz WjAzMTEwLwYDVQQDEyg5MjlDODU0REQ5MURGMUY3NTY4MzRFOTJCQTZBRDlFQzE2 MTIzNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHDzQfHFGTGt Jly9mKeAmLrYSvpl890Sifva0yjpR4QvhTCea5x6BW2IPHcmRMRzTiAXWIhZmQao OWw91pBQUzhXdnpRuwHzb1KZbDIKOhSM5jtLLMqnwoBPFGWPGWqjM+/VunEvgtl1 /17BxlFAMdt3vvgf6pyBs6tBXlK31PX8TpHcDwMqG46oB7uHl1/PkL5Vcdvgn1ck uIEcJzdf6o0dVuNLMvAwgrk6xwIbK6QFVgaZ5FbIBRH75aolaNbzA1Dpq3y3DM/4 ZYfnoruWjKcnX7Czy7xc8+G89VXHaO+gim9J1IDHSetTelcv8s2ZamOsVGYkQ2Wl ygCB+w2IfQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFJKchU3ZHfH3VoNOkrpq2ewW EjQQMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyNjA0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBRBggrBgEFBQcBBwEB/wRCMEAwPgQCAAIwOAMHACYC/tJwigMHACYC/tJx FAMHACYC/tJxKAMHACYC/tJxhTASAwcAJgL+0n4FAwcAJgL+0n4GMA0GCSqGSIb3 DQEBCwUAA4IBAQBn6vBgEiVy8iS0g1QG1IhzuCQuxYYlwGs4Y6ddnnKXRtGUTDL2 qZJCX5p1AsAd3oGeLTef1Ck3KfDluKImFyF+hJRAqtc7tdoG4JWff1bGbVYJiRZp mohVkA9HYTwEEcsddY0X5zlXl45Wwd9Ku4Gt3Q5c0cdPJdCzIzt7Rn0U6LEElINk B63QJbPaRgNvsDG3nFWpqmydiuFgGOTREUNefs75XJ5OE4+u/a5BcNqpMqTWjB97 gBwxOo1D1ONuuAvTpNp8X4FGFXxIWUFHJ/bHcOMoqHjwUtbFQ0++1o2GcI1Tfx7W EQKecVyivhroF/6N/9Kr4H70qX0JOx6uGxcg -----END CERTIFICATE-----Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org