$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa File: AS33696.roa (raw, json) Hash identifier: aVxM8uBE3xa1JcFvy4UPEkjc76LMCOfPvnccLet9/RQ= Subject key identifier: EE:54:5D:CB:9C:8C:5A:87:E5:D1:68:3A:FE:DE:CE:26:69:36:7E:02 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 1A152E0D16187CC228C0053A06FEA418C1C18ED7 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa Signing time: Tue 13 Sep 2022 01:20:20 +0000 ROA not before: Tue 13 Sep 2022 01:15:20 +0000 ROA not after: Tue 12 Sep 2023 01:20:20 +0000 asID: 33696 IP address blocks: 2602:fed2:7195::/48 maxlen: 48 2602:fed2:7307::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Mar 2023 05:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:15:2e:0d:16:18:7c:c2:28:c0:05:3a:06:fe:a4:18:c1:c1:8e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Sep 13 01:15:20 2022 GMT Not After : Sep 12 01:20:20 2023 GMT Subject: CN=EE545DCB9C8C5A87E5D1683AFEDECE2669367E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1c:02:4a:0d:5b:a1:7f:f8:82:34:66:96:ce: 03:3a:ef:6a:04:6c:17:a2:49:db:a6:a7:d5:c9:42: b4:35:bf:c7:86:34:8a:b4:6d:39:63:d1:4c:49:1c: 69:5e:dc:c7:4a:23:61:9b:3a:cf:13:2a:94:5f:91: 69:5a:5d:b3:1c:99:4f:b5:d8:99:1b:51:8f:58:61: e7:f8:f5:42:d7:7c:75:26:f4:bb:1d:dd:05:59:6e: 30:24:62:66:7b:63:79:89:58:e0:2e:b1:57:24:bd: a7:ad:04:f5:f3:7d:b4:07:bf:1d:bb:5d:dc:f7:0d: ff:cb:6c:b7:7c:e0:80:9d:4a:13:f4:ee:a0:c1:e1: c5:a7:d5:af:c6:12:32:bf:2c:ec:51:ab:9a:e5:2d: 93:c5:03:ac:01:d9:d6:c7:22:f4:24:d5:4b:57:8c: 36:7e:6f:40:c7:bf:8e:94:1b:1c:39:e7:91:cf:4d: 1d:18:d3:fe:e1:2b:aa:b2:fd:2b:e0:af:48:55:54: ee:08:e5:9b:8e:0a:cd:7b:51:fe:30:16:f2:85:6d: 1a:ad:f6:61:10:0d:38:10:32:10:3e:88:69:1e:9c: ac:2e:53:fd:cc:5d:c8:6a:b9:99:cd:a9:78:d6:95: 28:29:ac:a1:36:6d:63:d0:4c:11:b6:56:eb:50:58: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:5D:CB:9C:8C:5A:87:E5:D1:68:3A:FE:DE:CE:26:69:36:7E:02 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7195::/48 2602:fed2:7307::/48 Signature Algorithm: sha256WithRSAEncryption 2e:83:50:1b:95:d0:55:1c:ff:8d:0b:8f:1f:c2:a6:94:64:dd: e6:27:ea:5d:4e:3e:fb:c6:b1:16:e9:b5:a3:a4:87:8f:63:c0: cd:e5:2e:ff:c6:72:8f:b8:70:1d:8a:a0:50:8e:32:50:fe:60: bd:07:69:7a:31:cf:d4:90:e3:20:a1:fe:cd:d5:59:a2:7c:23: 6a:66:9f:95:2c:93:4a:be:a5:f1:56:99:22:57:e8:78:f5:64: 96:da:b9:60:40:f4:be:e4:b9:91:e2:da:85:3b:a1:1e:57:90: 5d:36:6a:69:af:fa:fc:44:6f:93:74:9e:c7:ff:56:14:94:2a: a4:f9:cc:1e:e6:74:94:58:ef:fe:fe:fd:a5:0b:df:1b:b2:d6: ce:a2:1a:92:9a:bc:2e:22:5f:67:48:a5:23:56:66:ec:44:58: e4:91:8a:3e:8d:ff:4c:0f:f1:db:4a:0b:21:2f:17:e1:7a:51: 98:88:e7:a0:c6:86:f0:bd:e6:43:9c:d0:46:6d:1f:c0:da:ff: 8b:cf:cf:e4:ee:95:2c:5f:09:b0:4d:58:97:d7:5b:7a:59:06: b7:e5:1f:ff:79:15:51:28:e8:a5:24:ad:4e:16:3f:d9:1a:99: d8:53:88:85:db:fe:4f:f4:45:15:26:f8:6f:d1:c0:30:11:ae: a1:32:1a:e2 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUGhUuDRYYfMIowAU6Bv6kGMHBjtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjIwOTEzMDExNTIwWhcNMjMwOTEyMDEyMDIw WjAzMTEwLwYDVQQDEyhFRTU0NURDQjlDOEM1QTg3RTVEMTY4M0FGRURFQ0UyNjY5 MzY3RTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hwCSg1boX/4 gjRmls4DOu9qBGwXoknbpqfVyUK0Nb/HhjSKtG05Y9FMSRxpXtzHSiNhmzrPEyqU X5FpWl2zHJlPtdiZG1GPWGHn+PVC13x1JvS7Hd0FWW4wJGJme2N5iVjgLrFXJL2n rQT18320B78du13c9w3/y2y3fOCAnUoT9O6gweHFp9WvxhIyvyzsUaua5S2TxQOs AdnWxyL0JNVLV4w2fm9Ax7+OlBscOeeRz00dGNP+4Suqsv0r4K9IVVTuCOWbjgrN e1H+MBbyhW0arfZhEA04EDIQPohpHpysLlP9zF3IarmZzal41pUoKayhNm1j0EwR tlbrUFgnPQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFO5UXcucjFqH5dFoOv7eziZp Nn4CMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMzMzY5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACYC/tJxlQMHACYC/tJz BzANBgkqhkiG9w0BAQsFAAOCAQEALoNQG5XQVRz/jQuPH8KmlGTd5ifqXU4++8ax Fum1o6SHj2PAzeUu/8Zyj7hwHYqgUI4yUP5gvQdpejHP1JDjIKH+zdVZonwjamaf lSyTSr6l8VaZIlfoePVkltq5YED0vuS5keLahTuhHleQXTZqaa/6/ERvk3Sex/9W FJQqpPnMHuZ0lFjv/v79pQvfG7LWzqIakpq8LiJfZ0ilI1Zm7ERY5JGKPo3/TA/x 20oLIS8X4XpRmIjnoMaG8L3mQ5zQRm0fwNr/i8/P5O6VLF8JsE1Yl9dbelkGt+Uf /3kVUSjopSStThY/2RqZ2FOIhdv+T/RFFSb4b9HAMBGuoTIa4g== -----END CERTIFICATE-----Generated at Wed Mar 15 11:52:53 2023 by rpki-client on console-fra.rpki-client.org