$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa File: AS34924.roa (raw, json) Hash identifier: LwnzfIybMkrUH7FKvMdOaMF9L6bXOl3X5DQUjFKj6Ao= Subject key identifier: 5F:FA:58:48:AC:17:D1:FB:AB:73:25:AC:2A:90:2B:66:A8:51:B2:ED Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 0700FBA43C06C6982359EBA8820506E5723E0387 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa Signing time: Tue 15 Aug 2023 02:00:28 +0000 ROA not before: Tue 15 Aug 2023 01:55:28 +0000 ROA not after: Tue 13 Aug 2024 02:00:28 +0000 asID: 34924 IP address blocks: 2602:fed2:770b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 18:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:00:fb:a4:3c:06:c6:98:23:59:eb:a8:82:05:06:e5:72:3e:03:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Aug 15 01:55:28 2023 GMT Not After : Aug 13 02:00:28 2024 GMT Subject: CN=5FFA5848AC17D1FBAB7325AC2A902B66A851B2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:62:8b:02:02:ca:9f:72:a9:d0:1a:c3:f5: 84:87:40:a1:58:8b:ed:60:ea:c8:dd:db:53:16:4f: 26:f0:f8:56:cc:74:ed:5c:aa:16:33:60:8f:ca:84: d3:ba:d5:a2:b9:f0:40:05:cf:b1:76:ab:a5:98:b0: 69:2b:d1:44:d8:c7:67:29:6f:45:91:71:28:6b:f0: 61:02:34:59:00:25:24:00:65:fd:6c:76:0c:bf:15: 0e:cb:42:b9:10:c0:e0:b7:46:a4:48:da:89:02:75: ab:df:29:61:de:b6:5b:cc:3b:26:7d:55:81:77:7e: 2d:f5:91:db:64:6f:26:3f:e4:08:2c:d9:77:aa:2c: ce:c5:63:b1:f1:ad:31:19:55:79:ee:a5:c8:d1:74: 71:22:76:53:21:37:b9:72:90:6c:99:ee:46:d1:af: 15:ff:aa:c1:a1:46:1c:d3:c1:d6:d4:ca:ce:f9:2e: 65:69:a4:f1:b2:32:6f:f7:e5:ea:b5:79:10:04:dc: 56:1d:14:54:a5:4d:3e:41:84:90:81:5a:4f:b5:bf: fe:cf:26:d9:67:02:08:fe:18:e8:8f:1c:66:7c:20: 52:a6:7f:44:92:e3:59:d4:f1:07:7a:4c:c9:6f:2e: a1:61:f2:75:10:de:a4:db:59:a2:fa:36:e8:43:07: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:58:48:AC:17:D1:FB:AB:73:25:AC:2A:90:2B:66:A8:51:B2:ED X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:770b::/48 Signature Algorithm: sha256WithRSAEncryption 9d:40:6a:26:c9:66:4c:f8:24:ab:4f:90:47:a9:d9:f8:e9:ae: 82:29:b0:03:63:4f:d4:c4:2e:5c:ed:69:48:d9:d6:a1:55:7c: 76:a3:45:b4:76:3c:d7:35:68:70:0b:29:5a:1c:83:a6:bc:18: 79:30:55:48:bb:f7:f7:55:06:fe:64:db:92:dd:55:43:b4:fc: a8:e9:bc:82:fd:a2:12:99:d3:52:05:fc:94:e1:79:bf:77:15: b2:1a:5b:0f:08:78:fc:d8:c6:1f:d0:1b:a2:09:25:4c:b5:b9: 3f:ea:0a:48:06:cc:40:b4:73:e6:df:bf:47:51:7f:ea:67:ce: f8:2d:af:41:a3:82:60:9f:b6:cf:9d:02:a1:43:22:d9:25:b8: 8d:86:15:7c:28:7b:bf:f4:47:7c:ae:08:0e:fa:11:22:db:97: ac:00:d7:46:42:51:a0:28:b6:9f:4f:5d:c9:66:ec:b2:8d:d4: c3:4c:40:ae:0c:97:1f:17:f3:0e:75:0a:a2:9c:79:97:e2:6f: 85:4e:54:ad:ec:7f:ae:28:ff:a6:a8:97:88:d3:e0:6e:5d:f4: 90:55:67:e6:56:61:47:c2:d3:d8:85:8a:21:bc:a9:99:3d:78: 18:a6:ae:15:ee:97:e7:57:8c:7c:9f:fe:94:bc:08:48:81:6a: cb:84:fa:46 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUBwD7pDwGxpgjWeuoggUG5XI+A4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwODE1MDE1NTI4WhcNMjQwODEzMDIwMDI4 WjAzMTEwLwYDVQQDEyg1RkZBNTg0OEFDMTdEMUZCQUI3MzI1QUMyQTkwMkI2NkE4 NTFCMkVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gtiiwICyp9y qdAaw/WEh0ChWIvtYOrI3dtTFk8m8PhWzHTtXKoWM2CPyoTTutWiufBABc+xdqul mLBpK9FE2MdnKW9FkXEoa/BhAjRZACUkAGX9bHYMvxUOy0K5EMDgt0akSNqJAnWr 3ylh3rZbzDsmfVWBd34t9ZHbZG8mP+QILNl3qizOxWOx8a0xGVV57qXI0XRxInZT ITe5cpBsme5G0a8V/6rBoUYc08HW1MrO+S5laaTxsjJv9+XqtXkQBNxWHRRUpU0+ QYSQgVpPtb/+zybZZwII/hjojxxmfCBSpn9EkuNZ1PEHekzJby6hYfJ1EN6k21mi +jboQwdpCQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFF/6WEisF9H7q3MlrCqQK2ao UbLtMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMzNDkyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ3CzANBgkqhkiG 9w0BAQsFAAOCAQEAnUBqJslmTPgkq0+QR6nZ+OmugimwA2NP1MQuXO1pSNnWoVV8 dqNFtHY81zVocAspWhyDprwYeTBVSLv391UG/mTbkt1VQ7T8qOm8gv2iEpnTUgX8 lOF5v3cVshpbDwh4/NjGH9AbogklTLW5P+oKSAbMQLRz5t+/R1F/6mfO+C2vQaOC YJ+2z50CoUMi2SW4jYYVfCh7v/RHfK4IDvoRItuXrADXRkJRoCi2n09dyWbsso3U w0xArgyXHxfzDnUKopx5l+JvhU5Urex/rij/pqiXiNPgbl30kFVn5lZhR8LT2IWK IbypmT14GKauFe6X51eMfJ/+lLwISIFqy4T6Rg== -----END CERTIFICATE-----Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org