$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: JfJrBWS/1oBEuHwrUWr3SdAcHZHQSxqqmBUBIlmysdQ= Subject key identifier: 06:E3:4C:BB:38:E7:1A:5E:21:E0:94:CD:8E:3B:10:A1:BB:6D:03:E3 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 28CF4AF81C2A8559B36516A4431C0B65CC7EAB9F Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa Signing time: Wed 29 Jan 2025 21:07:10 +0000 ROA not before: Wed 29 Jan 2025 21:02:10 +0000 ROA not after: Wed 28 Jan 2026 21:07:10 +0000 asID: 397423 IP address blocks: 2602:fed2:7116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 13:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cf:4a:f8:1c:2a:85:59:b3:65:16:a4:43:1c:0b:65:cc:7e:ab:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Jan 29 21:02:10 2025 GMT Not After : Jan 28 21:07:10 2026 GMT Subject: CN=06E34CBB38E71A5E21E094CD8E3B10A1BB6D03E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:cf:63:af:77:b0:d9:5f:11:16:82:e0:e1: 37:4a:64:7c:84:d9:2b:3c:b0:29:4f:d2:ab:ac:f7: a6:65:6d:5c:86:ef:96:c4:95:14:33:8b:7d:c8:92: 81:92:73:43:ca:ff:ee:2b:b3:dc:39:36:4e:4a:58: ee:cc:77:64:6c:83:89:0b:62:1c:94:ad:8f:6f:1e: f5:53:8d:c1:66:5d:12:e6:14:38:2d:16:e0:43:74: ef:cc:02:39:5c:01:76:62:31:5e:2d:8e:76:b2:0d: 0b:1b:59:98:2f:ef:57:5b:51:60:6c:ea:e0:2a:cc: b7:4e:eb:6d:e5:b1:2a:61:4b:b9:f9:c5:39:69:f2: 3d:6e:1c:6b:1f:bf:e2:b6:41:3a:ff:cf:5e:ea:a3: a8:e7:e6:6f:45:3c:25:cf:bb:db:f2:f0:b4:e7:f1: db:95:b7:25:07:57:50:40:20:fd:05:3d:e5:9f:13: ea:2c:71:26:d8:ee:81:e2:eb:8e:4b:f8:3b:ca:45: 61:02:88:4c:50:35:25:4c:5e:10:08:07:52:a4:1c: 68:97:e0:51:73:ba:73:8c:e0:43:8f:00:66:31:85: 23:a4:63:4c:8c:60:fb:ad:69:be:f7:31:c8:78:76: 4c:2a:14:27:12:5e:a8:e5:b5:d7:41:18:94:4e:36: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E3:4C:BB:38:E7:1A:5E:21:E0:94:CD:8E:3B:10:A1:BB:6D:03:E3 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7116::/48 Signature Algorithm: sha256WithRSAEncryption 3c:11:c9:70:9b:e8:37:57:54:e0:6a:17:bd:b7:09:d5:35:af: b0:94:63:48:2d:a4:86:c7:d2:55:8a:b6:88:16:9b:0b:e1:74: dd:06:1f:1e:b3:88:3c:0f:b6:31:5a:14:f7:7f:31:f7:72:a9: 94:d3:5a:53:01:84:ed:2a:e3:61:b0:d7:a7:51:1a:8c:52:bc: bf:fd:ce:5f:4e:67:65:2b:4e:8d:08:cd:1c:3d:f4:c6:82:8f: 76:9f:36:45:e2:66:e5:cd:ca:44:22:42:3e:9d:da:23:c7:d0: 4e:3e:7a:5b:db:ed:25:21:6a:2b:e7:21:2a:e9:ac:e8:ea:6d: bf:ca:92:ce:c0:5e:95:61:77:68:f3:c2:8b:bc:ca:47:8f:31: 87:ba:5a:6f:32:10:63:8d:36:e5:85:0a:38:85:d5:8d:7b:c7: a4:86:ba:ea:0a:ec:5a:8c:49:25:93:f3:55:19:d5:c1:77:b6: cf:8e:fc:b4:14:9d:13:26:88:74:e2:84:b3:d2:01:87:8b:89: 3b:27:d6:35:0b:de:00:03:39:31:83:54:63:3f:fb:f0:7f:7e: f6:02:73:d2:06:1a:11:7a:f4:ef:6e:79:6b:a1:bc:0c:bd:99: 73:fe:fe:ca:51:a2:1b:d2:8b:83:b6:01:db:02:df:52:30:4f: e2:84:47:df -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUKM9K+BwqhVmzZRakQxwLZcx+q58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMTI5MjEwMjEwWhcNMjYwMTI4MjEwNzEw WjAzMTEwLwYDVQQDEygwNkUzNENCQjM4RTcxQTVFMjFFMDk0Q0Q4RTNCMTBBMUJC NkQwM0UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSDPY693sNlf ERaC4OE3SmR8hNkrPLApT9KrrPemZW1chu+WxJUUM4t9yJKBknNDyv/uK7PcOTZO SljuzHdkbIOJC2IclK2Pbx71U43BZl0S5hQ4LRbgQ3TvzAI5XAF2YjFeLY52sg0L G1mYL+9XW1FgbOrgKsy3Tutt5bEqYUu5+cU5afI9bhxrH7/itkE6/89e6qOo5+Zv RTwlz7vb8vC05/HblbclB1dQQCD9BT3lnxPqLHEm2O6B4uuOS/g7ykVhAohMUDUl TF4QCAdSpBxol+BRc7pzjOBDjwBmMYUjpGNMjGD7rWm+9zHIeHZMKhQnEl6o5bXX QRiUTjYMRwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFAbjTLs45xpeIeCUzY47EKG7 bQPjMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMzOTc0MjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScRYwDQYJKoZI hvcNAQELBQADggEBADwRyXCb6DdXVOBqF723CdU1r7CUY0gtpIbH0lWKtogWmwvh dN0GHx6ziDwPtjFaFPd/MfdyqZTTWlMBhO0q42Gw16dRGoxSvL/9zl9OZ2UrTo0I zRw99MaCj3afNkXiZuXNykQiQj6d2iPH0E4+elvb7SUhaivnISrprOjqbb/Kks7A XpVhd2jzwou8ykePMYe6Wm8yEGONNuWFCjiF1Y17x6SGuuoK7FqMSSWT81UZ1cF3 ts+O/LQUnRMmiHTihLPSAYeLiTsn1jUL3gADOTGDVGM/+/B/fvYCc9IGGhF69O9u eWuhvAy9mXP+/spRohvSi4O2AdsC31IwT+KER98= -----END CERTIFICATE-----Generated at Mon Apr 7 01:08:08 2025 by rpki-client