$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa File: AS398325.roa (raw, json) Hash identifier: P+2CVgTyd1wYLlipkG6X6Jb2Hto7Z80jLxQLKuJ7IiA= Subject key identifier: 63:35:1A:D1:07:01:BD:28:2F:EC:5D:74:1B:C3:3D:F1:64:27:84:AE Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 1072849228EA58B16692716AD2176413ED385D95 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa Signing time: Tue 16 Jul 2024 02:42:27 +0000 ROA not before: Tue 16 Jul 2024 02:37:27 +0000 ROA not after: Tue 15 Jul 2025 02:42:27 +0000 asID: 398325 IP address blocks: 2602:fed2:7126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:72:84:92:28:ea:58:b1:66:92:71:6a:d2:17:64:13:ed:38:5d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Jul 16 02:37:27 2024 GMT Not After : Jul 15 02:42:27 2025 GMT Subject: CN=63351AD10701BD282FEC5D741BC33DF1642784AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:2d:c6:e4:1e:da:8a:98:5d:b2:2a:79:58: 96:e6:2d:10:61:9a:e1:06:52:8d:2e:92:63:67:6c: 24:a7:42:d8:f5:23:96:fe:71:d7:8b:14:90:b1:dc: bf:12:5d:e1:a4:3b:fc:3b:13:a5:53:fc:d0:ae:4b: 63:17:32:d4:1f:41:ae:0d:ce:f7:1f:5c:43:e3:ae: fa:5e:a5:f9:42:17:48:44:83:b3:a0:9b:94:c9:18: f5:03:98:be:66:a9:0b:12:67:c3:2e:c5:67:a6:43: 66:19:ae:25:68:be:50:38:c6:98:56:3a:08:6a:96: 0d:52:31:f6:16:92:bb:b7:3f:dc:af:75:3a:a8:fd: 2b:a9:32:82:a9:54:e4:ba:af:ba:98:a5:f5:c3:96: 14:e9:51:27:5b:80:22:16:92:79:9c:cf:2a:64:f7: af:4b:2a:d0:18:98:44:6a:b0:66:07:b3:90:58:b7: a4:b5:8d:44:7b:67:0d:e4:d2:1d:d5:21:10:ec:61: 41:7a:f1:9d:9a:e8:8c:80:6f:eb:da:14:6c:65:1e: b3:5c:c0:9f:8a:f7:45:72:22:9d:01:f1:0e:3c:c6: 7d:88:6d:2d:6c:7d:f8:5c:86:cb:99:62:fc:46:48: 81:0e:34:2a:9c:1e:8d:71:b7:5b:b9:04:2d:49:4a: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:35:1A:D1:07:01:BD:28:2F:EC:5D:74:1B:C3:3D:F1:64:27:84:AE X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7126::/48 Signature Algorithm: sha256WithRSAEncryption a4:95:3a:26:91:fe:08:06:f9:4d:db:65:83:85:aa:38:18:1a: 53:80:43:04:1f:d1:a5:2d:84:51:18:05:6a:e2:18:d8:1a:ac: 92:9d:99:77:9c:ba:08:23:6e:7c:f5:b8:1d:96:43:ab:15:8c: 72:c5:78:92:a1:68:76:91:4a:d7:ad:7f:47:c3:aa:9b:c8:fc: 5c:e5:77:4c:21:84:73:71:11:a1:a4:ec:2f:36:56:0c:7f:fe: 1e:87:46:e6:19:3c:59:61:61:37:ab:d3:b2:88:37:fb:ae:fe: d5:9f:eb:cb:fb:0f:15:7f:03:59:0a:4b:9a:d9:b7:3b:f5:dd: f2:02:43:cc:f6:2b:13:63:58:f8:3e:7f:7e:ae:c7:9b:5d:47: 3c:a5:1a:7d:b7:91:25:46:fe:ab:e9:e6:f3:36:eb:a4:d2:85: df:c3:a4:27:2d:08:48:02:35:d0:fc:90:67:b9:ce:dc:63:14: cd:01:60:c2:d3:a5:f6:fb:8e:05:90:3b:65:98:09:ba:09:6b: 41:f9:76:78:32:74:3d:cb:a7:d6:68:92:bc:82:f5:83:5a:3e: de:be:5e:e1:61:4a:c7:d2:49:0d:3a:25:0d:c0:5b:96:b7:4b: bf:ce:36:f2:a5:16:85:78:a3:e2:40:47:a7:1e:38:7c:5e:0e: 67:64:d4:90 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUEHKEkijqWLFmknFq0hdkE+04XZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNzE2MDIzNzI3WhcNMjUwNzE1MDI0MjI3 WjAzMTEwLwYDVQQDEyg2MzM1MUFEMTA3MDFCRDI4MkZFQzVENzQxQkMzM0RGMTY0 Mjc4NEFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTotxuQe2oqY XbIqeViW5i0QYZrhBlKNLpJjZ2wkp0LY9SOW/nHXixSQsdy/El3hpDv8OxOlU/zQ rktjFzLUH0GuDc73H1xD4676XqX5QhdIRIOzoJuUyRj1A5i+ZqkLEmfDLsVnpkNm Ga4laL5QOMaYVjoIapYNUjH2FpK7tz/cr3U6qP0rqTKCqVTkuq+6mKX1w5YU6VEn W4AiFpJ5nM8qZPevSyrQGJhEarBmB7OQWLektY1Ee2cN5NId1SEQ7GFBevGdmuiM gG/r2hRsZR6zXMCfivdFciKdAfEOPMZ9iG0tbH34XIbLmWL8RkiBDjQqnB6Ncbdb uQQtSUq40QIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFGM1GtEHAb0oL+xddBvDPfFk J4SuMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMzOTgzMjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScSYwDQYJKoZI hvcNAQELBQADggEBAKSVOiaR/ggG+U3bZYOFqjgYGlOAQwQf0aUthFEYBWriGNga rJKdmXecuggjbnz1uB2WQ6sVjHLFeJKhaHaRStetf0fDqpvI/Fzld0whhHNxEaGk 7C82Vgx//h6HRuYZPFlhYTer07KIN/uu/tWf68v7DxV/A1kKS5rZtzv13fICQ8z2 KxNjWPg+f36ux5tdRzylGn23kSVG/qvp5vM266TShd/DpCctCEgCNdD8kGe5ztxj FM0BYMLTpfb7jgWQO2WYCboJa0H5dngydD3Lp9ZokryC9YNaPt6+XuFhSsfSSQ06 JQ3AW5a3S7/ONvKlFoV4o+JAR6ceOHxeDmdk1JA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:25:46 2025 by rpki-client