$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa File: AS400298.roa (raw, json) Hash identifier: Zek4BoMX10PFEg92TfON1129A7zujyyCx4eqh6hffrs= Subject key identifier: 0C:3D:29:C4:8B:F8:37:9C:3A:07:92:25:A2:8B:D4:E5:1E:DB:A0:C3 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 41DFFE0D0EC758D8CEDF66970361C9D7A7AE5A57 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa Signing time: Sat 26 Apr 2025 21:46:42 +0000 ROA not before: Sat 26 Apr 2025 21:41:42 +0000 ROA not after: Sat 25 Apr 2026 21:46:42 +0000 asID: 400298 IP address blocks: 2602:fed2:7081::/48 maxlen: 48 2602:fed2:7086::/48 maxlen: 48 2602:fed2:7089::/48 maxlen: 48 2602:fed2:730e::/48 maxlen: 48 2602:fed2:7e85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 03:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:df:fe:0d:0e:c7:58:d8:ce:df:66:97:03:61:c9:d7:a7:ae:5a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Apr 26 21:41:42 2025 GMT Not After : Apr 25 21:46:42 2026 GMT Subject: CN=0C3D29C48BF8379C3A079225A28BD4E51EDBA0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:93:2b:ce:38:a1:b3:5a:24:66:fd:e0:2b: b8:37:31:78:95:e7:39:3b:2b:ef:fb:0d:42:11:a3: f2:15:1e:1a:14:c0:bc:d6:fb:2b:fc:7b:22:b0:65: 90:8e:72:e6:48:2a:c5:4b:87:27:c8:d0:ee:fb:a5: d3:0d:a9:65:ea:b3:19:74:14:8e:30:bd:8c:f5:58: ea:71:94:25:ee:1d:b0:34:d2:b6:36:66:8a:e7:61: 73:70:4f:25:4e:e1:b3:a5:2f:7c:08:ad:f0:37:f8: de:43:6b:41:48:3a:60:c7:78:7c:7a:b9:62:cc:c7: 87:2d:51:8f:ef:c9:41:13:97:a5:e7:13:f5:d3:02: 95:c3:79:b5:d1:c6:8f:17:4c:80:99:3c:a5:83:6c: 73:21:43:82:af:a7:27:bc:2a:79:1b:30:d7:19:34: 50:20:2d:7c:d3:8d:86:7a:a0:0b:ec:3e:89:f7:18: 29:85:0c:18:19:48:df:ed:09:c5:b7:fe:b0:87:a7: 34:9b:c2:93:d2:29:75:20:cb:4d:b5:b9:87:f3:7d: de:55:f4:36:a5:91:bf:af:15:63:a9:9f:da:fd:16: e0:9d:13:61:06:2c:9a:be:a3:b9:75:c1:28:54:9d: af:ad:74:60:3b:01:5a:0d:36:fe:53:8b:59:dd:2a: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3D:29:C4:8B:F8:37:9C:3A:07:92:25:A2:8B:D4:E5:1E:DB:A0:C3 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7081::/48 2602:fed2:7086::/48 2602:fed2:7089::/48 2602:fed2:730e::/48 2602:fed2:7e85::/48 Signature Algorithm: sha256WithRSAEncryption 75:e4:06:70:06:15:aa:31:d1:60:c7:47:22:e1:39:86:c3:21: 2d:b2:e0:67:a4:77:6e:22:e4:68:c9:f0:ea:63:50:ac:a5:75: ba:60:a2:03:a0:ff:29:06:89:f9:ba:cb:ec:13:e8:c4:07:28: d3:61:9a:7d:9f:8b:fd:97:3d:5d:34:93:83:ee:2d:1a:1d:7b: 48:83:3f:41:66:13:79:96:dd:f1:c9:74:26:6d:c0:8c:43:ab: c5:f3:8e:dd:75:58:50:fc:82:36:43:e2:8d:ec:a5:76:c3:1f: 22:bb:3d:4a:14:06:82:27:aa:c0:02:db:f0:3f:3d:11:c6:5c: 97:80:d1:65:4f:6d:48:09:cc:b2:6b:6b:8f:2d:11:6a:ae:4e: 86:79:17:9a:43:65:d0:fb:13:b2:e0:54:e8:5b:c8:68:ff:11: 3c:a7:21:f1:8a:ef:8b:96:34:b7:ea:a5:f9:4d:f7:4d:65:55: 86:7e:34:aa:4d:b9:4b:13:be:bc:a9:c2:3c:8e:c8:58:bb:ce: 95:e3:bd:d1:ba:a6:79:8c:85:f1:6d:97:39:da:6f:25:7a:fd: f0:28:38:b1:0f:da:52:92:54:2b:c2:b6:5d:80:59:f0:a0:d0: 87:28:a7:18:9e:df:2d:7b:b0:fe:eb:1e:88:27:e4:8e:fb:6b: 4e:d4:a5:d7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUQd/+DQ7HWNjO32aXA2HJ16euWlcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNDI2MjE0MTQyWhcNMjYwNDI1MjE0NjQy WjAzMTEwLwYDVQQDEygwQzNEMjlDNDhCRjgzNzlDM0EwNzkyMjVBMjhCRDRFNTFF REJBMEMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG2TK844obNa JGb94Cu4NzF4lec5Oyvv+w1CEaPyFR4aFMC81vsr/HsisGWQjnLmSCrFS4cnyNDu +6XTDall6rMZdBSOML2M9VjqcZQl7h2wNNK2NmaK52FzcE8lTuGzpS98CK3wN/je Q2tBSDpgx3h8erlizMeHLVGP78lBE5el5xP10wKVw3m10caPF0yAmTylg2xzIUOC r6cnvCp5GzDXGTRQIC18042GeqAL7D6J9xgphQwYGUjf7QnFt/6wh6c0m8KT0il1 IMtNtbmH833eVfQ2pZG/rxVjqZ/a/RbgnRNhBiyavqO5dcEoVJ2vrXRgOwFaDTb+ U4tZ3Sq5ywIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFAw9KcSL+DecOgeSJaKL1OUe 26DDMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVM0MDAyOTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MDMEAgACMC0DBwAmAv7ScIEDBwAmAv7S cIYDBwAmAv7ScIkDBwAmAv7Scw4DBwAmAv7SfoUwDQYJKoZIhvcNAQELBQADggEB AHXkBnAGFaox0WDHRyLhOYbDIS2y4Gekd24i5GjJ8OpjUKyldbpgogOg/ykGifm6 y+wT6MQHKNNhmn2fi/2XPV00k4PuLRode0iDP0FmE3mW3fHJdCZtwIxDq8Xzjt11 WFD8gjZD4o3spXbDHyK7PUoUBoInqsAC2/A/PRHGXJeA0WVPbUgJzLJra48tEWqu ToZ5F5pDZdD7E7LgVOhbyGj/ETynIfGK74uWNLfqpflN901lVYZ+NKpNuUsTvryp wjyOyFi7zpXjvdG6pnmMhfFtlznabyV6/fAoOLEP2lKSVCvCtl2AWfCg0Icopxie 3y17sP7rHogn5I77a07Updc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:38 2025 by rpki-client