$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400960.roa File: AS400960.roa (raw, json) Hash identifier: DT7NRh6bZWj2q0xp15C+Tkbe2tAmY90lV9DkiReySbo= Subject key identifier: BD:1A:61:F9:B1:B7:24:48:74:6A:31:E3:18:0A:A0:5E:16:7D:9F:11 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 04AD97C56B60375D0DA4A7D5BEE9CA8A8F0EB156 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400960.roa Signing time: Fri 12 Apr 2024 01:36:12 +0000 ROA not before: Fri 12 Apr 2024 01:31:12 +0000 ROA not after: Fri 11 Apr 2025 01:36:12 +0000 asID: 400960 IP address blocks: 2602:fed2:708f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 13:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ad:97:c5:6b:60:37:5d:0d:a4:a7:d5:be:e9:ca:8a:8f:0e:b1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Apr 12 01:31:12 2024 GMT Not After : Apr 11 01:36:12 2025 GMT Subject: CN=BD1A61F9B1B72448746A31E3180AA05E167D9F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:42:a4:11:e0:a2:8c:80:e3:8a:cc:15:1d: 1a:06:78:84:8d:af:06:7a:cf:6e:99:4e:69:c0:24: 6b:a2:23:b9:8a:e2:06:b1:db:b3:d9:c5:4e:27:d9: c0:77:73:ab:34:94:4a:b8:6f:f1:b4:cd:e5:dc:fd: 8e:81:71:5f:99:d9:6e:65:12:98:75:18:2a:af:50: 26:7d:d2:d4:eb:98:23:a4:95:89:5f:0e:c3:52:dc: 4d:05:ec:b1:63:ed:b6:ca:00:f5:0f:c4:f0:d1:74: 14:ad:33:9a:62:6e:41:10:d8:e2:03:00:a8:75:d8: 88:e2:06:91:f7:f0:34:1a:c1:19:38:9b:60:10:7f: 09:01:63:cc:4c:5f:81:eb:e1:75:73:15:af:bb:0f: 0d:92:2f:cd:56:e2:ba:86:f6:b5:33:26:48:ec:59: b1:a6:9b:d1:8f:ac:7e:f4:37:f8:85:b5:97:ef:ee: 1f:26:87:0c:b1:8f:4c:0d:05:27:e3:c2:09:00:0c: 58:04:82:6a:79:07:f1:a7:57:77:4f:a9:a6:b3:37: 5c:a4:ef:bf:4b:36:a0:2d:bd:97:03:0b:62:5b:59: f4:56:c4:77:26:f2:52:ef:6a:71:9b:3b:4b:28:35: 65:20:ab:6e:74:08:5f:03:45:52:9f:ee:e9:e8:4b: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:61:F9:B1:B7:24:48:74:6A:31:E3:18:0A:A0:5E:16:7D:9F:11 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:708f::/48 Signature Algorithm: sha256WithRSAEncryption 9a:98:fe:2a:40:41:24:a6:2a:85:42:6b:b5:11:db:22:d9:c9: ca:19:d4:6b:e3:3b:10:a1:19:2b:4d:e0:fb:5e:7f:2e:38:92: 20:b5:1b:a4:88:3f:72:b0:97:fe:de:8c:66:23:21:2c:a0:0b: 48:9b:90:39:86:b2:24:27:67:a2:2d:4b:34:66:80:27:36:74: 2b:af:a9:07:9a:2c:76:c9:00:23:c1:68:ad:86:53:bf:c7:b8: b6:c7:6a:5d:f4:dd:1a:ec:00:59:ba:c1:60:6f:d8:2d:e1:0c: c2:e5:b8:79:98:e6:1e:74:15:e8:35:14:11:7a:e4:69:f7:7c: 6b:d5:0c:d7:fd:7f:09:ea:2d:f4:1e:ac:87:ef:53:2c:88:57: c5:85:ad:c2:3a:b0:a2:6c:e7:f9:67:a0:79:85:e7:86:a6:45: 88:5d:5d:73:7e:2d:6b:f2:af:ce:11:68:cf:8c:05:6f:da:54: c6:cf:b9:c9:b9:70:23:7b:47:81:c7:5a:3f:3f:b6:58:cd:2e: 9c:53:50:4d:bb:9f:6b:5b:85:14:0e:20:07:48:c3:39:4c:a9: 81:e2:98:cc:01:2e:96:11:19:3f:49:ab:5b:a4:fb:82:95:21: 55:61:fe:41:d3:2e:9c:24:72:eb:ee:6d:37:86:49:78:8a:fe: 23:7f:70:df -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUBK2XxWtgN10NpKfVvunKio8OsVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNDEyMDEzMTEyWhcNMjUwNDExMDEzNjEy WjAzMTEwLwYDVQQDEyhCRDFBNjFGOUIxQjcyNDQ4NzQ2QTMxRTMxODBBQTA1RTE2 N0Q5RjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz9CpBHgooyA 44rMFR0aBniEja8Ges9umU5pwCRroiO5iuIGsduz2cVOJ9nAd3OrNJRKuG/xtM3l 3P2OgXFfmdluZRKYdRgqr1AmfdLU65gjpJWJXw7DUtxNBeyxY+22ygD1D8Tw0XQU rTOaYm5BENjiAwCoddiI4gaR9/A0GsEZOJtgEH8JAWPMTF+B6+F1cxWvuw8Nki/N VuK6hva1MyZI7FmxppvRj6x+9Df4hbWX7+4fJocMsY9MDQUn48IJAAxYBIJqeQfx p1d3T6mmszdcpO+/SzagLb2XAwtiW1n0VsR3JvJS72pxmztLKDVlIKtudAhfA0VS n+7p6EsbZQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFL0aYfmxtyRIdGox4xgKoF4W fZ8RMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVM0MDA5NjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScI8wDQYJKoZI hvcNAQELBQADggEBAJqY/ipAQSSmKoVCa7UR2yLZycoZ1GvjOxChGStN4Ptefy44 kiC1G6SIP3Kwl/7ejGYjISygC0ibkDmGsiQnZ6ItSzRmgCc2dCuvqQeaLHbJACPB aK2GU7/HuLbHal303RrsAFm6wWBv2C3hDMLluHmY5h50Feg1FBF65Gn3fGvVDNf9 fwnqLfQerIfvUyyIV8WFrcI6sKJs5/lnoHmF54amRYhdXXN+LWvyr84RaM+MBW/a VMbPucm5cCN7R4HHWj8/tljNLpxTUE27n2tbhRQOIAdIwzlMqYHimMwBLpYRGT9J q1uk+4KVIVVh/kHTLpwkcuvubTeGSXiK/iN/cN8= -----END CERTIFICATE-----Generated at Fri May 3 11:56:44 2024 by rpki-client on console-fra.rpki-client.org