$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa File: AS138166.roa (raw, json) Hash identifier: KDOftSlvb+Dl3hcZUK2degbIFw9gxpb2SU0FZm+WuiM= Subject key identifier: 22:F5:71:E4:54:BA:4F:DC:18:85:36:3C:B5:97:A7:04:3C:AF:0F:A6 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 0625FAEEBFF5A0EFBF1800E18A4FE56477E419D1 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa Signing time: Sun 23 Mar 2025 17:39:28 +0000 ROA not before: Sun 23 Mar 2025 17:34:28 +0000 ROA not after: Sun 22 Mar 2026 17:39:28 +0000 asID: 138166 IP address blocks: 2602:fed2:710f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 11:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:25:fa:ee:bf:f5:a0:ef:bf:18:00:e1:8a:4f:e5:64:77:e4:19:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Mar 23 17:34:28 2025 GMT Not After : Mar 22 17:39:28 2026 GMT Subject: CN=22F571E454BA4FDC1885363CB597A7043CAF0FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:7c:da:45:4b:89:1f:d2:d3:82:b9:ed:a2: f0:c4:86:08:bb:77:90:5f:81:5b:f9:7e:df:90:8a: a0:63:fc:92:9d:1b:17:19:12:67:43:7c:c2:ed:4c: 94:d6:5d:9f:d5:1d:f9:05:6a:4b:5a:d1:06:90:68: f0:f1:ac:aa:55:ae:e6:ff:74:33:bc:e8:1e:87:6c: 1e:24:00:9f:5f:8c:89:15:3c:93:07:22:5e:1a:74: f2:ea:d3:61:27:29:d9:40:94:fc:ca:74:e1:02:4b: 16:0b:32:3e:56:8b:b0:83:40:08:19:07:59:05:43: c1:93:eb:55:18:7c:99:3a:7f:19:1a:1b:7f:9d:af: 1c:0d:08:26:97:62:3b:80:c9:e9:02:02:b1:1e:67: 63:3f:d7:b8:f3:6a:4a:ee:85:7a:4a:a5:6b:24:73: d3:37:bd:42:82:21:07:9d:04:9e:8c:60:3f:0e:ed: 15:9f:91:b7:1b:51:86:2c:53:38:41:0b:2b:f9:bc: 0b:57:b3:4b:a6:d8:44:97:31:da:59:cc:ae:a0:a2: 83:25:05:46:82:c5:0d:28:1a:01:66:b2:76:ae:01: d0:aa:10:c3:d3:3b:96:1d:de:0c:2a:1d:19:1c:05: 0a:dc:25:ff:0d:45:c1:e5:ef:a6:f5:af:42:8a:02: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F5:71:E4:54:BA:4F:DC:18:85:36:3C:B5:97:A7:04:3C:AF:0F:A6 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:710f::/48 Signature Algorithm: sha256WithRSAEncryption 17:f7:22:42:78:47:bf:ff:72:1e:c0:15:bc:8f:e9:a6:6b:31: 36:22:f2:64:f5:88:2c:eb:21:2c:97:0a:ec:77:f2:64:27:6b: 8d:74:f8:25:12:00:7f:77:9b:c3:59:7a:d5:9c:0f:f7:51:5f: d5:0e:89:8c:11:8e:7f:5b:80:89:38:b6:4d:dc:e8:94:fc:57: a6:95:75:25:97:53:67:6c:98:24:35:aa:41:46:5a:f7:c1:dd: 09:17:e5:4d:35:a9:c2:00:f7:20:7f:d7:99:9c:84:d5:ed:f8: 12:4b:ab:9d:50:7f:7c:0e:f0:de:56:46:eb:0f:26:af:40:36: 46:08:2b:a3:ce:11:c1:45:f6:fc:31:c4:f1:10:32:7e:7e:8a: f9:17:bf:96:d9:ed:17:5d:65:92:0e:d1:2f:cd:53:91:3b:ff: a0:af:15:a2:d9:71:1e:c6:54:16:08:9e:ee:17:66:5b:33:bc: 9c:7b:3f:b3:26:8d:38:84:fb:b3:2e:29:19:7f:15:3c:46:41: 56:0f:ff:3b:c2:ec:e4:32:aa:45:e4:61:61:00:5f:95:42:18: f1:a5:ee:61:b8:2d:d1:7e:10:46:15:44:1c:14:9c:8b:c3:62: 67:8e:68:4e:40:9b:5d:27:56:00:3b:b5:52:58:7b:6b:3e:ae: a3:c6:1e:6e -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUBiX67r/1oO+/GADhik/lZHfkGdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMzIzMTczNDI4WhcNMjYwMzIyMTczOTI4 WjAzMTEwLwYDVQQDEygyMkY1NzFFNDU0QkE0RkRDMTg4NTM2M0NCNTk3QTcwNDND QUYwRkE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMh82kVLiR/S 04K57aLwxIYIu3eQX4Fb+X7fkIqgY/ySnRsXGRJnQ3zC7UyU1l2f1R35BWpLWtEG kGjw8ayqVa7m/3QzvOgeh2weJACfX4yJFTyTByJeGnTy6tNhJynZQJT8ynThAksW CzI+Vouwg0AIGQdZBUPBk+tVGHyZOn8ZGht/na8cDQgml2I7gMnpAgKxHmdjP9e4 82pK7oV6SqVrJHPTN71CgiEHnQSejGA/Du0Vn5G3G1GGLFM4QQsr+bwLV7NLpthE lzHaWcyuoKKDJQVGgsUNKBoBZrJ2rgHQqhDD0zuWHd4MKh0ZHAUK3CX/DUXB5e+m 9a9CigI1xQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFCL1ceRUuk/cGIU2PLWXpwQ8 rw+mMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMxMzgxNjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScQ8wDQYJKoZI hvcNAQELBQADggEBABf3IkJ4R7//ch7AFbyP6aZrMTYi8mT1iCzrISyXCux38mQn a410+CUSAH93m8NZetWcD/dRX9UOiYwRjn9bgIk4tk3c6JT8V6aVdSWXU2dsmCQ1 qkFGWvfB3QkX5U01qcIA9yB/15mchNXt+BJLq51Qf3wO8N5WRusPJq9ANkYIK6PO EcFF9vwxxPEQMn5+ivkXv5bZ7RddZZIO0S/NU5E7/6CvFaLZcR7GVBYInu4XZlsz vJx7P7MmjTiE+7MuKRl/FTxGQVYP/zvC7OQyqkXkYWEAX5VCGPGl7mG4LdF+EEYV RBwUnIvDYmeOaE5Am10nVgA7tVJYe2s+rqPGHm4= -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:39 2025 by rpki-client