$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: E3KTBxaPs3oHFmTaB3/Szaywy6IrfP8yEefF17l1ujk= Subject key identifier: 73:97:A1:78:1A:87:FB:57:3C:5C:84:A4:82:B5:30:88:0E:FD:6C:7A Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 13D23020EC97FA8E122D543AECE21C77B2DC62EF Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa Signing time: Wed 26 Feb 2025 00:37:34 +0000 ROA not before: Wed 26 Feb 2025 00:32:34 +0000 ROA not after: Wed 25 Feb 2026 00:37:34 +0000 asID: 20473 IP address blocks: 2602:fed2:710e::/48 maxlen: 48 2602:fed2:710f::/48 maxlen: 48 2602:fed2:7110::/48 maxlen: 48 2602:fed2:719a::/48 maxlen: 48 2602:fed2:719c::/48 maxlen: 48 2602:fed2:719e::/48 maxlen: 48 2602:fed2:730d::/48 maxlen: 48 2602:fed2:7316::/48 maxlen: 48 2602:fed2:731c::/48 maxlen: 48 2602:fed2:7e08::/48 maxlen: 48 2602:fed2:7e81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 11:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d2:30:20:ec:97:fa:8e:12:2d:54:3a:ec:e2:1c:77:b2:dc:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Feb 26 00:32:34 2025 GMT Not After : Feb 25 00:37:34 2026 GMT Subject: CN=7397A1781A87FB573C5C84A482B530880EFD6C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:17:ca:f3:f2:32:43:3b:f2:31:4b:68:8d: dc:af:3a:0f:6d:d5:a5:56:df:e4:0b:22:4a:68:6d: c6:4e:ba:b0:b6:39:24:e6:13:df:44:0a:19:c2:51: d9:9e:eb:e9:8d:f0:df:ba:29:9e:f0:49:f9:db:cf: 5d:c4:21:b7:32:6a:22:8a:6f:82:5d:aa:ca:a1:bb: 5e:8b:c2:de:58:e4:d7:56:c2:16:dc:f9:73:31:a2: c9:c3:62:bd:c1:97:3f:60:e3:7e:b0:cc:80:0e:99: 0c:d4:9e:a9:a5:ce:66:3a:33:bf:4a:8f:bd:ae:75: 3d:5b:2a:57:88:27:75:90:7a:dc:5b:5c:35:37:3e: a7:84:97:7b:9b:03:60:e3:67:b0:5a:69:2d:a9:a2: 1e:6b:21:c7:33:97:dc:18:b7:ff:79:32:59:f3:62: 3b:97:70:2f:dc:91:3b:9c:dc:91:53:97:6a:b2:7b: ba:6f:03:75:07:7c:72:95:38:6b:0a:e0:c7:16:63: 0a:dc:95:89:e2:11:79:db:41:cf:66:97:f4:49:6c: 87:a8:99:68:0b:54:24:50:c0:f2:76:bb:0f:93:12: 4a:03:1b:05:34:77:59:a0:db:86:00:5b:97:fd:24: b2:a1:c7:75:4b:91:92:da:7c:4e:2a:7a:cc:0b:43: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:97:A1:78:1A:87:FB:57:3C:5C:84:A4:82:B5:30:88:0E:FD:6C:7A X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:710e::-2602:fed2:7110:ffff:ffff:ffff:ffff:ffff 2602:fed2:719a::/48 2602:fed2:719c::/48 2602:fed2:719e::/48 2602:fed2:730d::/48 2602:fed2:7316::/48 2602:fed2:731c::/48 2602:fed2:7e08::/48 2602:fed2:7e81::/48 Signature Algorithm: sha256WithRSAEncryption 9d:f5:d9:62:d3:20:38:4e:f6:4a:97:b9:e5:70:82:3c:4f:93: 22:b0:b7:6d:66:56:1a:45:4c:18:3d:b0:a3:cd:a7:e6:69:8b: 30:a1:9b:76:ed:cf:42:1c:e2:68:03:d8:cc:71:26:80:56:72: 4d:d4:18:a3:48:91:c6:ed:6e:a6:b4:70:96:0d:c5:a2:f6:ad: 90:f5:e0:41:01:bb:02:05:4d:c7:30:94:a7:47:19:60:e9:aa: c3:a2:9b:a6:37:c8:d4:d7:95:6b:05:47:b8:b7:e1:c1:68:1d: 3f:69:96:b5:8c:35:83:9e:62:59:6b:43:8a:e2:df:de:a7:5c: f9:a9:77:6b:2b:7f:29:1c:87:c4:ae:32:1b:b4:2e:22:f4:42: b7:95:27:4c:83:3d:3e:ea:ad:11:70:bb:58:c1:70:83:4e:37: a7:a2:9e:6e:3e:f3:c3:de:be:00:6b:1c:69:89:63:d9:0d:bf: 2d:57:2a:11:4f:b5:92:db:46:d6:2b:02:80:be:79:7c:ce:bf: e8:ef:bc:15:6d:f4:46:59:62:05:e1:d6:2e:d9:a2:7a:a8:8e: a4:18:0d:c3:92:99:3a:1d:d6:e6:3f:c0:fd:9d:7c:41:96:ba: 18:e8:5f:1d:09:bf:03:47:a9:05:06:18:93:0d:b4:48:ab:ae: 1c:0a:77:64 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUE9IwIOyX+o4SLVQ67OIcd7LcYu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMjI2MDAzMjM0WhcNMjYwMjI1MDAzNzM0 WjAzMTEwLwYDVQQDEyg3Mzk3QTE3ODFBODdGQjU3M0M1Qzg0QTQ4MkI1MzA4ODBF RkQ2QzdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1gXyvPyMkM7 8jFLaI3crzoPbdWlVt/kCyJKaG3GTrqwtjkk5hPfRAoZwlHZnuvpjfDfuime8En5 289dxCG3Mmoiim+CXarKobtei8LeWOTXVsIW3PlzMaLJw2K9wZc/YON+sMyADpkM 1J6ppc5mOjO/So+9rnU9WypXiCd1kHrcW1w1Nz6nhJd7mwNg42ewWmktqaIeayHH M5fcGLf/eTJZ82I7l3Av3JE7nNyRU5dqsnu6bwN1B3xylThrCuDHFmMK3JWJ4hF5 20HPZpf0SWyHqJloC1QkUMDydrsPkxJKAxsFNHdZoNuGAFuX/SSyocd1S5GS2nxO KnrMC0PH+QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHOXoXgah/tXPFyEpIK1MIgO /Wx6MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyMDQ3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjB1BggrBgEFBQcBBwEB/wRmMGQwYgQCAAIwXDASAwcBJgL+0nEOAwcAJgL+ 0nEQAwcAJgL+0nGaAwcAJgL+0nGcAwcAJgL+0nGeAwcAJgL+0nMNAwcAJgL+0nMW AwcAJgL+0nMcAwcAJgL+0n4IAwcAJgL+0n6BMA0GCSqGSIb3DQEBCwUAA4IBAQCd 9dli0yA4TvZKl7nlcII8T5MisLdtZlYaRUwYPbCjzafmaYswoZt27c9CHOJoA9jM cSaAVnJN1BijSJHG7W6mtHCWDcWi9q2Q9eBBAbsCBU3HMJSnRxlg6arDopumN8jU 15VrBUe4t+HBaB0/aZa1jDWDnmJZa0OK4t/ep1z5qXdrK38pHIfErjIbtC4i9EK3 lSdMgz0+6q0RcLtYwXCDTjenop5uPvPD3r4AaxxpiWPZDb8tVyoRT7WS20bWKwKA vnl8zr/o77wVbfRGWWIF4dYu2aJ6qI6kGA3Dkpk6HdbmP8D9nXxBlroY6F8dCb8D R6kFBhiTDbRIq64cCndk -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:23 2025 by rpki-client