$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS204856.roa File: AS204856.roa (raw, json) Hash identifier: n55/RrEs0Mm1eCETEVJhi9K17a/og/U8qpfAB7fTB/0= Subject key identifier: 90:B4:81:01:A7:16:CF:9C:09:F9:8E:D5:A7:E7:EE:7B:60:F9:CA:19 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 1F8A4E07B50C6A9C5E2C43010A42B66307235303 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS204856.roa Signing time: Tue 04 Nov 2025 16:51:49 +0000 ROA not before: Tue 04 Nov 2025 16:46:49 +0000 ROA not after: Tue 03 Nov 2026 16:51:49 +0000 asID: 204856 IP address blocks: 2602:fed2:7050::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8a:4e:07:b5:0c:6a:9c:5e:2c:43:01:0a:42:b6:63:07:23:53:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Nov 4 16:46:49 2025 GMT Not After : Nov 3 16:51:49 2026 GMT Subject: CN=90B48101A716CF9C09F98ED5A7E7EE7B60F9CA19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:0c:18:aa:bb:23:39:b7:04:8b:ed:76:31: 5b:bc:1f:f7:9a:a9:c5:f5:d5:ef:48:25:78:19:cc: 1e:d7:d0:a7:17:78:b9:69:c1:81:f0:2d:eb:26:e5: ed:79:1c:32:24:73:f1:5f:c2:9e:29:28:2f:5b:26: 36:b6:9a:f8:45:f3:3a:b8:4c:6c:dc:50:b0:7d:a7: 68:70:1b:1d:c5:8c:a7:33:1d:7e:61:04:23:b6:b2: 9a:0c:e8:06:6c:79:a2:a3:f7:c6:3a:27:e1:0e:1b: ca:54:89:a8:76:92:6e:d3:2c:0d:52:d8:9b:6f:8c: ed:42:c3:a7:96:34:f3:74:5e:e2:03:7a:dc:71:06: be:bc:4f:0e:5a:57:55:b1:ca:ba:73:6f:f2:a6:aa: 96:4c:1e:05:bf:50:0a:5a:6b:56:8f:0d:55:4b:38: 1e:7c:d9:5f:08:66:13:d9:93:49:c8:23:fc:84:b1: b2:d7:67:54:aa:55:c4:62:5c:46:38:bf:0b:f3:fb: 2b:27:2c:b9:d3:6e:31:85:2c:16:be:d3:11:7c:80: 71:c8:76:f2:c0:de:69:95:9d:22:f0:e3:fd:ee:2d: e4:f3:85:91:fb:c2:d4:9e:da:4a:0e:a6:58:51:19: e4:8b:7e:56:b6:03:96:59:7d:2a:6b:58:7c:9c:c2: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B4:81:01:A7:16:CF:9C:09:F9:8E:D5:A7:E7:EE:7B:60:F9:CA:19 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS204856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7050::/44 Signature Algorithm: sha256WithRSAEncryption ad:3b:b5:a9:9b:5c:6b:7d:a0:d9:29:1a:8f:95:8c:c8:0a:28: 2b:e6:19:48:77:78:9f:2b:92:5d:f6:cc:0f:de:ce:d9:bd:6c: 2e:7e:61:60:68:9b:46:c9:c9:62:e9:63:78:b6:52:da:24:c0: 6e:e0:61:51:04:36:dc:c2:14:7d:62:5a:05:01:2a:02:db:43: 37:60:ca:be:7d:f0:b0:77:86:75:72:e4:2a:3c:0e:23:ad:f6: 19:fe:57:b2:cd:06:fb:92:9c:7c:8c:bb:90:fb:4a:2f:e4:45: 33:5c:3e:09:5f:ce:82:7f:3a:8b:7e:d9:40:f4:a8:e2:02:ad: b2:d9:35:8e:cd:90:cd:5e:27:bb:13:1e:eb:d2:12:2b:ae:39: 8c:c8:02:17:26:71:61:d3:12:a2:7b:50:a6:b8:e7:1f:21:7d: bc:ee:29:5d:43:3e:25:79:a6:8f:af:b8:ea:f0:09:e8:23:14: 80:c4:8f:42:a6:a0:e0:70:90:e1:18:80:9d:31:63:a6:36:dd: ca:c3:d7:47:33:8a:ac:1d:d4:e2:d3:05:86:ba:38:c7:69:a3: 08:f4:4b:a8:b7:a7:b9:f6:1c:39:08:30:02:c1:e8:d2:16:c0: f0:29:5a:b2:7a:35:c2:c3:12:a9:4d:5f:bc:09:2f:d2:bd:40: 86:d0:2c:e5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUH4pOB7UMapxeLEMBCkK2YwcjUwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUxMTA0MTY0NjQ5WhcNMjYxMTAzMTY1MTQ5 WjAzMTEwLwYDVQQDEyg5MEI0ODEwMUE3MTZDRjlDMDlGOThFRDVBN0U3RUU3QjYw RjlDQTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqEMGKq7Izm3 BIvtdjFbvB/3mqnF9dXvSCV4Gcwe19CnF3i5acGB8C3rJuXteRwyJHPxX8KeKSgv WyY2tpr4RfM6uExs3FCwfadocBsdxYynMx1+YQQjtrKaDOgGbHmio/fGOifhDhvK VImodpJu0ywNUtibb4ztQsOnljTzdF7iA3rccQa+vE8OWldVscq6c2/ypqqWTB4F v1AKWmtWjw1VSzgefNlfCGYT2ZNJyCP8hLGy12dUqlXEYlxGOL8L8/srJyy5024x hSwWvtMRfIBxyHbywN5plZ0i8OP97i3k84WR+8LUntpKDqZYURnki35WtgOWWX0q a1h8nMIaTQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFJC0gQGnFs+cCfmO1afn7ntg +coZMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVMyMDQ4NTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAv7ScFAwDQYJKoZI hvcNAQELBQADggEBAK07tambXGt9oNkpGo+VjMgKKCvmGUh3eJ8rkl32zA/eztm9 bC5+YWBom0bJyWLpY3i2UtokwG7gYVEENtzCFH1iWgUBKgLbQzdgyr598LB3hnVy 5Co8DiOt9hn+V7LNBvuSnHyMu5D7Si/kRTNcPglfzoJ/Oot+2UD0qOICrbLZNY7N kM1eJ7sTHuvSEiuuOYzIAhcmcWHTEqJ7UKa45x8hfbzuKV1DPiV5po+vuOrwCegj FIDEj0KmoOBwkOEYgJ0xY6Y23crD10cziqwd1OLTBYa6OMdpowj0S6i3p7n2HDkI MALB6NIWwPApWrJ6NcLDEqlNX7wJL9K9QIbQLOU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:18:05 2025 by rpki-client