$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa File: AS400298.roa (raw, json) Hash identifier: sQPAhZL7xpgiS8mrXeEwGjdbsfMc6k7zmUzhJWHjUyQ= Subject key identifier: 88:67:D3:B0:50:21:E5:32:47:18:7D:03:09:76:1B:23:B1:3B:4C:45 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 4BEE6A0121BA612445696259810A1DF0A2B718E4 Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa Signing time: Mon 08 Jun 2026 22:21:03 +0000 ROA not before: Mon 08 Jun 2026 22:16:03 +0000 ROA not after: Mon 07 Jun 2027 22:21:03 +0000 asID: 400298 IP address blocks: 2602:fed2:7081::/48 maxlen: 48 2602:fed2:7089::/48 maxlen: 48 2602:fed2:7184::/48 maxlen: 48 2602:fed2:7194::/48 maxlen: 48 2602:fed2:730e::/48 maxlen: 48 2602:fed2:7e85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ee:6a:01:21:ba:61:24:45:69:62:59:81:0a:1d:f0:a2:b7:18:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Jun 8 22:16:03 2026 GMT Not After : Jun 7 22:21:03 2027 GMT Subject: CN=8867D3B05021E53247187D0309761B23B13B4C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:6b:ff:80:da:42:1d:6f:47:82:96:b3:f7: 14:ec:ce:cd:8a:2d:57:98:e5:b5:4b:db:50:19:95: 8f:d5:18:05:b3:ad:be:33:2a:59:03:e1:2f:68:5f: cd:16:17:fa:0b:3c:86:f5:58:c6:b4:c6:1c:45:df: 9e:6c:52:9a:1d:4e:9f:89:eb:9d:b7:98:26:33:b3: cd:bb:40:1b:4e:ec:b7:83:93:28:8d:24:b9:88:c5: 6d:2d:2e:f2:aa:74:33:08:fc:f1:c5:0f:52:11:d2: 1c:6c:6f:b9:93:3b:6f:ac:00:b3:1a:65:0b:a6:91: c9:63:12:b0:50:26:30:aa:e8:90:34:8f:45:c0:77: ff:db:2a:19:98:8c:be:04:5f:3d:34:1f:30:cd:34: 5b:d1:c2:ad:22:6c:60:f9:c0:8e:fb:ce:6e:a4:f1: 65:e5:c0:fe:f7:a5:be:7c:e8:b1:97:2d:64:1d:72: fd:61:dd:c0:01:8a:2b:54:f9:24:21:b1:8f:61:93: 1c:ef:c1:f3:65:f5:17:83:96:13:80:8a:2e:c3:f3: 2a:5b:25:4e:dc:37:7a:bc:ef:27:c5:9e:8c:7d:5e: 20:99:08:e0:f0:13:a7:54:e1:c9:ed:da:dd:90:b1: a7:50:b7:8a:15:be:ce:cf:20:f3:8e:1e:64:80:5e: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:67:D3:B0:50:21:E5:32:47:18:7D:03:09:76:1B:23:B1:3B:4C:45 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7081::/48 2602:fed2:7089::/48 2602:fed2:7184::/48 2602:fed2:7194::/48 2602:fed2:730e::/48 2602:fed2:7e85::/48 Signature Algorithm: sha256WithRSAEncryption 67:34:74:7e:af:76:e5:7d:f9:38:ee:96:4f:e1:42:33:2f:51: 33:b3:0f:ed:75:b3:77:c4:c9:c7:59:c4:a5:2d:78:f9:b6:99: 8d:09:82:fd:8a:dc:a7:e9:e8:a3:86:d4:38:f7:83:b8:d8:ba: 07:f2:6c:6a:52:8b:50:24:d5:66:76:63:6a:86:7d:40:01:5f: b9:6f:3d:c3:33:c0:8b:a7:aa:0d:7d:4f:4c:82:77:73:9e:d7: 79:6e:7c:04:a6:bb:be:5f:54:66:40:75:34:62:94:81:90:02: 80:8c:fb:86:61:ef:fb:01:a5:bf:42:ba:b3:3e:03:be:2b:9d: a7:49:30:34:ab:50:62:c1:00:82:72:15:74:b9:56:f5:8f:60: 2d:a8:7a:82:01:3c:79:02:a0:be:40:34:04:99:cf:98:ba:79: 2d:92:91:b5:21:5b:c3:68:e0:20:35:77:74:27:62:58:e6:1f: 24:e2:ca:a9:dc:21:a1:c8:03:5a:27:d4:43:3e:dc:e0:41:d6: 0b:68:dc:8d:35:02:56:9e:ea:66:c8:da:58:97:e9:43:d7:1b: b6:4a:eb:e5:f9:70:8f:db:dd:ee:20:dd:5a:61:80:11:21:6b: 1d:06:50:9f:f9:09:3e:1a:8b:b6:24:50:35:e6:77:ae:3c:01: 85:35:e7:7d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUS+5qASG6YSRFaWJZgQod8KK3GOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwNjA4MjIxNjAzWhcNMjcwNjA3MjIyMTAz WjAzMTEwLwYDVQQDEyg4ODY3RDNCMDUwMjFFNTMyNDcxODdEMDMwOTc2MUIyM0Ix M0I0QzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9tr/4DaQh1v R4KWs/cU7M7Nii1XmOW1S9tQGZWP1RgFs62+MypZA+EvaF/NFhf6CzyG9VjGtMYc Rd+ebFKaHU6fieudt5gmM7PNu0AbTuy3g5MojSS5iMVtLS7yqnQzCPzxxQ9SEdIc bG+5kztvrACzGmULppHJYxKwUCYwquiQNI9FwHf/2yoZmIy+BF89NB8wzTRb0cKt Imxg+cCO+85upPFl5cD+96W+fOixly1kHXL9Yd3AAYorVPkkIbGPYZMc78HzZfUX g5YTgIouw/MqWyVO3Dd6vO8nxZ6MfV4gmQjg8BOnVOHJ7drdkLGnULeKFb7OzyDz jh5kgF5ZhwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFIhn07BQIeUyRxh9Awl2GyOx O0xFMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVM0MDAyOTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgACMDYDBwAmAv7ScIEDBwAmAv7S cIkDBwAmAv7ScYQDBwAmAv7ScZQDBwAmAv7Scw4DBwAmAv7SfoUwDQYJKoZIhvcN AQELBQADggEBAGc0dH6vduV9+Tjulk/hQjMvUTOzD+11s3fEycdZxKUtePm2mY0J gv2K3Kfp6KOG1Dj3g7jYugfybGpSi1Ak1WZ2Y2qGfUABX7lvPcMzwIunqg19T0yC d3Oe13lufASmu75fVGZAdTRilIGQAoCM+4Zh7/sBpb9CurM+A74rnadJMDSrUGLB AIJyFXS5VvWPYC2oeoIBPHkCoL5ANASZz5i6eS2SkbUhW8No4CA1d3QnYljmHyTi yqncIaHIA1on1EM+3OBB1gto3I01Alae6mbI2liX6UPXG7ZK6+X5cI/b3e4g3Vph gBEhax0GUJ/5CT4ai7YkUDXmd648AYU1530= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:41 2026 by rpki-client