$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa File: AS400298.roa (raw, json) Hash identifier: 5CJItGA7X7roiRk1XyuR2RqAIqe8LR1lZVOY/DQN0mo= Subject key identifier: FD:ED:B5:8E:FF:EB:11:E1:F3:3B:0F:2D:BA:6C:AF:A8:09:92:13:53 Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Certificate serial: 58D4E6AD34EF5CFD795A3C2F92EEA4E96DF1668E Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa Signing time: Sat 12 Sep 2026 00:15:34 +0000 ROA not before: Sat 12 Sep 2026 00:10:34 +0000 ROA not after: Sat 11 Sep 2027 00:15:34 +0000 asID: 400298 IP address blocks: 2602:fed2:7081::/48 maxlen: 48 2602:fed2:7089::/48 maxlen: 48 2602:fed2:7184::/48 maxlen: 48 2602:fed2:730e::/48 maxlen: 48 2602:fed2:7e85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d4:e6:ad:34:ef:5c:fd:79:5a:3c:2f:92:ee:a4:e9:6d:f1:66:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855 Validity Not Before: Sep 12 00:10:34 2026 GMT Not After : Sep 11 00:15:34 2027 GMT Subject: CN=FDEDB58EFFEB11E1F33B0F2DBA6CAFA809921353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:20:43:91:9a:83:81:81:02:00:1c:8c:7b: 18:c0:1d:b1:cb:87:04:92:2d:18:e6:4b:36:22:24: 68:35:56:b3:2a:19:13:b7:14:f9:f2:5d:c9:c7:72: c0:13:67:f9:43:d9:cd:65:03:cb:5d:97:70:af:f2: 01:6f:d2:65:bb:6d:a3:23:b6:0b:7b:51:e3:bb:67: df:ab:96:40:4d:88:9d:79:da:75:6b:b4:a7:0a:bf: f8:67:26:64:29:7a:a4:1d:97:ea:31:94:b4:e4:f7: 75:db:86:54:8f:18:a7:38:0b:2e:4f:1f:09:ca:20: 2f:3e:49:ba:d8:ab:f7:13:4f:8f:42:e1:46:36:c8: 15:5a:3f:74:f7:6c:30:92:a2:a0:ba:98:0a:2d:04: 09:d5:44:ec:27:49:60:d1:0a:4d:44:0b:88:71:13: c6:7a:e2:4c:c2:55:72:f2:6c:36:0d:e9:a0:92:78: dc:96:b2:13:d9:15:28:8c:38:93:d2:62:4f:f3:b0: 14:7f:42:42:d4:38:d1:27:39:0d:40:b5:75:2f:57: 17:dc:4a:df:bd:7d:fa:3f:5e:61:83:0a:4f:cc:f6: c6:c0:b9:54:5e:4f:fd:5f:6a:a5:4f:e5:82:cb:65: 20:fd:46:2a:10:bf:20:33:70:eb:89:62:03:f3:e7: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:B5:8E:FF:EB:11:E1:F3:3B:0F:2D:BA:6C:AF:A8:09:92:13:53 X509v3 Authority Key Identifier: keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fed2:7081::/48 2602:fed2:7089::/48 2602:fed2:7184::/48 2602:fed2:730e::/48 2602:fed2:7e85::/48 Signature Algorithm: sha256WithRSAEncryption 00:7c:82:b1:09:92:6f:73:50:f6:16:b6:af:97:29:04:2f:d4: f4:cf:72:a6:ea:03:9d:3c:c6:e8:a2:6a:b6:2d:57:b0:c4:16: 57:68:8b:26:83:03:e1:f2:5f:3b:13:28:a1:6d:51:ef:9c:47: e6:69:73:df:81:66:75:5d:a3:43:13:e7:4b:d3:7e:d5:25:97: 66:6b:3e:a0:e5:51:ec:ac:19:71:2c:f8:f6:52:a2:e8:6d:7e: 68:3c:45:44:70:51:ef:db:35:a0:7e:3c:0c:36:6d:83:1b:71: ca:38:7b:21:9f:66:c7:a1:cd:82:54:8d:70:8e:a5:04:2a:5e: 0f:7c:bc:a9:c8:34:b0:a0:94:d4:cf:a1:94:84:95:9d:c4:3a: 37:70:6f:70:ad:8c:4f:af:a5:38:8a:67:e8:59:c4:ca:c6:96: 56:47:53:75:83:6e:9e:55:fb:81:c5:a3:a0:2f:35:74:43:48: 51:2f:33:dc:f1:e5:bf:e1:1f:5d:19:29:a6:61:90:6f:7e:80: 76:a5:d6:90:1f:39:52:6e:a5:32:58:26:14:70:f3:e9:14:1b: 5f:e8:dc:2b:dd:92:72:e9:eb:31:0a:d0:a1:9d:95:13:50:9c: c6:fe:74:aa:c9:0a:c0:e7:00:67:c6:5a:f0:34:a8:7f:0c:a1: 3d:6a:42:ad -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUWNTmrTTvXP15Wjwvku6k6W3xZo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3 MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwOTEyMDAxMDM0WhcNMjcwOTExMDAxNTM0 WjAzMTEwLwYDVQQDEyhGREVEQjU4RUZGRUIxMUUxRjMzQjBGMkRCQTZDQUZBODA5 OTIxMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lIgQ5Gag4GB AgAcjHsYwB2xy4cEki0Y5ks2IiRoNVazKhkTtxT58l3Jx3LAE2f5Q9nNZQPLXZdw r/IBb9Jlu22jI7YLe1Hju2ffq5ZATYidedp1a7SnCr/4ZyZkKXqkHZfqMZS05Pd1 24ZUjxinOAsuTx8JyiAvPkm62Kv3E0+PQuFGNsgVWj9092wwkqKgupgKLQQJ1UTs J0lg0QpNRAuIcRPGeuJMwlVy8mw2DemgknjclrIT2RUojDiT0mJP87AUf0JC1DjR JzkNQLV1L1cX3ErfvX36P15hgwpPzPbGwLlUXk/9X2qlT+WCy2Ug/UYqEL8gM3Dr iWID8+dmywIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFP3ttY7/6xHh8zsPLbpsr6gJ khNTMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2 ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t L3JlcG8vRlJDLUNBLzAvQVM0MDAyOTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MDMEAgACMC0DBwAmAv7ScIEDBwAmAv7S cIkDBwAmAv7ScYQDBwAmAv7Scw4DBwAmAv7SfoUwDQYJKoZIhvcNAQELBQADggEB AAB8grEJkm9zUPYWtq+XKQQv1PTPcqbqA508xuiiarYtV7DEFldoiyaDA+HyXzsT KKFtUe+cR+Zpc9+BZnVdo0MT50vTftUll2ZrPqDlUeysGXEs+PZSouhtfmg8RURw Ue/bNaB+PAw2bYMbcco4eyGfZsehzYJUjXCOpQQqXg98vKnINLCglNTPoZSElZ3E Ojdwb3CtjE+vpTiKZ+hZxMrGllZHU3WDbp5V+4HFo6AvNXRDSFEvM9zx5b/hH10Z KaZhkG9+gHal1pAfOVJupTJYJhRw8+kUG1/o3CvdknLp6zEK0KGdlRNQnMb+dKrJ CsDnAGfGWvA0qH8MoT1qQq0= -----END CERTIFICATE-----Generated at Sun Sep 20 15:24:42 2026 by rpki-client