
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS152900.roa
File: AS152900.roa (raw, json)
Hash identifier: zB0Sbg8r473Ia76mnpO8QDt5llrSEYw/OiahARE+9Ls=
Subject key identifier: C6:00:B0:E2:D3:DE:6A:8E:1D:98:C7:80:E2:8A:E6:DF:44:13:5C:BF
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 78000C760F9317A40972C8015C83E26AEA378A73
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS152900.roa
Signing time: Fri 17 Apr 2026 04:06:30 +0000
ROA not before: Fri 17 Apr 2026 04:01:30 +0000
ROA not after: Fri 16 Apr 2027 04:06:30 +0000
asID: 152900
IP address blocks: 2602:fed2:7708::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:00:0c:76:0f:93:17:a4:09:72:c8:01:5c:83:e2:6a:ea:37:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Apr 17 04:01:30 2026 GMT
Not After : Apr 16 04:06:30 2027 GMT
Subject: CN=C600B0E2D3DE6A8E1D98C780E28AE6DF44135CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:9e:61:5a:a6:0a:34:54:04:38:c6:53:58:
19:0f:d8:10:d5:3f:5c:75:81:89:2d:08:70:74:d0:
c7:df:dc:9f:f4:a0:b0:35:d8:3f:d8:20:e9:87:38:
6d:68:e0:70:12:90:68:6f:65:89:2f:51:d0:4b:3d:
83:81:2e:54:7e:89:9d:84:62:5a:96:d7:0f:88:86:
91:bd:ee:47:3c:cc:ac:40:d4:87:a1:4c:3e:82:a2:
66:07:8d:22:03:01:a5:5f:6b:57:b2:44:15:06:6b:
43:d5:b8:ab:07:9e:1e:4f:13:b6:d4:3a:6a:7e:d3:
15:9c:d0:fb:95:87:61:bd:9a:54:c9:e5:c6:c4:3b:
5c:b2:3d:5f:20:1f:f5:bc:e9:91:68:10:b4:cf:6b:
14:29:09:f5:27:6e:c8:e8:50:bf:ef:db:ee:12:aa:
a4:e4:d8:b4:8b:af:09:ee:3f:eb:bf:b9:b1:7a:31:
d7:b8:25:3a:ba:42:cc:1c:99:81:15:2e:77:cb:a0:
33:d1:57:47:3e:8b:84:31:4a:1c:59:b8:88:ab:e0:
c2:07:66:71:ac:1f:fd:01:9d:b9:07:b3:bd:97:35:
9a:0b:d7:18:0a:93:f2:2a:cd:71:ed:6e:93:62:2b:
4d:f7:37:88:1d:51:cb:66:b0:27:d5:bd:d4:8d:d6:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:B0:E2:D3:DE:6A:8E:1D:98:C7:80:E2:8A:E6:DF:44:13:5C:BF
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS152900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7708::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ce:90:4a:f4:a0:d9:7d:1c:9f:d6:6c:b0:2f:6f:33:15:3d:
ba:d0:c9:d8:27:62:e7:78:94:df:14:1f:c2:db:8a:f0:37:78:
3a:75:9b:5d:6c:93:88:44:b9:c0:c1:45:ad:28:9c:e4:12:2c:
96:b1:c3:55:b2:3a:8c:f0:91:37:2a:c8:d7:0a:23:d8:6c:fe:
22:ab:5d:e6:6d:e2:c8:90:6f:bd:20:a3:3b:da:c5:68:72:96:
de:ae:73:36:70:69:de:05:5a:85:75:59:3d:65:05:00:b8:1c:
74:95:18:0f:df:92:82:dc:57:20:b9:0d:ad:46:40:7b:7d:7d:
d0:aa:ab:1f:50:9b:95:c0:7c:1b:56:6f:64:86:d1:0b:14:f1:
9a:eb:f5:da:d1:1c:1f:27:fc:73:43:04:77:4b:ea:42:f5:e6:
5b:1d:cb:78:5b:5b:6e:ef:60:ec:5a:dd:df:09:37:30:de:da:
ff:3a:1f:a9:a0:ea:a0:e6:c6:7c:22:8e:44:df:ad:72:a6:0c:
14:f5:4d:5e:ad:ea:30:18:c5:5c:1a:dc:09:79:a5:6e:6d:af:
00:66:b9:f0:89:19:b8:53:cd:6f:99:a2:09:ff:97:c4:e6:4d:
b5:16:e9:3c:a9:31:e6:be:7e:61:12:03:78:6d:57:44:09:6b:
32:79:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:35:57 2026 by rpki-client