
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: Lnx9DwafiDrG260lsmy3XvsSDgDp0Kyb8pis25MWHkE=
Subject key identifier: 4A:6A:D3:AD:76:56:00:53:A6:E9:6B:1D:92:24:AB:AC:B6:14:F7:AB
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 7D12734579A5E2A20684141872D75B3D8ED13C3A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
Signing time: Sat 19 Sep 2026 17:06:10 +0000
ROA not before: Sat 19 Sep 2026 17:01:10 +0000
ROA not after: Sat 18 Sep 2027 17:06:10 +0000
asID: 23470
IP address blocks: 2602:fed2:7189::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:12:73:45:79:a5:e2:a2:06:84:14:18:72:d7:5b:3d:8e:d1:3c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Sep 19 17:01:10 2026 GMT
Not After : Sep 18 17:06:10 2027 GMT
Subject: CN=4A6AD3AD76560053A6E96B1D9224ABACB614F7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:b5:83:65:af:ff:66:db:5b:5f:7c:ef:69:
45:2f:20:fd:5e:24:b7:b6:0f:6c:6c:ab:1a:01:7a:
b4:e2:8b:2e:82:ce:5c:3c:39:45:9e:61:dc:2d:2b:
c0:e6:0c:40:1c:4e:ff:8e:b6:8c:f6:79:3d:17:92:
b5:8c:1f:af:24:1b:96:0b:c2:12:09:22:d2:52:06:
1d:3e:9c:34:ef:b7:c1:b6:25:a8:e2:3a:be:91:a1:
3b:3f:ef:3d:5d:6c:22:1f:6f:b8:63:b8:c0:0e:c4:
6d:08:d2:eb:78:ba:87:71:ed:6a:87:6d:5f:1f:37:
0f:d5:ba:2e:f3:3c:5f:37:13:e1:a4:ad:c4:e1:49:
72:80:83:7d:f8:8b:4d:73:c7:62:34:3a:d8:d1:6a:
fe:a5:75:3b:d6:56:7a:37:e6:5e:00:bd:6c:15:0a:
f6:87:e3:eb:34:fb:22:7f:d1:7d:7f:7c:07:6e:9f:
65:2a:8b:83:5f:f3:b3:11:93:60:d1:de:42:b1:4d:
ac:66:7b:a3:20:2a:c7:f1:2b:3e:4f:57:9f:a3:f8:
d1:49:18:48:60:f5:2a:0b:29:6c:7c:6a:81:1c:b4:
70:92:3a:1b:da:9e:14:69:e7:3c:17:0c:35:f8:a3:
c1:1b:e8:0c:ee:3e:d3:14:49:29:d8:61:32:c9:52:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:D3:AD:76:56:00:53:A6:E9:6B:1D:92:24:AB:AC:B6:14:F7:AB
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7189::/48
Signature Algorithm: sha256WithRSAEncryption
6a:84:18:32:ab:3a:65:00:76:5e:cf:4f:94:80:b3:a3:a9:d3:
66:58:d2:40:3a:7e:32:c6:3b:0d:5b:67:30:17:c0:10:9d:0d:
31:22:70:06:33:8d:42:8d:b1:4c:04:78:5f:47:07:c1:b7:d5:
9a:cf:10:11:f3:68:d7:f4:33:22:31:2e:84:6c:99:1d:b3:6f:
0e:d9:fd:36:c5:8a:1a:de:d8:7b:45:7c:82:1b:2a:38:a6:99:
a5:f7:bf:64:61:15:26:9c:0a:25:27:1c:50:de:c8:22:b4:2b:
15:40:52:85:13:a3:aa:ac:01:c2:c8:82:4d:ed:2d:9c:82:a7:
c4:d9:e5:5f:8b:c1:38:56:ba:89:cd:c0:cd:4b:74:93:53:eb:
68:6b:df:d2:24:e7:af:7e:6e:93:ef:0b:4d:4a:c2:b9:f2:f4:
0b:95:40:4d:89:4b:aa:71:af:d0:aa:13:35:4e:01:ff:d5:fa:
4f:53:4a:19:a1:55:36:23:5a:fe:54:73:a6:cf:86:e9:24:91:
97:81:e9:e0:0e:e9:7c:94:22:27:ca:55:dd:6f:4e:ca:62:8a:
2f:02:e2:86:f7:6e:9d:73:30:be:5d:fb:8e:5f:05:d7:6b:79:
17:70:c9:67:b4:e8:dc:af:83:09:32:0a:54:fd:54:d6:4f:e3:
6e:6a:ad:7e
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUfRJzRXml4qIGhBQYctdbPY7RPDowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwOTE5MTcwMTEwWhcNMjcwOTE4MTcwNjEw
WjAzMTEwLwYDVQQDEyg0QTZBRDNBRDc2NTYwMDUzQTZFOTZCMUQ5MjI0QUJBQ0I2
MTRGN0FCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pi1g2Wv/2bb
W19872lFLyD9XiS3tg9sbKsaAXq04osugs5cPDlFnmHcLSvA5gxAHE7/jraM9nk9
F5K1jB+vJBuWC8ISCSLSUgYdPpw077fBtiWo4jq+kaE7P+89XWwiH2+4Y7jADsRt
CNLreLqHce1qh21fHzcP1bou8zxfNxPhpK3E4UlygIN9+ItNc8diNDrY0Wr+pXU7
1lZ6N+ZeAL1sFQr2h+PrNPsif9F9f3wHbp9lKouDX/OzEZNg0d5CsU2sZnujICrH
8Ss+T1efo/jRSRhIYPUqCylsfGqBHLRwkjob2p4Uaec8Fww1+KPBG+gM7j7TFEkp
2GEyyVIV5wIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFEpq0612VgBTpulrHZIkq6y2
FPerMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMzQ3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJxiTANBgkqhkiG
9w0BAQsFAAOCAQEAaoQYMqs6ZQB2Xs9PlICzo6nTZljSQDp+MsY7DVtnMBfAEJ0N
MSJwBjONQo2xTAR4X0cHwbfVms8QEfNo1/QzIjEuhGyZHbNvDtn9NsWKGt7Ye0V8
ghsqOKaZpfe/ZGEVJpwKJSccUN7IIrQrFUBShROjqqwBwsiCTe0tnIKnxNnlX4vB
OFa6ic3AzUt0k1PraGvf0iTnr35uk+8LTUrCufL0C5VATYlLqnGv0KoTNU4B/9X6
T1NKGaFVNiNa/lRzps+G6SSRl4Hp4A7pfJQiJ8pV3W9OymKKLwLihvdunXMwvl37
jl8F12t5F3DJZ7To3K+DCTIKVP1U1k/jbmqtfg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:24:45 2026 by rpki-client