
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
File: 32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa (raw, json)
Hash identifier: bkSK4myuXY9Yf0n13iFszkQ2Dc/D26LQA5lsak/gHic=
Subject key identifier: CC:A7:DB:73:DB:F1:78:75:72:8B:8D:DD:25:52:83:09:67:38:3D:6F
Certificate issuer: /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial: 56D6AF6150046D7E48B6258AE9E9C8BC7F66527D
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
Signing time: Sun 20 Sep 2026 01:31:34 +0000
ROA not before: Sun 20 Sep 2026 01:26:34 +0000
ROA not after: Sun 19 Sep 2027 01:31:34 +0000
asID: 215058
IP address blocks: 23.152.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d6:af:61:50:04:6d:7e:48:b6:25:8a:e9:e9:c8:bc:7f:66:52:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Validity
Not Before: Sep 20 01:26:34 2026 GMT
Not After : Sep 19 01:31:34 2027 GMT
Subject: CN=CCA7DB73DBF17875728B8DDD2552830967383D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:1d:b6:07:68:7c:f8:a7:89:b8:e5:08:6f:
74:36:1f:de:42:31:56:1b:d6:66:aa:e1:e1:f1:bf:
e3:65:bf:3d:b9:72:e6:c6:45:4b:27:2e:e2:b9:d7:
c6:53:8a:79:99:ec:07:01:19:54:28:f0:b2:50:7c:
8f:c7:9e:c1:33:d7:d9:9e:77:74:83:de:dc:6b:fe:
5a:e1:53:c6:b0:f7:65:8f:4c:eb:ed:a0:f9:a4:e1:
ff:54:41:4d:63:3e:7c:36:88:ef:2a:4b:98:23:36:
83:27:b4:88:40:34:b1:82:d4:b4:2a:83:31:5f:c5:
d6:2f:21:49:aa:10:b3:70:e6:9b:d0:34:1f:66:d6:
0d:ec:d7:09:40:26:3a:79:6e:ea:df:44:27:be:a2:
4a:16:2b:28:0b:5a:25:8e:37:38:0c:5e:bc:4f:91:
85:48:60:9f:84:db:79:02:72:b2:4b:a9:96:92:97:
1d:0a:b3:bb:ac:57:fc:76:99:a4:5c:71:64:a3:a1:
59:47:ac:f2:79:1d:ff:dd:15:69:89:36:6c:1b:15:
a2:18:2a:bb:43:d6:2f:c5:b1:41:9b:4c:2b:36:26:
f7:5c:98:bd:e7:90:2b:54:f5:3f:56:0a:e5:1f:1f:
01:71:60:41:b3:a4:0a:a5:43:f7:ae:95:36:8e:5c:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:DB:73:DB:F1:78:75:72:8B:8D:DD:25:52:83:09:67:38:3D:6F
X509v3 Authority Key Identifier:
keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.152.225.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f9:86:37:fe:8c:ab:5b:b8:f9:61:b6:6f:3b:85:c4:c5:7f:
36:08:b4:be:90:15:b5:eb:bf:0a:90:5c:d0:6e:67:d1:6e:19:
b1:44:01:1a:01:d3:b6:98:14:ed:da:0e:7c:b9:d6:31:2f:6f:
5e:13:34:53:39:89:21:3d:18:ca:55:b7:8d:ea:74:7f:92:8e:
4a:15:4c:5f:d9:39:d3:0a:94:2d:15:6b:55:27:47:68:18:68:
6b:ec:ce:32:7e:fe:ea:49:e5:1d:f4:54:cc:5d:e0:cf:00:e8:
f7:8b:7e:19:c1:fc:aa:ed:a3:02:28:fe:83:ea:c7:5f:48:b9:
a8:80:90:7e:4e:86:cf:81:39:72:69:8d:96:66:c2:30:1f:fd:
4b:1d:db:94:08:86:0d:83:50:2a:8f:2d:16:a2:94:a4:64:a9:
c9:0d:92:01:86:10:cf:39:90:74:93:82:dc:aa:75:5c:cd:7e:
ee:11:31:99:9f:34:ae:8b:48:2b:b0:53:9b:62:a3:60:fb:67:
69:db:c3:1b:39:21:37:39:9c:b0:b9:68:03:6e:1e:22:f3:43:
65:e4:43:27:58:71:56:1f:b3:d3:cf:bd:46:c3:82:f7:11:0c:
59:89:52:1e:99:14:02:d8:13:ed:8a:65:63:43:de:38:1d:04:
f8:e9:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:32:45 2026 by rpki-client