
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
File: 32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa (raw, json)
Hash identifier: RdZIckU+ZViteRDUctS/+ypczFtbL9qvcqluM7idNVU=
Subject key identifier: D2:6A:1E:CA:52:93:D0:A7:AD:FF:BB:18:11:1D:D6:80:EE:3D:75:6F
Certificate issuer: /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial: 653C7DF003E34C77B2B4226CD522ABC0623FEFE2
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
Signing time: Sat 03 Oct 2026 20:32:24 +0000
ROA not before: Sat 03 Oct 2026 20:27:24 +0000
ROA not after: Sat 02 Oct 2027 20:32:24 +0000
asID: 215058
IP address blocks: 23.152.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3c:7d:f0:03:e3:4c:77:b2:b4:22:6c:d5:22:ab:c0:62:3f:ef:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Validity
Not Before: Oct 3 20:27:24 2026 GMT
Not After : Oct 2 20:32:24 2027 GMT
Subject: CN=D26A1ECA5293D0A7ADFFBB18111DD680EE3D756F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:95:4e:5e:9c:86:3a:89:da:38:ff:79:22:
29:0b:e1:79:98:a8:60:1e:44:a0:e7:d2:df:17:5a:
19:95:ad:17:06:51:15:f7:bf:13:bf:8d:2e:5a:61:
38:9d:b1:fb:43:5d:29:1e:dc:2d:b6:3c:ee:c1:ba:
cb:10:08:1c:84:5b:27:30:ed:b0:93:41:58:75:62:
bc:c7:ad:0c:65:55:0a:7e:ab:92:8c:d0:c4:cc:9e:
97:16:5d:e9:ae:6b:d5:66:02:5a:c8:8f:87:b9:02:
ca:ed:df:d4:4e:fd:9d:5a:c2:d2:4d:ac:b1:ad:94:
6c:4a:e8:0b:92:8b:fc:a0:08:40:14:4c:26:aa:e0:
14:d3:f3:61:73:c0:27:89:d3:40:fd:54:3d:f8:69:
f2:7b:19:b8:58:81:89:31:86:9b:b4:2d:fa:a3:1c:
39:f2:99:9f:a1:c6:77:14:b5:53:5a:43:00:29:bf:
34:6b:6d:67:a8:c5:ff:55:35:31:00:12:03:42:49:
fa:ae:fb:80:f2:ce:6d:bc:be:39:42:10:5d:15:cd:
f8:26:9f:1d:c6:55:11:ae:75:51:3c:24:f0:31:cd:
9c:41:9c:67:40:cc:3f:3e:ec:a9:55:59:ab:0d:a9:
a5:e6:ad:db:e5:39:a6:37:25:d2:41:94:69:b5:70:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:1E:CA:52:93:D0:A7:AD:FF:BB:18:11:1D:D6:80:EE:3D:75:6F
X509v3 Authority Key Identifier:
keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.152.225.0/24
Signature Algorithm: sha256WithRSAEncryption
44:82:c8:49:02:f3:45:ba:67:44:8b:f1:7a:2f:6b:24:b7:9e:
cf:15:a2:a8:52:e1:ba:ba:97:3e:f9:1c:e6:14:bc:79:02:12:
5b:61:e9:3f:cf:56:a2:b3:0d:1c:e3:2b:92:12:3a:ac:5f:cb:
17:77:38:bb:b1:df:f5:16:63:96:88:85:00:40:8f:9f:35:36:
c3:6b:31:30:cb:37:a3:d3:a7:33:53:01:da:04:d6:c1:02:cc:
26:94:73:8a:02:5f:21:ea:47:75:ac:a2:ff:c3:75:91:b1:f8:
27:1e:b9:2d:f9:7a:1f:c3:71:de:b5:ba:18:7d:62:81:bd:61:
a5:c1:b1:ab:62:7d:ae:17:ed:a4:95:95:61:0a:99:3b:7e:fe:
7a:17:59:da:2d:e7:77:c4:a2:ad:73:a7:51:e3:63:b5:0a:c3:
ab:64:78:a2:66:ae:aa:be:51:94:fa:9b:9c:68:c1:e4:d0:64:
1a:ed:c3:6c:66:0d:a3:fb:e5:d5:20:cc:b9:e8:0a:f3:d6:55:
6c:a6:84:d2:52:11:81:31:b5:e3:9f:83:a6:bd:ff:11:38:b6:
36:d0:c9:01:f2:c7:3e:84:2d:c1:e8:cd:58:29:21:78:57:33:
95:fd:4f:9f:c0:eb:e4:3b:54:87:bc:da:23:e1:fa:00:91:83:
7a:c4:7d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:45:20 2026 by rpki-client