
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS133504.roa
File: AS133504.roa (raw, json)
Hash identifier: I8ilgjsRnmkk0NQN8S072dDt5vl/QLxToOct7tUGxB0=
Subject key identifier: 0E:B6:B3:EF:77:7D:63:99:6A:AA:9C:EF:09:72:1E:40:DD:15:60:AB
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 29DB979C55C7BE4D3F08472C6D7EF3117DD7E0AE
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS133504.roa
Signing time: Sun 26 Apr 2026 19:07:48 +0000
ROA not before: Sun 26 Apr 2026 19:02:48 +0000
ROA not after: Sun 25 Apr 2027 19:07:48 +0000
asID: 133504
IP address blocks: 2602:fed2:7e83::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:db:97:9c:55:c7:be:4d:3f:08:47:2c:6d:7e:f3:11:7d:d7:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Apr 26 19:02:48 2026 GMT
Not After : Apr 25 19:07:48 2027 GMT
Subject: CN=0EB6B3EF777D63996AAA9CEF09721E40DD1560AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3f:e3:4f:59:2d:3b:ee:f5:e5:f2:70:0e:05:
48:88:99:1a:9d:ac:a4:94:60:40:06:7f:ab:b6:5c:
fb:7d:ac:02:b1:fd:06:82:67:9f:38:b4:77:92:e4:
a7:fd:68:d0:64:96:d5:53:7e:a7:82:50:99:39:7c:
39:e2:1b:90:b8:d9:81:66:d8:b0:84:29:98:7a:e7:
29:ac:6e:84:d9:98:58:fc:4f:94:53:24:ca:33:63:
19:f9:52:63:5d:6a:e7:2c:4d:ea:b9:9c:a6:18:db:
03:51:85:31:31:cc:bb:c6:59:d8:56:78:5f:7b:33:
4c:5a:64:97:67:46:a0:d0:ae:ce:eb:40:84:a3:eb:
2e:13:3e:1f:12:33:58:7e:e2:0d:74:5d:e2:a7:d6:
48:c8:8b:62:6c:fe:14:49:12:78:b3:77:a4:b6:39:
87:3a:11:60:8f:9c:01:57:f1:62:9c:1c:8b:04:32:
0b:58:de:f8:57:17:b7:fb:fe:89:9d:f7:61:36:a7:
49:b6:a8:79:e8:4d:5e:12:76:cf:91:47:4f:70:10:
e9:8f:a3:5a:95:d9:e6:43:0c:d0:a7:32:62:c9:f3:
7a:da:7d:73:ef:48:a9:d1:8b:eb:67:2a:cb:be:de:
0b:82:b8:fc:b2:77:9f:b4:27:bf:42:e0:d4:50:b5:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B6:B3:EF:77:7D:63:99:6A:AA:9C:EF:09:72:1E:40:DD:15:60:AB
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS133504.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7e83::/48
Signature Algorithm: sha256WithRSAEncryption
60:51:50:6a:29:2d:ef:57:88:fd:b1:7a:bc:b3:3b:f4:36:14:
8d:c9:ed:db:6c:d1:57:4c:6c:58:14:45:4c:29:41:8c:cb:11:
c6:8e:b3:9b:75:4c:0d:f0:51:80:26:5d:eb:83:7c:be:eb:11:
e3:73:e3:c2:29:59:21:f9:ec:ce:6f:bd:2d:a4:c6:e3:12:79:
4c:be:4d:13:c5:3a:d9:87:26:df:77:dd:ff:b9:54:2f:bc:a3:
72:15:a9:41:f9:f4:98:c0:23:3a:68:8a:7e:ae:7e:45:a3:e3:
2b:5f:a7:df:28:2a:74:ad:77:18:00:78:7a:b7:1f:45:25:f8:
a8:bc:49:48:f7:a6:e2:e2:53:36:3f:9f:f9:b7:80:a3:99:22:
ae:c7:a3:ae:b0:67:57:c3:86:55:bb:29:2d:13:7d:b9:02:af:
bd:e6:4c:b6:a2:63:d8:85:f8:ea:3a:c5:1a:54:3d:d0:66:7d:
c0:c1:b8:08:c4:1e:09:ea:f1:93:82:eb:64:e4:07:cd:70:a6:
80:6c:e7:d1:75:d2:e5:78:81:48:db:fe:e4:d6:d1:05:6a:de:
6b:ef:b6:53:30:b8:86:f3:01:76:67:ec:12:e7:6b:22:9d:ae:
1e:c6:8f:30:bf:ba:16:fa:e9:bd:fa:bd:70:52:8a:07:a9:c8:
70:41:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:55:00 2026 by rpki-client