
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20278.roa
File: AS20278.roa (raw, json)
Hash identifier: 0sQWCIIINUlQn7xMACnc6ZqJRrkfTh0oyk0UJVmH+zU=
Subject key identifier: BD:06:9F:19:50:3F:99:FF:CD:48:2C:2E:9F:DA:C3:15:1F:DE:7B:79
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 33EBD8F8095328BC187F635EB732562E8D515AD9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20278.roa
Signing time: Wed 25 Mar 2026 22:04:23 +0000
ROA not before: Wed 25 Mar 2026 21:59:23 +0000
ROA not after: Wed 24 Mar 2027 22:04:23 +0000
asID: 20278
IP address blocks: 2602:fed2:7e82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 08:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:eb:d8:f8:09:53:28:bc:18:7f:63:5e:b7:32:56:2e:8d:51:5a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Mar 25 21:59:23 2026 GMT
Not After : Mar 24 22:04:23 2027 GMT
Subject: CN=BD069F19503F99FFCD482C2E9FDAC3151FDE7B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:d0:ef:8a:b2:4c:c2:72:8e:5e:dc:89:17:
c6:e2:5b:34:33:a6:13:28:5e:68:49:16:ec:c6:ed:
d9:7b:a0:84:28:99:e3:6e:d6:92:0f:3a:19:7b:e1:
c5:56:fd:2b:3c:82:36:86:46:e9:12:fe:64:dc:2f:
13:14:8c:6e:86:0b:72:51:ef:5a:60:b0:fe:e7:51:
89:0a:8f:10:36:2e:ab:ba:de:52:6d:a4:87:df:ea:
ee:c4:ba:91:3e:0b:1f:6e:b1:ff:84:da:1d:de:0f:
3d:48:fc:4a:63:ed:70:45:25:b0:e4:be:37:03:13:
84:40:78:65:cf:53:b8:9c:d7:75:6f:fe:b3:3a:57:
6b:81:4e:c0:ff:e1:d9:76:e8:a8:2b:66:98:74:6c:
2e:0a:bf:bb:aa:b5:b5:7a:75:3d:74:cf:57:36:bd:
ce:c7:ef:c5:f2:39:6c:b0:eb:60:e6:d0:8c:53:b5:
f2:47:ac:04:1e:d8:19:29:fa:4b:aa:8c:53:73:a5:
fd:b2:f6:de:d6:b8:f8:26:93:cf:8c:d7:f4:b4:9c:
29:9d:e2:22:c5:f4:d1:47:ea:8b:5c:ec:22:3f:89:
8e:1c:a4:75:48:d9:54:d5:c8:8b:22:23:8f:bf:04:
07:4c:af:24:0f:5e:b2:09:59:86:39:b3:59:6a:71:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:9F:19:50:3F:99:FF:CD:48:2C:2E:9F:DA:C3:15:1F:DE:7B:79
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20278.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7e82::/48
Signature Algorithm: sha256WithRSAEncryption
bf:46:b7:3f:d6:58:42:d4:30:e4:86:53:1a:93:23:1a:37:d1:
15:b4:88:f4:77:e7:b7:be:dc:6c:e0:89:bb:1a:f0:59:5b:45:
7e:53:88:a2:4c:e5:3a:09:84:93:93:82:eb:73:d8:70:4a:3c:
2e:ac:34:af:d7:02:0e:1d:ef:27:30:a4:1d:be:83:43:5d:c0:
2f:a0:af:08:24:0a:77:49:3b:98:ad:92:29:04:14:30:cb:69:
1c:3f:99:e0:a2:d5:9b:b7:af:9f:49:08:90:0c:b2:cf:70:33:
bd:6d:f1:19:e0:20:df:25:52:56:d6:63:4d:36:13:ae:26:d2:
18:b5:8c:e9:d5:1c:e2:99:8e:b1:e1:82:7b:8a:26:b5:8c:e1:
ab:b4:c0:fb:15:01:53:4b:84:40:69:17:28:64:7c:bf:1d:11:
97:cb:93:ad:67:88:e4:60:c2:17:47:19:d0:8e:ed:49:e5:39:
02:66:1a:c5:ea:b7:0e:db:fa:7d:7a:bc:90:dc:74:83:02:a1:
29:65:b2:5a:6b:f5:24:4a:0f:aa:10:9e:7f:09:65:1b:60:49:
f2:ae:db:92:3c:c3:3d:39:00:d0:fb:ee:60:53:0f:a1:db:c2:
41:d4:62:6e:83:cc:0d:4e:b8:74:27:90:ff:05:68:6d:94:fa:
fe:99:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:55 2026 by rpki-client