DNSSEC Debugger

Domain Name:

Time: 2024-05-21 23:13:44 UTC

Analyzing DNSSEC problems for cao.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 56965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for cao.gov/A
	Received 617 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 617 octets ;; HEADER SECTION ;; id = 18011 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 44308 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 13827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 1038 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 1038 octets ;; HEADER SECTION ;; id = 46977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (6 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== ) gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== )`
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=2536/SEP is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for cao.gov/A
	Received 802 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 802 octets ;; HEADER SECTION ;; id = 815 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) cao.gov. 10800 IN NS ns1.max.gov. cao.gov. 10800 IN NS ns2.max.gov. cao.gov. 10800 IN NS ns3.max.gov. cao.gov. 10800 IN NS ns4.max.gov. cao.gov. 10800 IN NS ns5.max.gov. cao.gov. 10800 IN NS ns6.max.gov. cao.gov. 3600 IN DS ( 131 13 2 400b0e77447a7259faeefccc31eaea73c5e98a23656b203b212468ed90cfa96d ) cao.gov. 3600 IN DS ( 46392 13 2 c569e80ea54d88644fc0124017ac9fb471b6c66771d98f8f31313eab7c783aff ) cao.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523001344 20240520221344 10104 gov. udSaj7mxMfWy1t+j92fUfyg/eTOtRdyaeKoaq8yigi8RMHMxeXz+1lroQRbuTDJrAGQqrq/1XAAp HEXLmnZNVwdVo6Er+0e3m49RUTlRL/2MTzYZNzwJYCMdYFepi4m9uR8pPB8Vn7ZHvZnLLrvwztv9 7heCXH9IzmdMnR+jx9AQakRghy9aN59Dz8nJMVECKeqw+xOJtrP8u53vBrwzFQ== ) cao.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523001344 20240520221344 35496 gov. zouzZqObqsHqRNhg3OXC4H4kPhhtNOtsPOiMw1sb6o/XuFS1yijeBauCfCI3NgnqIEjwLvhc5eJ3 Sn8hJnPy9Q== ) ;; ADDITIONAL SECTION (13 records) ns1.max.gov. 3600 IN A 198.137.241.177 ns1.max.gov. 3600 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 3600 IN A 198.137.240.49 ns2.max.gov. 3600 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 3600 IN A 198.137.241.113 ns3.max.gov. 3600 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 3600 IN A 198.137.240.177 ns4.max.gov. 3600 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 3600 IN A 198.137.241.49 ns5.max.gov. 3600 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 3600 IN A 198.137.240.113 ns6.max.gov. 3600 IN AAAA 2620:10f:b000:206::113 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for cao.gov/DNSKEY
	Received 802 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 802 octets ;; HEADER SECTION ;; id = 51592 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) cao.gov. 10800 IN NS ns1.max.gov. cao.gov. 10800 IN NS ns2.max.gov. cao.gov. 10800 IN NS ns3.max.gov. cao.gov. 10800 IN NS ns4.max.gov. cao.gov. 10800 IN NS ns5.max.gov. cao.gov. 10800 IN NS ns6.max.gov. cao.gov. 3600 IN DS ( 131 13 2 400b0e77447a7259faeefccc31eaea73c5e98a23656b203b212468ed90cfa96d ) cao.gov. 3600 IN DS ( 46392 13 2 c569e80ea54d88644fc0124017ac9fb471b6c66771d98f8f31313eab7c783aff ) cao.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523001344 20240520221344 10104 gov. udSaj7mxMfWy1t+j92fUfyg/eTOtRdyaeKoaq8yigi8RMHMxeXz+1lroQRbuTDJrAGQqrq/1XAAp HEXLmnZNVwdVo6Er+0e3m49RUTlRL/2MTzYZNzwJYCMdYFepi4m9uR8pPB8Vn7ZHvZnLLrvwztv9 7heCXH9IzmdMnR+jx9AQakRghy9aN59Dz8nJMVECKeqw+xOJtrP8u53vBrwzFQ== ) cao.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523001344 20240520221344 35496 gov. JnNr4o/5AWlSpYP4hDAxvl6/7W7L5BvAOFa/+l9+82hm2+K3o2aTB2vr9RKtPa8IllKEUTor40or GHlaL1acwQ== ) ;; ADDITIONAL SECTION (13 records) ns1.max.gov. 3600 IN A 198.137.241.177 ns1.max.gov. 3600 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 3600 IN A 198.137.240.49 ns2.max.gov. 3600 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 3600 IN A 198.137.241.113 ns3.max.gov. 3600 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 3600 IN A 198.137.240.177 ns4.max.gov. 3600 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 3600 IN A 198.137.241.49 ns5.max.gov. 3600 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 3600 IN A 198.137.240.113 ns6.max.gov. 3600 IN AAAA 2620:10f:b000:206::113 ;; { "EDNS-VERSION": 0 }
	Found child zone cao.gov

cao.gov

	Checking DS between gov and cao.gov
	Query to a.ns.gov for cao.gov/DS
	Received 426 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 426 octets ;; HEADER SECTION ;; id = 62594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN DS ;; ANSWER SECTION (4 records) cao.gov. 3600 IN DS ( 131 13 2 400b0e77447a7259faeefccc31eaea73c5e98a23656b203b212468ed90cfa96d ) cao.gov. 3600 IN DS ( 46392 13 2 c569e80ea54d88644fc0124017ac9fb471b6c66771d98f8f31313eab7c783aff ) cao.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523001344 20240520221344 10104 gov. udSaj7mxMfWy1t+j92fUfyg/eTOtRdyaeKoaq8yigi8RMHMxeXz+1lroQRbuTDJrAGQqrq/1XAAp HEXLmnZNVwdVo6Er+0e3m49RUTlRL/2MTzYZNzwJYCMdYFepi4m9uR8pPB8Vn7ZHvZnLLrvwztv9 7heCXH9IzmdMnR+jx9AQakRghy9aN59Dz8nJMVECKeqw+xOJtrP8u53vBrwzFQ== ) cao.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523001344 20240520221344 35496 gov. 82tH1biIrQ0xPVctzQIw5GDCfKl9HkKWnHbkeMtdWgEVqJDT3F+zgCnbAEfawefFT1+iJ9lno7r+ paBuKq/lSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for cao.gov in the gov zone
	DS=131/SHA-256 has algorithm ECDSAP256SHA256
	DS=46392/SHA-256 has algorithm ECDSAP256SHA256
	Found 2 RRSIGs over DS RRset
	`cao.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523001344 20240520221344 10104 gov. udSaj7mxMfWy1t+j92fUfyg/eTOtRdyaeKoaq8yigi8RMHMxeXz+1lroQRbuTDJrAGQqrq/1XAAp HEXLmnZNVwdVo6Er+0e3m49RUTlRL/2MTzYZNzwJYCMdYFepi4m9uR8pPB8Vn7ZHvZnLLrvwztv9 7heCXH9IzmdMnR+jx9AQakRghy9aN59Dz8nJMVECKeqw+xOJtrP8u53vBrwzFQ== )`
	`cao.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523001344 20240520221344 35496 gov. 82tH1biIrQ0xPVctzQIw5GDCfKl9HkKWnHbkeMtdWgEVqJDT3F+zgCnbAEfawefFT1+iJ9lno7r+ paBuKq/lSg== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=131/SHA-256 is now in the chain-of-trust
	DS=46392/SHA-256 is now in the chain-of-trust
	`cao.gov. 3600 IN DS ( 131 13 2 400b0e77447a7259faeefccc31eaea73c5e98a23656b203b212468ed90cfa96d )`
	`cao.gov. 3600 IN DS ( 46392 13 2 c569e80ea54d88644fc0124017ac9fb471b6c66771d98f8f31313eab7c783aff )`
	Query to ns3.max.gov for cao.gov/DNSKEY
	Received 482 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 482 octets ;; HEADER SECTION ;; id = 31128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN DNSKEY ;; ANSWER SECTION (5 records) cao.gov. 60 IN DNSKEY ( 257 3 13 pG5ECqVCUu5AX1hdweiQQZBIL93ZwDGU9qMzgl14G+EZLrfmF4XzV5qcxaP6giUsugLqvm9WZS50 JZlXQzhQwg== ) ; Key ID = 46392 cao.gov. 60 IN DNSKEY ( 257 3 13 Gjgy/8wCoHW7hyJz78z8moQTm+iTTCZupVsBM1PwhRTjS9lWACaZlkI5Fx0ntPosyOdDWsOZSmUV YrJhVH4W/g== ) ; Key ID = 131 cao.gov. 60 IN DNSKEY ( 256 3 13 Y0Mtf9OZ3yb+b9lIW4OMOZwfWLpxEQq6SNI3hy16q63dmWlc53FmashEBnhDOjNgc2AXCE4DPD9s pnGZB6orCQ== ) ; Key ID = 53492 cao.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240531230005 20240521220005 131 cao.gov. 3oLA2jdjrQL04jyhVBFrg7nmtsYl4xYxZuMCN1Mv6fZbhkaoRJyKv4oX0VADdj3+PhZ2ZxdKYOxR 45nSOFLxTQ== ) cao.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240531230005 20240521220005 53492 cao.gov. So9F+lrmRdLdoWETzKFtdHixEh4hnAyswItb75Dc4XH6HmEPZr+xx+VCGhAKXdw4a1SV88NmrUgj bwt9tFuXUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for cao.gov
	`cao.gov. 60 IN DNSKEY ( 257 3 13 pG5ECqVCUu5AX1hdweiQQZBIL93ZwDGU9qMzgl14G+EZLrfmF4XzV5qcxaP6giUsugLqvm9WZS50 JZlXQzhQwg== ) ; Key ID = 46392`
	`cao.gov. 60 IN DNSKEY ( 257 3 13 Gjgy/8wCoHW7hyJz78z8moQTm+iTTCZupVsBM1PwhRTjS9lWACaZlkI5Fx0ntPosyOdDWsOZSmUV YrJhVH4W/g== ) ; Key ID = 131`
	`cao.gov. 60 IN DNSKEY ( 256 3 13 Y0Mtf9OZ3yb+b9lIW4OMOZwfWLpxEQq6SNI3hy16q63dmWlc53FmashEBnhDOjNgc2AXCE4DPD9s pnGZB6orCQ== ) ; Key ID = 53492`
	DNSKEY=46392/SEP is now in the chain-of-trust
	DS=46392/SHA-256 verifies DNSKEY=46392/SEP
	DNSKEY=131/SEP is now in the chain-of-trust
	DS=131/SHA-256 verifies DNSKEY=131/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cao.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240531230005 20240521220005 131 cao.gov. 3oLA2jdjrQL04jyhVBFrg7nmtsYl4xYxZuMCN1Mv6fZbhkaoRJyKv4oX0VADdj3+PhZ2ZxdKYOxR 45nSOFLxTQ== )`
	`cao.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240531230005 20240521220005 53492 cao.gov. So9F+lrmRdLdoWETzKFtdHixEh4hnAyswItb75Dc4XH6HmEPZr+xx+VCGhAKXdw4a1SV88NmrUgj bwt9tFuXUQ== )`
	RRSIG=131 and DNSKEY=131/SEP verifies the DNSKEY RRset
	RRSIG=53492 and DNSKEY=53492 verifies the DNSKEY RRset
	DNSKEY=53492 is now in the chain-of-trust
	Query to ns1.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.241.177
	;; Response received from [198.137.241.177] 1149 octets ;; HEADER SECTION ;; id = 43190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	ns1.max.gov is authoritative for cao.gov
	Found RRSIG signed by cao.gov zone
	Query to ns6.max.gov for cao.gov/SOA
	Received 1180 bytes from 198.137.240.113
	;; Response received from [198.137.240.113] 1180 octets ;; HEADER SECTION ;; id = 23338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN SOA ;; ANSWER SECTION (2 records) cao.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024052102 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) cao.gov. 60 IN RRSIG ( SOA 13 2 60 20240531230005 20240521220005 53492 cao.gov. EtWBSJ1gRHjLb84xt2GiQv+oR3+kcqIg6bS5lnOQ706r7vPihtlywEkW0mkNdB+NAvns7OY3FLo+ Y2X0YPvqtg== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns4.max.gov for cao.gov/SOA
	Received 1180 bytes from 198.137.240.177
	;; Response received from [198.137.240.177] 1180 octets ;; HEADER SECTION ;; id = 19444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN SOA ;; ANSWER SECTION (2 records) cao.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024052102 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) cao.gov. 60 IN RRSIG ( SOA 13 2 60 20240531230005 20240521220005 53492 cao.gov. EtWBSJ1gRHjLb84xt2GiQv+oR3+kcqIg6bS5lnOQ706r7vPihtlywEkW0mkNdB+NAvns7OY3FLo+ Y2X0YPvqtg== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.max.gov for cao.gov/SOA
	Received 1180 bytes from 198.137.240.49
	;; Response received from [198.137.240.49] 1180 octets ;; HEADER SECTION ;; id = 51940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN SOA ;; ANSWER SECTION (2 records) cao.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024052102 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) cao.gov. 60 IN RRSIG ( SOA 13 2 60 20240531230005 20240521220005 53492 cao.gov. EtWBSJ1gRHjLb84xt2GiQv+oR3+kcqIg6bS5lnOQ706r7vPihtlywEkW0mkNdB+NAvns7OY3FLo+ Y2X0YPvqtg== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns5.max.gov for cao.gov/SOA
	Received 1180 bytes from 198.137.241.49
	;; Response received from [198.137.241.49] 1180 octets ;; HEADER SECTION ;; id = 64863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN SOA ;; ANSWER SECTION (2 records) cao.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024052102 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) cao.gov. 60 IN RRSIG ( SOA 13 2 60 20240531230005 20240521220005 53492 cao.gov. EtWBSJ1gRHjLb84xt2GiQv+oR3+kcqIg6bS5lnOQ706r7vPihtlywEkW0mkNdB+NAvns7OY3FLo+ Y2X0YPvqtg== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.max.gov for cao.gov/SOA
	Received 1180 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 1180 octets ;; HEADER SECTION ;; id = 2075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN SOA ;; ANSWER SECTION (2 records) cao.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024052102 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) cao.gov. 60 IN RRSIG ( SOA 13 2 60 20240531230005 20240521220005 53492 cao.gov. EtWBSJ1gRHjLb84xt2GiQv+oR3+kcqIg6bS5lnOQ706r7vPihtlywEkW0mkNdB+NAvns7OY3FLo+ Y2X0YPvqtg== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.241.177
	;; Response received from [198.137.241.177] 1149 octets ;; HEADER SECTION ;; id = 22392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	cao.gov A RR has value 159.142.165.72
	Found 1 RRSIGs over A RRset
	`cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== )`
	RRSIG=53492 and DNSKEY=53492 verifies the A RRset

cao.gov

	Query to ns4.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.240.177
	;; Response received from [198.137.240.177] 1149 octets ;; HEADER SECTION ;; id = 8785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	ns4.max.gov is authoritative for cao.gov
	Found RRSIG signed by cao.gov zone
	Query to ns4.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.240.177
	;; Response received from [198.137.240.177] 1149 octets ;; HEADER SECTION ;; id = 30086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	cao.gov A RR has value 159.142.165.72
	Found 1 RRSIGs over A RRset
	`cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== )`
	RRSIG=53492 and DNSKEY=53492 verifies the A RRset

cao.gov

	Query to ns2.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.240.49
	;; Response received from [198.137.240.49] 1149 octets ;; HEADER SECTION ;; id = 1194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	ns2.max.gov is authoritative for cao.gov
	Found RRSIG signed by cao.gov zone
	Query to ns2.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.240.49
	;; Response received from [198.137.240.49] 1149 octets ;; HEADER SECTION ;; id = 29644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	cao.gov A RR has value 159.142.165.72
	Found 1 RRSIGs over A RRset
	`cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== )`
	RRSIG=53492 and DNSKEY=53492 verifies the A RRset

cao.gov

	Query to ns6.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.240.113
	;; Response received from [198.137.240.113] 1149 octets ;; HEADER SECTION ;; id = 58760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	ns6.max.gov is authoritative for cao.gov
	Found RRSIG signed by cao.gov zone
	Query to ns6.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.240.113
	;; Response received from [198.137.240.113] 1149 octets ;; HEADER SECTION ;; id = 7281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	cao.gov A RR has value 159.142.165.72
	Found 1 RRSIGs over A RRset
	`cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== )`
	RRSIG=53492 and DNSKEY=53492 verifies the A RRset

cao.gov

	Query to ns5.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.241.49
	;; Response received from [198.137.241.49] 1149 octets ;; HEADER SECTION ;; id = 16967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	ns5.max.gov is authoritative for cao.gov
	Found RRSIG signed by cao.gov zone
	Query to ns5.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.241.49
	;; Response received from [198.137.241.49] 1149 octets ;; HEADER SECTION ;; id = 36800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	cao.gov A RR has value 159.142.165.72
	Found 1 RRSIGs over A RRset
	`cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== )`
	RRSIG=53492 and DNSKEY=53492 verifies the A RRset

cao.gov

	Query to ns3.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 1149 octets ;; HEADER SECTION ;; id = 49265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	ns3.max.gov is authoritative for cao.gov
	Found RRSIG signed by cao.gov zone
	Query to ns3.max.gov for cao.gov/A
	Received 1149 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 1149 octets ;; HEADER SECTION ;; id = 59497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cao.gov. IN A ;; ANSWER SECTION (2 records) cao.gov. 60 IN A 159.142.165.72 cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== ) ;; AUTHORITY SECTION (7 records) cao.gov. 60 IN NS ns3.max.gov. cao.gov. 60 IN NS ns2.max.gov. cao.gov. 60 IN NS ns6.max.gov. cao.gov. 60 IN NS ns4.max.gov. cao.gov. 60 IN NS ns1.max.gov. cao.gov. 60 IN NS ns5.max.gov. cao.gov. 60 IN RRSIG ( NS 13 2 60 20240531230005 20240521220005 53492 cao.gov. G5wbvgrZhqE6G6JI9um9fjAfHJujVSksC+BZFh3u5CFX1Qo8rXBiqKGJ6Q8+OjidPl7zuDY6+cxA ueeQyWpl4g== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. F0jaxQaAfStpMUzcVKc5FTyOXVvF/abAp9gCEywQAPbeMMS17n/qbgXMlO/atVf8IBj1D4mNygUn 6wGthcRZ/Q== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. JhxgKFvtUWsq/U+jVaLzQ6P+oReN79jGPSADG81rEud2HdMiLfwdn0WYARj+QgcFcWQsm9wH/CZb d78fXXpJpw== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. LjcI0Tb3a7VKEqNFWjW2U2VbdwdX/dX5mDg1cQABshYInlAeGPjmVnV8AC5PcADdrgFlWCTJEedU 9gMC/N3AYg== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240531230008 20240521220008 46704 max.gov. 0TtsaJSl1sdAHqPaeIXoIOX2tV2ckyzXWAlrq94bz6sC1xNFA2knz0FHrxSqrlzQuUxoaLGTRMIW nlQ0+8Gqig== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240531230008 20240521220008 46704 max.gov. 7+7kkc7rBwUjmpKJ1b+NiNdwfdHPvF7e+vOFHuJUGPucom1qpfPDVjbITX0+/l4HykXLnOdZJ6f3 dS7WabvplQ== ) ;; { "EDNS-VERSION": 0 }
	cao.gov A RR has value 159.142.165.72
	Found 1 RRSIGs over A RRset
	`cao.gov. 60 IN RRSIG ( A 13 2 60 20240531230005 20240521220005 53492 cao.gov. tRjwKGvP7qzGPasye2/iUtLkmS9Hb3491qvnUXaQWBadAEssOOBsEMk4PIDfrfp8SP/49v5Mh4je wapLakQL1Q== )`
	RRSIG=53492 and DNSKEY=53492 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cao.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: