DNSSEC Debugger - dems.gov

Domain Name:

Time: 2024-05-22 01:19:55 UTC

Analyzing DNSSEC problems for dems.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 57161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to d.root-servers.net for dems.gov/A
	Received 615 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 615 octets ;; HEADER SECTION ;; id = 6470 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for gov/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 37258 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 9435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 1038 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 1038 octets ;; HEADER SECTION ;; id = 18171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (6 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== ) gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== )`
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=2536/SEP is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for dems.gov/A
	Received 644 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 644 octets ;; HEADER SECTION ;; id = 43527 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) dems.gov. 10800 IN NS oxygen.house.gov. dems.gov. 10800 IN NS oxygen2.house.gov. dems.gov. 10800 IN NS pdns109.ultradns.biz. dems.gov. 10800 IN NS pdns109.ultradns.com. dems.gov. 10800 IN NS pdns109.ultradns.net. dems.gov. 10800 IN NS pdns109.ultradns.org. dems.gov. 3600 IN DS ( 17761 8 2 28d637ea5dfe716e21954760b50cc6be01ab791f54e2225da8f11fdc817e605e ) dems.gov. 3600 IN DS ( 6799 8 2 f9d6219cd32bf8ef4adf6ca2aeeab503d17387b2ddf16d18e2f624a8969b7b11 ) dems.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523021955 20240521001955 10104 gov. Wy3Yj87hT9AFxKABYahoMjH/Jr4yCfMaaCK+ZdN1DEBBHy4tyO+v83ZF0lb3IAprGxKvUYTo2T3C 2XBfZ1i5ONirpZe/8SK8xf3TIK1oIZF6VOjm7qitDXlk/neuRoEDf4cWuqhQO/dmCd9p+r3uU8J2 B3ChUU1MCY0BbTh8UMJZn47pt8BZ8vuO19ZlFNT84uFp44nEpox5ozTV9i7EvQ== ) dems.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523021955 20240521001955 35496 gov. /HMkcVLYgG4rnArL/2JYxRdDpd/B52hiM9c8VWarVz9Ef+HLNs9JgJLC1YjqR96BhXZNTI8pOXwM P9OIjqHrqA== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.gov. 3600 IN A 216.218.141.197 oxygen2.house.gov. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for dems.gov/DNSKEY
	Received 644 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 644 octets ;; HEADER SECTION ;; id = 13248 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) dems.gov. 10800 IN NS oxygen.house.gov. dems.gov. 10800 IN NS oxygen2.house.gov. dems.gov. 10800 IN NS pdns109.ultradns.biz. dems.gov. 10800 IN NS pdns109.ultradns.com. dems.gov. 10800 IN NS pdns109.ultradns.net. dems.gov. 10800 IN NS pdns109.ultradns.org. dems.gov. 3600 IN DS ( 17761 8 2 28d637ea5dfe716e21954760b50cc6be01ab791f54e2225da8f11fdc817e605e ) dems.gov. 3600 IN DS ( 6799 8 2 f9d6219cd32bf8ef4adf6ca2aeeab503d17387b2ddf16d18e2f624a8969b7b11 ) dems.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523021955 20240521001955 10104 gov. Wy3Yj87hT9AFxKABYahoMjH/Jr4yCfMaaCK+ZdN1DEBBHy4tyO+v83ZF0lb3IAprGxKvUYTo2T3C 2XBfZ1i5ONirpZe/8SK8xf3TIK1oIZF6VOjm7qitDXlk/neuRoEDf4cWuqhQO/dmCd9p+r3uU8J2 B3ChUU1MCY0BbTh8UMJZn47pt8BZ8vuO19ZlFNT84uFp44nEpox5ozTV9i7EvQ== ) dems.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523021955 20240521001955 35496 gov. utAUuukTycQjEVKgugNPbclx4Uh0n/iz8C0m21hqH9QFUKoH83ZrMTdvpRzjeP41WcrUz0wicCSr 6z5kWCalTA== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.gov. 3600 IN A 216.218.141.197 oxygen2.house.gov. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Found child zone dems.gov

dems.gov

	Checking DS between gov and dems.gov
	Query to c.ns.gov for dems.gov/DS
	Received 427 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 427 octets ;; HEADER SECTION ;; id = 19547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN DS ;; ANSWER SECTION (4 records) dems.gov. 3600 IN DS ( 17761 8 2 28d637ea5dfe716e21954760b50cc6be01ab791f54e2225da8f11fdc817e605e ) dems.gov. 3600 IN DS ( 6799 8 2 f9d6219cd32bf8ef4adf6ca2aeeab503d17387b2ddf16d18e2f624a8969b7b11 ) dems.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523021955 20240521001955 10104 gov. Wy3Yj87hT9AFxKABYahoMjH/Jr4yCfMaaCK+ZdN1DEBBHy4tyO+v83ZF0lb3IAprGxKvUYTo2T3C 2XBfZ1i5ONirpZe/8SK8xf3TIK1oIZF6VOjm7qitDXlk/neuRoEDf4cWuqhQO/dmCd9p+r3uU8J2 B3ChUU1MCY0BbTh8UMJZn47pt8BZ8vuO19ZlFNT84uFp44nEpox5ozTV9i7EvQ== ) dems.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523021955 20240521001955 35496 gov. SsghZ5agSHOE3/FzjAHUg+/yJ3R4CrIbh+qYlgFWAFks04cB0mOyCAewagiumhu8isDYrMOJVJXn 3KP8YAP0iA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dems.gov in the gov zone
	DS=17761/SHA-256 has algorithm RSASHA256
	DS=6799/SHA-256 has algorithm RSASHA256
	Found 2 RRSIGs over DS RRset
	`dems.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523021955 20240521001955 10104 gov. Wy3Yj87hT9AFxKABYahoMjH/Jr4yCfMaaCK+ZdN1DEBBHy4tyO+v83ZF0lb3IAprGxKvUYTo2T3C 2XBfZ1i5ONirpZe/8SK8xf3TIK1oIZF6VOjm7qitDXlk/neuRoEDf4cWuqhQO/dmCd9p+r3uU8J2 B3ChUU1MCY0BbTh8UMJZn47pt8BZ8vuO19ZlFNT84uFp44nEpox5ozTV9i7EvQ== )`
	`dems.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523021955 20240521001955 35496 gov. SsghZ5agSHOE3/FzjAHUg+/yJ3R4CrIbh+qYlgFWAFks04cB0mOyCAewagiumhu8isDYrMOJVJXn 3KP8YAP0iA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=17761/SHA-256 is now in the chain-of-trust
	DS=6799/SHA-256 is now in the chain-of-trust
	`dems.gov. 3600 IN DS ( 17761 8 2 28d637ea5dfe716e21954760b50cc6be01ab791f54e2225da8f11fdc817e605e )`
	`dems.gov. 3600 IN DS ( 6799 8 2 f9d6219cd32bf8ef4adf6ca2aeeab503d17387b2ddf16d18e2f624a8969b7b11 )`
	Query to pdns109.ultradns.com for dems.gov/DNSKEY
	Received 1645 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 1645 octets ;; HEADER SECTION ;; id = 13082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN DNSKEY ;; ANSWER SECTION (7 records) dems.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAZL2NuzbOyCYk+pSffY5iYUKa+mPPsz7PxX34PTZ37gi29aWt/NiogjNRV1lPv3r9guM334w B7+oGpgYjJEeKY9o1kURd2czZnKxRq5B4dvuG9w4ICdyaMzKPgmw3CYyIVRwKLuMqLQ+B4wpmi0b kpVQWobtkjTo8kL47rjdoORD ) ; Key ID = 64329 dems.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAa+kSVRQXh98hzm7fRJZHB3Z2FCH4bKEguGUH9Ss2ci12xO8nDJvBUMfhpNgPZwIOy6VDBAS e0MKfkzLrUt5QcEvW9YeDZEDN7uowqRNEpLKc4m1slZQGJ9SWrsdKA09wv+uscnsTLfl8g76KQKJ 5SwA/S82ReEKjLN4kw3K2zhL ) ; Key ID = 35808 dems.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbZzYYGzW5+G5GRIPMM44jlG2tBfx1EIRKd9RbW1cgi6Vbg65ODL2Wcipf6oQS75FIx2fe68 Eg8MphJxyInKhGBpKBFvsEQ5lhabGVaHZbS03DgjcdGavnz05LYRj7MA6nxGKTDwX1GLI/5sXdz9 Lf5lygcYIqQw+D7Dx3fb2NqH6XQ/7bWMCFAuo+/zl6DvFuTW0mHt4zWJaGO4jdZ5wtp5vL8V1v2J 9ohmgE71gK2Vvs5HWzGgFsBjILR0n5S53LAyw/PZKkFhvFAEpTdI+16gytvKKX8jDef0wkQ6rJ1w 0Y9GPUJ6rtiAZoWh8dDJcaDeTnee7APYk6dAgdJwOiU= ) ; Key ID = 17761 dems.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAab+Ed+TWiL5dPkfWuOVLDXJoaEzSC1bRENSMpJgkKbxbirXO2g051g1fAhwXtr8SD+1Y8Qo +/74zxlvs1emWLYRmR5r/n7GuPJpjhkjunZF42KxOyoc/W+kZGzXk+pFpGTJDMu6lez72sf3jws7 jYGJzua8uMNSK1WCAbO/7xFa1A5q3YvD7DxxrOagYt1pxq4aS1X4Fm4owJICiCRi5DwsXUjHryzN FSc1I6nDYjI/gwTLWYREkwHaWfl93FgW/6abwioFBsy2tJP0VRY0OYiJnBu9/VJ8LH/P9kRVWYkO YQRwnGZT45Po/JrKpZtG9q9Nv583RvJwVNyBzjjJbIc= ) ; Key ID = 6799 dems.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240526152832 20240520143549 6799 dems.gov. HP4t65IKzQGiok2vuSh3xH1dpQzxa1zJQaJXLIb1rmJGnVGwSnRAFP8wBVxkXucoZo8/d8UWvZcH lgjP1pbmOnxqrpm5uqwVHFfFfhnwDpAWc4c+VoLTQunOSZ/JLehD3MXWHeDEEokIXlmT+S3iUxym Os2tDVE0Dh3b02rLktnNJGEroK/dM+8bhNjrru1ZvSoMs7PmYMTojDHjVrFxZnDXRLO6hBtIZmo1 MUA7qbVx3UoUBMrqdVHmU33ARwjAckzOoEDs0gvDmRMVVOD4dwFM/fihDxL6oqFpJwfyp9z7a3Nj Q02OAz1lZuScqJM4nHpwmWhXxcsqF+jNP6F14g== ) dems.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240526152832 20240520143549 17761 dems.gov. llIkWhuAcHgomwaDE6KujsHeODCFiHQY310A62QTn3dE3DCSfgOGssJXqje7r8x+2IDJVdcc4Pl7 jjXH1HjdDF3cyHEDdwiR4nsrCEMdQ9h8LX+J9xxxL0QMckPMn0NTbWAxU9gecg8KbRVe6S1uguBH G0xfN2eJVpLVVZeD2AwPMD1qxoB8ILxZ1+7iIgGxaFMQyZ4dSv+RSKzgv+BBxlLbVsTlXjISO2Re /lpB/1wrN+BTSH4nT4YjB7Yptq0Wn8Tq9kkuQFZhnsSXBOCiMNXi1qK76+oZ4x9TdsZzP9Q+xkbn Qm9UY1CH/juwGvgVdZ4HkeBXjTVodnTFstUX7Q== ) dems.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240526152832 20240520143549 35808 dems.gov. NjExwhqM2i3rjmNWeBWA5F4jFTYyiQOk9aqiDXLuOB+Q5xoQU1usr2HvAP7dUtlV5hhqQM2p/4D4 WjDNeLTAkQ8sXM78O8bohWAHRx3XX9u3Ia+xMyGGG3yvwCgHiCArLcBEBjHxoz1jAnFzKOc9lwfE 2+YYw+K4VZfmN84ffyk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for dems.gov
	`dems.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAZL2NuzbOyCYk+pSffY5iYUKa+mPPsz7PxX34PTZ37gi29aWt/NiogjNRV1lPv3r9guM334w B7+oGpgYjJEeKY9o1kURd2czZnKxRq5B4dvuG9w4ICdyaMzKPgmw3CYyIVRwKLuMqLQ+B4wpmi0b kpVQWobtkjTo8kL47rjdoORD ) ; Key ID = 64329`
	`dems.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAa+kSVRQXh98hzm7fRJZHB3Z2FCH4bKEguGUH9Ss2ci12xO8nDJvBUMfhpNgPZwIOy6VDBAS e0MKfkzLrUt5QcEvW9YeDZEDN7uowqRNEpLKc4m1slZQGJ9SWrsdKA09wv+uscnsTLfl8g76KQKJ 5SwA/S82ReEKjLN4kw3K2zhL ) ; Key ID = 35808`
	`dems.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbZzYYGzW5+G5GRIPMM44jlG2tBfx1EIRKd9RbW1cgi6Vbg65ODL2Wcipf6oQS75FIx2fe68 Eg8MphJxyInKhGBpKBFvsEQ5lhabGVaHZbS03DgjcdGavnz05LYRj7MA6nxGKTDwX1GLI/5sXdz9 Lf5lygcYIqQw+D7Dx3fb2NqH6XQ/7bWMCFAuo+/zl6DvFuTW0mHt4zWJaGO4jdZ5wtp5vL8V1v2J 9ohmgE71gK2Vvs5HWzGgFsBjILR0n5S53LAyw/PZKkFhvFAEpTdI+16gytvKKX8jDef0wkQ6rJ1w 0Y9GPUJ6rtiAZoWh8dDJcaDeTnee7APYk6dAgdJwOiU= ) ; Key ID = 17761`
	`dems.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAab+Ed+TWiL5dPkfWuOVLDXJoaEzSC1bRENSMpJgkKbxbirXO2g051g1fAhwXtr8SD+1Y8Qo +/74zxlvs1emWLYRmR5r/n7GuPJpjhkjunZF42KxOyoc/W+kZGzXk+pFpGTJDMu6lez72sf3jws7 jYGJzua8uMNSK1WCAbO/7xFa1A5q3YvD7DxxrOagYt1pxq4aS1X4Fm4owJICiCRi5DwsXUjHryzN FSc1I6nDYjI/gwTLWYREkwHaWfl93FgW/6abwioFBsy2tJP0VRY0OYiJnBu9/VJ8LH/P9kRVWYkO YQRwnGZT45Po/JrKpZtG9q9Nv583RvJwVNyBzjjJbIc= ) ; Key ID = 6799`
	DNSKEY=17761/SEP is now in the chain-of-trust
	DS=17761/SHA-256 verifies DNSKEY=17761/SEP
	DNSKEY=6799/SEP is now in the chain-of-trust
	DS=6799/SHA-256 verifies DNSKEY=6799/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`dems.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240526152832 20240520143549 6799 dems.gov. HP4t65IKzQGiok2vuSh3xH1dpQzxa1zJQaJXLIb1rmJGnVGwSnRAFP8wBVxkXucoZo8/d8UWvZcH lgjP1pbmOnxqrpm5uqwVHFfFfhnwDpAWc4c+VoLTQunOSZ/JLehD3MXWHeDEEokIXlmT+S3iUxym Os2tDVE0Dh3b02rLktnNJGEroK/dM+8bhNjrru1ZvSoMs7PmYMTojDHjVrFxZnDXRLO6hBtIZmo1 MUA7qbVx3UoUBMrqdVHmU33ARwjAckzOoEDs0gvDmRMVVOD4dwFM/fihDxL6oqFpJwfyp9z7a3Nj Q02OAz1lZuScqJM4nHpwmWhXxcsqF+jNP6F14g== )`
	`dems.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240526152832 20240520143549 17761 dems.gov. llIkWhuAcHgomwaDE6KujsHeODCFiHQY310A62QTn3dE3DCSfgOGssJXqje7r8x+2IDJVdcc4Pl7 jjXH1HjdDF3cyHEDdwiR4nsrCEMdQ9h8LX+J9xxxL0QMckPMn0NTbWAxU9gecg8KbRVe6S1uguBH G0xfN2eJVpLVVZeD2AwPMD1qxoB8ILxZ1+7iIgGxaFMQyZ4dSv+RSKzgv+BBxlLbVsTlXjISO2Re /lpB/1wrN+BTSH4nT4YjB7Yptq0Wn8Tq9kkuQFZhnsSXBOCiMNXi1qK76+oZ4x9TdsZzP9Q+xkbn Qm9UY1CH/juwGvgVdZ4HkeBXjTVodnTFstUX7Q== )`
	`dems.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240526152832 20240520143549 35808 dems.gov. NjExwhqM2i3rjmNWeBWA5F4jFTYyiQOk9aqiDXLuOB+Q5xoQU1usr2HvAP7dUtlV5hhqQM2p/4D4 WjDNeLTAkQ8sXM78O8bohWAHRx3XX9u3Ia+xMyGGG3yvwCgHiCArLcBEBjHxoz1jAnFzKOc9lwfE 2+YYw+K4VZfmN84ffyk= )`
	RRSIG=6799 and DNSKEY=6799/SEP verifies the DNSKEY RRset
	RRSIG=17761 and DNSKEY=17761/SEP verifies the DNSKEY RRset
	RRSIG=35808 and DNSKEY=35808 verifies the DNSKEY RRset
	DNSKEY=64329 is now in the chain-of-trust
	DNSKEY=35808 is now in the chain-of-trust
	Query to pdns109.ultradns.org for dems.gov/A
	Received 590 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 590 octets ;; HEADER SECTION ;; id = 6238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.org is authoritative for dems.gov
	Found RRSIG signed by dems.gov zone
	Query to oxygen.house.gov for dems.gov/SOA
	Received 263 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 263 octets ;; HEADER SECTION ;; id = 64217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8003955 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527223153 20240521213153 35808 dems.gov. JIIpx7f90Uvk1e7yZ2DkMRWwHu5s5MH8KmW0MyKn1q+UEHLVAAf8pLZbf+6yMaLrkSNUE7BEeCWO 2mP5bMmRwVWgtT2ePXRwA/wgBXwinNdG7elRxJRWYx03n3jwmGk/3G7IUSMMx4uqlxK1MLgXK4dy NGxK/+JV5oikiICQR18= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.biz for dems.gov/SOA
	Received 603 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 603 octets ;; HEADER SECTION ;; id = 35347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8003955 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527223153 20240521213153 35808 dems.gov. JIIpx7f90Uvk1e7yZ2DkMRWwHu5s5MH8KmW0MyKn1q+UEHLVAAf8pLZbf+6yMaLrkSNUE7BEeCWO 2mP5bMmRwVWgtT2ePXRwA/wgBXwinNdG7elRxJRWYx03n3jwmGk/3G7IUSMMx4uqlxK1MLgXK4dy NGxK/+JV5oikiICQR18= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to oxygen2.house.gov for dems.gov/SOA
	Received 263 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 263 octets ;; HEADER SECTION ;; id = 54602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8003955 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527223153 20240521213153 35808 dems.gov. JIIpx7f90Uvk1e7yZ2DkMRWwHu5s5MH8KmW0MyKn1q+UEHLVAAf8pLZbf+6yMaLrkSNUE7BEeCWO 2mP5bMmRwVWgtT2ePXRwA/wgBXwinNdG7elRxJRWYx03n3jwmGk/3G7IUSMMx4uqlxK1MLgXK4dy NGxK/+JV5oikiICQR18= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.com for dems.gov/SOA
	Received 603 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 603 octets ;; HEADER SECTION ;; id = 23118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8003955 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527223153 20240521213153 35808 dems.gov. JIIpx7f90Uvk1e7yZ2DkMRWwHu5s5MH8KmW0MyKn1q+UEHLVAAf8pLZbf+6yMaLrkSNUE7BEeCWO 2mP5bMmRwVWgtT2ePXRwA/wgBXwinNdG7elRxJRWYx03n3jwmGk/3G7IUSMMx4uqlxK1MLgXK4dy NGxK/+JV5oikiICQR18= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.net for dems.gov/SOA
	Received 603 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 603 octets ;; HEADER SECTION ;; id = 8673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8003955 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527223153 20240521213153 35808 dems.gov. JIIpx7f90Uvk1e7yZ2DkMRWwHu5s5MH8KmW0MyKn1q+UEHLVAAf8pLZbf+6yMaLrkSNUE7BEeCWO 2mP5bMmRwVWgtT2ePXRwA/wgBXwinNdG7elRxJRWYx03n3jwmGk/3G7IUSMMx4uqlxK1MLgXK4dy NGxK/+JV5oikiICQR18= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.org for dems.gov/A
	Received 590 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 590 octets ;; HEADER SECTION ;; id = 15936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dems.gov A RR has value 3.33.159.71
	dems.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= )`
	RRSIG=35808 and DNSKEY=35808 verifies the A RRset

dems.gov

	Query to oxygen.house.gov for dems.gov/A
	Received 237 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 237 octets ;; HEADER SECTION ;; id = 41291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen.house.gov is authoritative for dems.gov
	Found RRSIG signed by dems.gov zone
	Query to oxygen.house.gov for dems.gov/A
	Received 237 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 237 octets ;; HEADER SECTION ;; id = 36949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dems.gov A RR has value 3.33.159.71
	dems.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= )`
	RRSIG=35808 and DNSKEY=35808 verifies the A RRset

dems.gov

	Query to pdns109.ultradns.com for dems.gov/A
	Received 590 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 590 octets ;; HEADER SECTION ;; id = 44129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.com is authoritative for dems.gov
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.com for dems.gov/A
	Received 590 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 590 octets ;; HEADER SECTION ;; id = 16580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dems.gov A RR has value 3.33.159.71
	dems.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= )`
	RRSIG=35808 and DNSKEY=35808 verifies the A RRset

dems.gov

	Query to oxygen2.house.gov for dems.gov/A
	Received 237 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 237 octets ;; HEADER SECTION ;; id = 34665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen2.house.gov is authoritative for dems.gov
	Found RRSIG signed by dems.gov zone
	Query to oxygen2.house.gov for dems.gov/A
	Received 237 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 237 octets ;; HEADER SECTION ;; id = 31222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dems.gov A RR has value 3.33.159.71
	dems.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= )`
	RRSIG=35808 and DNSKEY=35808 verifies the A RRset

dems.gov

	Query to pdns109.ultradns.biz for dems.gov/A
	Received 590 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 590 octets ;; HEADER SECTION ;; id = 11223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.biz is authoritative for dems.gov
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.biz for dems.gov/A
	Received 590 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 590 octets ;; HEADER SECTION ;; id = 62669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dems.gov A RR has value 15.197.146.213
	dems.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= )`
	RRSIG=35808 and DNSKEY=35808 verifies the A RRset

dems.gov

	Query to pdns109.ultradns.net for dems.gov/A
	Received 590 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 590 octets ;; HEADER SECTION ;; id = 31888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.net is authoritative for dems.gov
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.net for dems.gov/A
	Received 590 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 590 octets ;; HEADER SECTION ;; id = 38386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dems.gov. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527213331 20240521213153 35808 dems.gov. EIUfl9Gch+3pHNL6n0v0LAe45Ko2q351ft1imGYMcCoaQf6BFFr5cpjXAsM1iB6eDz1gF7Smhuwf c3PezO5YYH6H8nimEOv9Tm59WUMErBtkG0w6ZSN5FxOZaEuQZLb0EcnPL2tN6g7XFSVLS+XmzAnl W69/gpOFGc8Pirr8248= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dems.gov A RR has value 15.197.146.213
	dems.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20240527213331 20240521213153 35808 dems.gov. IwIHJov8FXQLWqfBTrVbpMzoFGs8l2HnYY8OcJ+0HltYVfbsZvox/TOm0QLyHDMwAQ+Av4g9wsLt qTA3+pyrF6AzfI0edQOHISac4Q80Fj5PWo2/xnFTGSCSe9Dxc09yasL75iLstovWIO16eiwbiJTl erWcBuOjutEP4SV27xE= )`
	RRSIG=35808 and DNSKEY=35808 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dems.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: