DNSSEC Debugger

Domain Name:

Time: 2024-05-17 13:42:33 UTC

Analyzing DNSSEC problems for omb.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 30139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for omb.gov/A
	Received 617 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 617 octets ;; HEADER SECTION ;; id = 64253 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 49075 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to h.root-servers.net for gov/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 20508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 779 octets ;; HEADER SECTION ;; id = 56399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to a.ns.gov for omb.gov/A
	Received 703 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 703 octets ;; HEADER SECTION ;; id = 9342 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) omb.gov. 10800 IN NS ns1.max.gov. omb.gov. 10800 IN NS ns2.max.gov. omb.gov. 10800 IN NS ns3.max.gov. omb.gov. 10800 IN NS ns4.max.gov. omb.gov. 10800 IN NS ns5.max.gov. omb.gov. 10800 IN NS ns6.max.gov. omb.gov. 3600 IN DS ( 18099 13 2 738b2528eaf22c72b78a4ea27462d0e0560e6f6d26939329610d2f782af80580 ) omb.gov. 3600 IN DS ( 23050 13 2 04a785a6c0b45b61f2903b0da9372372d83ee2ddea57fe75ca1216d80c26da72 ) omb.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518144233 20240516124233 10104 gov. VOr1RNXhegKKbeH8/jVzYTrcjBvD45k5KEBXY9BJpHibamk2+xOmScLO5eP3ZlsK55VUQOa7Ss1T QWK3uS2wDHFXu6NundGs8r9DJ24rFGctLiCqeHmMK2rP24J9V581sVLx2NInCPkielivT9+s7Hi8 Qn2Totgb5fs6iOFJIpDvYio18qtklAp5AAqk7W5/uFHyPu2FAjBECIUz0HbdRw== ) ;; ADDITIONAL SECTION (13 records) ns1.max.gov. 3600 IN A 198.137.241.177 ns1.max.gov. 3600 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 3600 IN A 198.137.240.49 ns2.max.gov. 3600 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 3600 IN A 198.137.241.113 ns3.max.gov. 3600 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 3600 IN A 198.137.240.177 ns4.max.gov. 3600 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 3600 IN A 198.137.241.49 ns5.max.gov. 3600 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 3600 IN A 198.137.240.113 ns6.max.gov. 3600 IN AAAA 2620:10f:b000:206::113 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for omb.gov/DNSKEY
	Received 703 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 703 octets ;; HEADER SECTION ;; id = 57622 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) omb.gov. 10800 IN NS ns1.max.gov. omb.gov. 10800 IN NS ns2.max.gov. omb.gov. 10800 IN NS ns3.max.gov. omb.gov. 10800 IN NS ns4.max.gov. omb.gov. 10800 IN NS ns5.max.gov. omb.gov. 10800 IN NS ns6.max.gov. omb.gov. 3600 IN DS ( 18099 13 2 738b2528eaf22c72b78a4ea27462d0e0560e6f6d26939329610d2f782af80580 ) omb.gov. 3600 IN DS ( 23050 13 2 04a785a6c0b45b61f2903b0da9372372d83ee2ddea57fe75ca1216d80c26da72 ) omb.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518144233 20240516124233 10104 gov. VOr1RNXhegKKbeH8/jVzYTrcjBvD45k5KEBXY9BJpHibamk2+xOmScLO5eP3ZlsK55VUQOa7Ss1T QWK3uS2wDHFXu6NundGs8r9DJ24rFGctLiCqeHmMK2rP24J9V581sVLx2NInCPkielivT9+s7Hi8 Qn2Totgb5fs6iOFJIpDvYio18qtklAp5AAqk7W5/uFHyPu2FAjBECIUz0HbdRw== ) ;; ADDITIONAL SECTION (13 records) ns1.max.gov. 3600 IN A 198.137.241.177 ns1.max.gov. 3600 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 3600 IN A 198.137.240.49 ns2.max.gov. 3600 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 3600 IN A 198.137.241.113 ns3.max.gov. 3600 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 3600 IN A 198.137.240.177 ns4.max.gov. 3600 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 3600 IN A 198.137.241.49 ns5.max.gov. 3600 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 3600 IN A 198.137.240.113 ns6.max.gov. 3600 IN AAAA 2620:10f:b000:206::113 ;; { "EDNS-VERSION": 0 }
	Found child zone omb.gov

omb.gov

	Checking DS between gov and omb.gov
	Query to b.ns.gov for omb.gov/DS
	Received 327 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 327 octets ;; HEADER SECTION ;; id = 31037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN DS ;; ANSWER SECTION (3 records) omb.gov. 3600 IN DS ( 18099 13 2 738b2528eaf22c72b78a4ea27462d0e0560e6f6d26939329610d2f782af80580 ) omb.gov. 3600 IN DS ( 23050 13 2 04a785a6c0b45b61f2903b0da9372372d83ee2ddea57fe75ca1216d80c26da72 ) omb.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518144233 20240516124233 10104 gov. VOr1RNXhegKKbeH8/jVzYTrcjBvD45k5KEBXY9BJpHibamk2+xOmScLO5eP3ZlsK55VUQOa7Ss1T QWK3uS2wDHFXu6NundGs8r9DJ24rFGctLiCqeHmMK2rP24J9V581sVLx2NInCPkielivT9+s7Hi8 Qn2Totgb5fs6iOFJIpDvYio18qtklAp5AAqk7W5/uFHyPu2FAjBECIUz0HbdRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for omb.gov in the gov zone
	DS=18099/SHA-256 has algorithm ECDSAP256SHA256
	DS=23050/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`omb.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518144233 20240516124233 10104 gov. VOr1RNXhegKKbeH8/jVzYTrcjBvD45k5KEBXY9BJpHibamk2+xOmScLO5eP3ZlsK55VUQOa7Ss1T QWK3uS2wDHFXu6NundGs8r9DJ24rFGctLiCqeHmMK2rP24J9V581sVLx2NInCPkielivT9+s7Hi8 Qn2Totgb5fs6iOFJIpDvYio18qtklAp5AAqk7W5/uFHyPu2FAjBECIUz0HbdRw== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=18099/SHA-256 is now in the chain-of-trust
	DS=23050/SHA-256 is now in the chain-of-trust
	`omb.gov. 3600 IN DS ( 18099 13 2 738b2528eaf22c72b78a4ea27462d0e0560e6f6d26939329610d2f782af80580 )`
	`omb.gov. 3600 IN DS ( 23050 13 2 04a785a6c0b45b61f2903b0da9372372d83ee2ddea57fe75ca1216d80c26da72 )`
	Query to ns6.max.gov for omb.gov/DNSKEY
	Received 482 bytes from 198.137.240.113
	;; Response received from [198.137.240.113] 482 octets ;; HEADER SECTION ;; id = 35415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN DNSKEY ;; ANSWER SECTION (5 records) omb.gov. 60 IN DNSKEY ( 256 3 13 VYLwKj9A6CnwVe2wizobb9alf9YWg+6GJ7ugen7YTi56xDpRtCTUfzhFXDMS+C0na3V50sJ2yam5 i5xZ94guoQ== ) ; Key ID = 58977 omb.gov. 60 IN DNSKEY ( 257 3 13 5vXKzxvIRyJnqeQpmRPiuztv6Kn2vMKZnmQ68EGirdo1C216Rq4SNlDAsLAIZ2JU+yHQV04CjkLi KPt6KSWp8g== ) ; Key ID = 18099 omb.gov. 60 IN DNSKEY ( 257 3 13 uvN/c+c9ZRg8KRupnPhk1+b4gHUVHyaF0p4Hl0Y035s0mTLUNm0pB7QFtm9D2z1GBFqy9Al4/OzH gw6FDo19wQ== ) ; Key ID = 23050 omb.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240527110004 20240517100004 18099 omb.gov. cOyYnSLeMp1ACRAejIv5H21YxSQnzhTm3VybqR/UGmnTTLBN+rwJS+gj+VFgvT//p0dfliSs+Qw2 /mZr941jzQ== ) omb.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240527110004 20240517100004 58977 omb.gov. IH/I8iJrNjUvyOdp0mX/g8ku5VNaF36DqnGCluMsRWK112j8TPufNEWT0PWkvtPvrE0+sRo0UjFv 7Anv9ifMqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for omb.gov
	`omb.gov. 60 IN DNSKEY ( 256 3 13 VYLwKj9A6CnwVe2wizobb9alf9YWg+6GJ7ugen7YTi56xDpRtCTUfzhFXDMS+C0na3V50sJ2yam5 i5xZ94guoQ== ) ; Key ID = 58977`
	`omb.gov. 60 IN DNSKEY ( 257 3 13 5vXKzxvIRyJnqeQpmRPiuztv6Kn2vMKZnmQ68EGirdo1C216Rq4SNlDAsLAIZ2JU+yHQV04CjkLi KPt6KSWp8g== ) ; Key ID = 18099`
	`omb.gov. 60 IN DNSKEY ( 257 3 13 uvN/c+c9ZRg8KRupnPhk1+b4gHUVHyaF0p4Hl0Y035s0mTLUNm0pB7QFtm9D2z1GBFqy9Al4/OzH gw6FDo19wQ== ) ; Key ID = 23050`
	DNSKEY=18099/SEP is now in the chain-of-trust
	DS=18099/SHA-256 verifies DNSKEY=18099/SEP
	DNSKEY=23050/SEP is now in the chain-of-trust
	DS=23050/SHA-256 verifies DNSKEY=23050/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`omb.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240527110004 20240517100004 18099 omb.gov. cOyYnSLeMp1ACRAejIv5H21YxSQnzhTm3VybqR/UGmnTTLBN+rwJS+gj+VFgvT//p0dfliSs+Qw2 /mZr941jzQ== )`
	`omb.gov. 60 IN RRSIG ( DNSKEY 13 2 60 20240527110004 20240517100004 58977 omb.gov. IH/I8iJrNjUvyOdp0mX/g8ku5VNaF36DqnGCluMsRWK112j8TPufNEWT0PWkvtPvrE0+sRo0UjFv 7Anv9ifMqg== )`
	RRSIG=18099 and DNSKEY=18099/SEP verifies the DNSKEY RRset
	RRSIG=58977 and DNSKEY=58977 verifies the DNSKEY RRset
	DNSKEY=58977 is now in the chain-of-trust
	Query to ns6.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.240.113
	;; Response received from [198.137.240.113] 1149 octets ;; HEADER SECTION ;; id = 32627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	ns6.max.gov is authoritative for omb.gov
	Found RRSIG signed by omb.gov zone
	Query to ns5.max.gov for omb.gov/SOA
	Received 1180 bytes from 198.137.241.49
	;; Response received from [198.137.241.49] 1180 octets ;; HEADER SECTION ;; id = 8692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN SOA ;; ANSWER SECTION (2 records) omb.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024051701 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) omb.gov. 60 IN RRSIG ( SOA 13 2 60 20240527110004 20240517100004 58977 omb.gov. kNYKduMVHZtgkGgvHb+nk+kmQxlCz30r9eHcDJOCKf2Sg7xQMqU2Rl9Hq4Orfg8y2Jjl+ChyHDfV 10SU+6PRSw== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.max.gov for omb.gov/SOA
	Received 1180 bytes from 198.137.240.49
	;; Response received from [198.137.240.49] 1180 octets ;; HEADER SECTION ;; id = 14299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN SOA ;; ANSWER SECTION (2 records) omb.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024051701 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) omb.gov. 60 IN RRSIG ( SOA 13 2 60 20240527110004 20240517100004 58977 omb.gov. kNYKduMVHZtgkGgvHb+nk+kmQxlCz30r9eHcDJOCKf2Sg7xQMqU2Rl9Hq4Orfg8y2Jjl+ChyHDfV 10SU+6PRSw== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.max.gov for omb.gov/SOA
	Received 1180 bytes from 198.137.241.177
	;; Response received from [198.137.241.177] 1180 octets ;; HEADER SECTION ;; id = 10851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN SOA ;; ANSWER SECTION (2 records) omb.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024051701 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) omb.gov. 60 IN RRSIG ( SOA 13 2 60 20240527110004 20240517100004 58977 omb.gov. kNYKduMVHZtgkGgvHb+nk+kmQxlCz30r9eHcDJOCKf2Sg7xQMqU2Rl9Hq4Orfg8y2Jjl+ChyHDfV 10SU+6PRSw== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.max.gov for omb.gov/SOA
	Received 1180 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 1180 octets ;; HEADER SECTION ;; id = 63019 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN SOA ;; ANSWER SECTION (2 records) omb.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024051701 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) omb.gov. 60 IN RRSIG ( SOA 13 2 60 20240527110004 20240517100004 58977 omb.gov. kNYKduMVHZtgkGgvHb+nk+kmQxlCz30r9eHcDJOCKf2Sg7xQMqU2Rl9Hq4Orfg8y2Jjl+ChyHDfV 10SU+6PRSw== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns4.max.gov for omb.gov/SOA
	Received 1180 bytes from 198.137.240.177
	;; Response received from [198.137.240.177] 1180 octets ;; HEADER SECTION ;; id = 35735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN SOA ;; ANSWER SECTION (2 records) omb.gov. 60 IN SOA ( max.gov. maxsupport.max.gov. 2024051701 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) omb.gov. 60 IN RRSIG ( SOA 13 2 60 20240527110004 20240517100004 58977 omb.gov. kNYKduMVHZtgkGgvHb+nk+kmQxlCz30r9eHcDJOCKf2Sg7xQMqU2Rl9Hq4Orfg8y2Jjl+ChyHDfV 10SU+6PRSw== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns6.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.240.113
	;; Response received from [198.137.240.113] 1149 octets ;; HEADER SECTION ;; id = 63502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	omb.gov A RR has value 192.0.66.168
	Found 1 RRSIGs over A RRset
	`omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== )`
	RRSIG=58977 and DNSKEY=58977 verifies the A RRset

omb.gov

	Query to ns2.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.240.49
	;; Response received from [198.137.240.49] 1149 octets ;; HEADER SECTION ;; id = 26759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	ns2.max.gov is authoritative for omb.gov
	Found RRSIG signed by omb.gov zone
	Query to ns2.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.240.49
	;; Response received from [198.137.240.49] 1149 octets ;; HEADER SECTION ;; id = 1769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	omb.gov A RR has value 192.0.66.168
	Found 1 RRSIGs over A RRset
	`omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== )`
	RRSIG=58977 and DNSKEY=58977 verifies the A RRset

omb.gov

	Query to ns5.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.241.49
	;; Response received from [198.137.241.49] 1149 octets ;; HEADER SECTION ;; id = 41288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	ns5.max.gov is authoritative for omb.gov
	Found RRSIG signed by omb.gov zone
	Query to ns5.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.241.49
	;; Response received from [198.137.241.49] 1149 octets ;; HEADER SECTION ;; id = 1814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	omb.gov A RR has value 192.0.66.168
	Found 1 RRSIGs over A RRset
	`omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== )`
	RRSIG=58977 and DNSKEY=58977 verifies the A RRset

omb.gov

	Query to ns1.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.241.177
	;; Response received from [198.137.241.177] 1149 octets ;; HEADER SECTION ;; id = 60208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	ns1.max.gov is authoritative for omb.gov
	Found RRSIG signed by omb.gov zone
	Query to ns1.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.241.177
	;; Response received from [198.137.241.177] 1149 octets ;; HEADER SECTION ;; id = 61769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	omb.gov A RR has value 192.0.66.168
	Found 1 RRSIGs over A RRset
	`omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== )`
	RRSIG=58977 and DNSKEY=58977 verifies the A RRset

omb.gov

	Query to ns4.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.240.177
	;; Response received from [198.137.240.177] 1149 octets ;; HEADER SECTION ;; id = 8735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	ns4.max.gov is authoritative for omb.gov
	Found RRSIG signed by omb.gov zone
	Query to ns4.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.240.177
	;; Response received from [198.137.240.177] 1149 octets ;; HEADER SECTION ;; id = 15514 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	omb.gov A RR has value 192.0.66.168
	Found 1 RRSIGs over A RRset
	`omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== )`
	RRSIG=58977 and DNSKEY=58977 verifies the A RRset

omb.gov

	Query to ns3.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 1149 octets ;; HEADER SECTION ;; id = 22415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	ns3.max.gov is authoritative for omb.gov
	Found RRSIG signed by omb.gov zone
	Query to ns3.max.gov for omb.gov/A
	Received 1149 bytes from 198.137.241.113
	;; Response received from [198.137.241.113] 1149 octets ;; HEADER SECTION ;; id = 25784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; omb.gov. IN A ;; ANSWER SECTION (2 records) omb.gov. 60 IN A 192.0.66.168 omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== ) ;; AUTHORITY SECTION (7 records) omb.gov. 60 IN NS ns5.max.gov. omb.gov. 60 IN NS ns2.max.gov. omb.gov. 60 IN NS ns1.max.gov. omb.gov. 60 IN NS ns6.max.gov. omb.gov. 60 IN NS ns3.max.gov. omb.gov. 60 IN NS ns4.max.gov. omb.gov. 60 IN RRSIG ( NS 13 2 60 20240527110004 20240517100004 58977 omb.gov. ppK3bwO0NsWy+z4Yo5+Q/e9N+mSxU1AN1lS6YEdrlqZwAtQ6aTz+Rq7WKwiFCHY/hTkP480seN9v gPkQmHPCNw== ) ;; ADDITIONAL SECTION (18 records) ns1.max.gov. 60 IN A 198.137.241.177 ns2.max.gov. 60 IN A 198.137.240.49 ns3.max.gov. 60 IN A 198.137.241.113 ns4.max.gov. 60 IN A 198.137.240.177 ns5.max.gov. 60 IN A 198.137.241.49 ns6.max.gov. 60 IN A 198.137.240.113 ns1.max.gov. 60 IN AAAA 2620:10f:b001:406::177 ns2.max.gov. 60 IN AAAA 2620:10f:b000:6::49 ns3.max.gov. 60 IN AAAA 2620:10f:b001:206::113 ns4.max.gov. 60 IN AAAA 2620:10f:b000:406::177 ns5.max.gov. 60 IN AAAA 2620:10f:b001:6::49 ns6.max.gov. 60 IN AAAA 2620:10f:b000:206::113 ns1.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. xX0vJeGCVEHUp238jhk6vZYlDtZsGtMVXaUfmyo94QttUABgzD9amgitV7sgg2pUS3UwetwWsDIb XS0isd9BZg== ) ns1.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. 47Sfbc+f4JS2kGdHjV+DuNUfSvHsAXhOhG+py0aezScV6/PR5ps9f9IJuhrFmUVfJd+VGsJAtIwa KyrKPleqlQ== ) ns2.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. JfTLg1wRpGSJUyd25f3Q1wcYBol3bHZ3x7lwsZNSXM0sEqUjJTNXbnQ/Xnj0E/u9I6ayw88O3tZk qPPwsmiQOQ== ) ns2.max.gov. 60 IN RRSIG ( AAAA 13 3 60 20240527110008 20240517100008 46704 max.gov. kR14vBR9PZp41srzmYFVr5X3y89isVwATRrKktAcHQ8KXTn/U7QnJh29xKxBXEEqJWh9cipCsAkT /YiTi8gPjw== ) ns3.max.gov. 60 IN RRSIG ( A 13 3 60 20240527110008 20240517100008 46704 max.gov. CLZt9CGWuLiUg9WKORy50ImVpnLjEy5VNwDVfoPn9MEh9+xHIY7wzZgLlB0x2ExHDZVPzXhbisTb M3u/z4jkyg== ) ;; { "EDNS-VERSION": 0 }
	omb.gov A RR has value 192.0.66.168
	Found 1 RRSIGs over A RRset
	`omb.gov. 60 IN RRSIG ( A 13 2 60 20240527110004 20240517100004 58977 omb.gov. F+mtCDVndh7+Hyn5gxYUQF0epvvTeftwzUokQqw/JjeYC7sRyKL9q8ia2W04ZvEELTtRPmh9waha E8nvpNG0yA== )`
	RRSIG=58977 and DNSKEY=58977 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test omb.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: