DNSSEC Debugger - AMERICA.GOV

Domain Name:

Time: 2026-03-28 21:30:07 UTC

Analyzing DNSSEC problems for AMERICA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 17113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 65535, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for AMERICA.GOV/A
	Received 618 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 618 octets ;; HEADER SECTION ;; id = 33904 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260410170000 20260328160000 21831 . i4fu0tUtQiZVn9RsbYkMIQsF/pusL4kHi8t8cPKdL3wakKdOpm10/3hqs3yj+oYy/6/bfKn9zb46 sWJRfbWbdwN6oWeYcNVbsGu7yV9Ose6dGVc1PlfVlYIN1bJrvXxrbLVm3m9EZiaWKAkGnYoiyBhd kzLPQC9SrBt33Wc29OAV8dC96PJv3dQVTe9eBi6NnKcNyuDdB8PLKFMeUfmQA6sIJ+8hDU8H173a Lap78a12l4MTAsxy0Y8ydnmA5CEsNGcbvchQEkgX/2zo8Ecn92jv2r2G0/aof+wG6OGPdaManCUf OYod2ni0+X74BSljTiKSJ3Fcidd2ZOpqB6ebMQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 50862 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260410170000 20260328160000 21831 . i4fu0tUtQiZVn9RsbYkMIQsF/pusL4kHi8t8cPKdL3wakKdOpm10/3hqs3yj+oYy/6/bfKn9zb46 sWJRfbWbdwN6oWeYcNVbsGu7yV9Ose6dGVc1PlfVlYIN1bJrvXxrbLVm3m9EZiaWKAkGnYoiyBhd kzLPQC9SrBt33Wc29OAV8dC96PJv3dQVTe9eBi6NnKcNyuDdB8PLKFMeUfmQA6sIJ+8hDU8H173a Lap78a12l4MTAsxy0Y8ydnmA5CEsNGcbvchQEkgX/2zo8Ecn92jv2r2G0/aof+wG6OGPdaManCUf OYod2ni0+X74BSljTiKSJ3Fcidd2ZOpqB6ebMQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 370 octets ;; HEADER SECTION ;; id = 60079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260410170000 20260328160000 21831 . i4fu0tUtQiZVn9RsbYkMIQsF/pusL4kHi8t8cPKdL3wakKdOpm10/3hqs3yj+oYy/6/bfKn9zb46 sWJRfbWbdwN6oWeYcNVbsGu7yV9Ose6dGVc1PlfVlYIN1bJrvXxrbLVm3m9EZiaWKAkGnYoiyBhd kzLPQC9SrBt33Wc29OAV8dC96PJv3dQVTe9eBi6NnKcNyuDdB8PLKFMeUfmQA6sIJ+8hDU8H173a Lap78a12l4MTAsxy0Y8ydnmA5CEsNGcbvchQEkgX/2zo8Ecn92jv2r2G0/aof+wG6OGPdaManCUf OYod2ni0+X74BSljTiKSJ3Fcidd2ZOpqB6ebMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260410170000 20260328160000 21831 . i4fu0tUtQiZVn9RsbYkMIQsF/pusL4kHi8t8cPKdL3wakKdOpm10/3hqs3yj+oYy/6/bfKn9zb46 sWJRfbWbdwN6oWeYcNVbsGu7yV9Ose6dGVc1PlfVlYIN1bJrvXxrbLVm3m9EZiaWKAkGnYoiyBhd kzLPQC9SrBt33Wc29OAV8dC96PJv3dQVTe9eBi6NnKcNyuDdB8PLKFMeUfmQA6sIJ+8hDU8H173a Lap78a12l4MTAsxy0Y8ydnmA5CEsNGcbvchQEkgX/2zo8Ecn92jv2r2G0/aof+wG6OGPdaManCUf OYod2ni0+X74BSljTiKSJ3Fcidd2ZOpqB6ebMQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 56116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for AMERICA.GOV/A
	Received 413 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 413 octets ;; HEADER SECTION ;; id = 5003 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) AMERICA.GOV. 10800 IN NS a1-63.akam.net. AMERICA.GOV. 10800 IN NS a14-64.akam.net. AMERICA.GOV. 10800 IN NS a26-65.akam.net. AMERICA.GOV. 10800 IN NS a3-66.akam.net. AMERICA.GOV. 10800 IN NS a8-67.akam.net. AMERICA.GOV. 10800 IN NS a9-64.akam.net. AMERICA.GOV. 3600 IN DS ( 44872 8 2 d315baccac89452bce016efc7718630db44f77b9f0369390d1077e182c12815e ) AMERICA.GOV. 3600 IN DS ( 5581 8 2 35c5fca162ce5ca674eef7aa39b82529ef3ece5f597899e72f0d4632302b9853 ) AMERICA.GOV. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c ) AMERICA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260329223008 20260327203008 35496 gov. pkgl2OXk0+9PJ88tdxvMJ5n2IVj7Bbw4pksuKBlo6f5ArXUKUycREAayZHDLMwNSoSkY2jJBfU6m bEdF1k7xxw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for AMERICA.GOV/DNSKEY
	Received 413 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 413 octets ;; HEADER SECTION ;; id = 8316 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) AMERICA.GOV. 10800 IN NS a1-63.akam.net. AMERICA.GOV. 10800 IN NS a14-64.akam.net. AMERICA.GOV. 10800 IN NS a26-65.akam.net. AMERICA.GOV. 10800 IN NS a3-66.akam.net. AMERICA.GOV. 10800 IN NS a8-67.akam.net. AMERICA.GOV. 10800 IN NS a9-64.akam.net. AMERICA.GOV. 3600 IN DS ( 44872 8 2 d315baccac89452bce016efc7718630db44f77b9f0369390d1077e182c12815e ) AMERICA.GOV. 3600 IN DS ( 5581 8 2 35c5fca162ce5ca674eef7aa39b82529ef3ece5f597899e72f0d4632302b9853 ) AMERICA.GOV. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c ) AMERICA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260329223008 20260327203008 35496 gov. Vs/2s6ZIdn18hcpEZ9MCWddlSKkr2tTPs4Y3pX0uAghSb2j26ve44X6vfCobx9bV4hVsE6JA60fH WrRtTSMQtQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone AMERICA.GOV

AMERICA.GOV

	Checking DS between GOV and AMERICA.GOV
	Query to c.ns.GOV for AMERICA.GOV/DS
	Received 283 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 283 octets ;; HEADER SECTION ;; id = 18034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN DS ;; ANSWER SECTION (4 records) AMERICA.GOV. 3600 IN DS ( 44872 8 2 d315baccac89452bce016efc7718630db44f77b9f0369390d1077e182c12815e ) AMERICA.GOV. 3600 IN DS ( 5581 8 2 35c5fca162ce5ca674eef7aa39b82529ef3ece5f597899e72f0d4632302b9853 ) AMERICA.GOV. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c ) AMERICA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260329223008 20260327203008 35496 gov. QsQw+vACUaniAxmmawBgWF+tHL8ZYhB1hdLPeJyEO93Q/xB56ckJ9QbT/3AiPBSydpcqzHIrdp3a oyMXkS0DbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for AMERICA.GOV in the GOV zone
	DS=44872/SHA-256 has algorithm RSASHA256
	DS=5581/SHA-256 has algorithm RSASHA256
	DS=9397/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AMERICA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260329223008 20260327203008 35496 gov. QsQw+vACUaniAxmmawBgWF+tHL8ZYhB1hdLPeJyEO93Q/xB56ckJ9QbT/3AiPBSydpcqzHIrdp3a oyMXkS0DbA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=44872/SHA-256 is now in the chain-of-trust
	DS=5581/SHA-256 is now in the chain-of-trust
	DS=9397/SHA-256 is now in the chain-of-trust
	`AMERICA.GOV. 3600 IN DS ( 44872 8 2 d315baccac89452bce016efc7718630db44f77b9f0369390d1077e182c12815e )`
	`AMERICA.GOV. 3600 IN DS ( 5581 8 2 35c5fca162ce5ca674eef7aa39b82529ef3ece5f597899e72f0d4632302b9853 )`
	`AMERICA.GOV. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c )`
	Query to a3-66.akam.net for AMERICA.GOV/DNSKEY
	Received 2317 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 2317 octets ;; HEADER SECTION ;; id = 45957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) AMERICA.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbTIkAi26gOuetvXV7cGFBBqg08WzST7XkgrOLLgfBZPBr4QMLv3oIn/+HUfTunLh8gtdxwj AEApPvNOPCNKhlvfDoeC18x74PGLlJ3uxnT+X/lffM13lRwbE6aKn93g3TOpxyjrb7PU0xBEaChE oZsN+4kDBG96amOAicj6B96nXoUa3XsRpF+i6s+TBVwOVmM+ClxtZaAUtAtiBoPux16rzPgaVeBN K9Z/2bl/35wYB0pmfTsysW3kIvPibO28dcgpayJtH9Ia8sS7x85veWfyGsq7UO+mEkV2XG6IzJGF 8rb5snVRriNDdRzjNquuw+EVtW/YMFdG+5+etB+OMrE= ) ; keytag 42294 AMERICA.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAbBs1YyMj4GUDOLs8cgiSZkVnZB3h2mXBL2nDO/w6aBxYKzzHSRhAFMzCmcpAY2jmSz7Zqb2 SlUtygGYeOpeH2F/ytnuMPONV/8pohiUByD1lR7oUksF9qY4RaB/eLxZLrk+OiInsqRc+4nQZxl2 eSPBZpE+ZHD6ckIbivspGSdld7Si2f91SFdW7xnKPGqM5h35A6K6EFsZpVB1qJ46BFE8T3cKZGl+ FD9MdGXYd+iePLfgdkSB5qGPJ0YzttwJMph007XfZEiOFKITYlW37BbeZYhb0hfDB/rm4fzT3uZq lD103AfZrKhS0t/olFXYWcETyXxlZIQEDsbnnma655s= ) ; keytag 44872 AMERICA.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbkF88vbWiHiW4LraIUk3rs+ZMG96btRVLDxq6eFAW5nYqH5Biy3rQwx0d0YiPB5IltX05JV cUFPynxcvXDpAInukx9rZkwH5+T6n3o3B0k/L8K8HRhE8feF/d/qRUZcIR4Pw7lM/yQzBshOZgRV LIg5863+nxJc9gLY0vw3RaQlK+wMNYpLCu6GHVscBhmg0ilgK5wA+h3oMgQLT+vxLYAaAEq1AO1Z uvn1IRXsLOHhgmcnu90Ro42t0aL3OH75uB+5pvtbTe7w/7Ed/mEmsG1cgJ4i8L9I5JirUgqo7Pil /V4VoMzopyF5s9EUXWqA52i9qkJ1zCuSwj0WwXHLa28= ) ; keytag 2646 AMERICA.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbHzcyWfCjsJJrNKb4gXtkjxMI9btrS/YqxmTnfz6/V6FB/+DrHtHJHftL7RO4Tvd/22VcsC Dt6FN3Kfz056rECYD+gsPFqMrl8m8H52JZirJWzNatu4jx8r8k7puF6gMr9Lp2EHfao05e9/DPoA Wzl14zNoIPPZfbTHBBI97T8udbOm4nGrAPrzhBVHZOiQu02rTOvsGoeB3r0ITWSqOqwih4a856WP rNE5f/WgLIIQ/bsjcvJPhqrcYz1H7ROxBeqq5cQzREPfwdAM/Gcl0nRmH9krn9myVbFJEj/UlQPv Rb45K92u0ob63ZomViHMiBeEt0QJIyyXAr+ubTRK1QE= ) ; keytag 61824 AMERICA.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAcAx8UQhzWBrmqMM+0Tc1HpJOOIu7XjGPZpGv5jHbFhUbBaMLFZQrt8Qyoxsd+KdAaOFfY1o dBP+KhoiaDXY0qifaojQ+qdav1rg/NpjoY6FANZFlmTFlko7iLePE6xRO3Y5hgfwKXL2N+PZ5K2C uOUf39xTsYXUXM7yGcgtDFXZ4DvZMP+6XNq8t0RxFANnMZEwDcU09c0gr72GI9ETu+n+zROrDYf4 75Xxjj3xWZHerH0wmyU4arQVS4JEYCNRZ5r1ZydM7QLY/WYBaIgYtHj+QxQbnmE2bt6aztBt5UyX ifhyyfaeEqRdnLyQBr4DMjAeVmFaSkVjXHTm3pPmiFs= ) ; keytag 5581 AMERICA.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218143332 20260218142958 5581 america.gov. K7TD9B6xFjtXzos/tvEzUPgsUiKCNCZWs2b++jhrcF9G07wd5b1Wqrx9goGyVlV+qTcN39x62ukC LMJVFEucQsxTI1Uga6jnhGJRPH9q+2zscuJXqxvp+niPtautLEc3DBY8QVxGiRltDcZu1imAoQAk F0J8QAyMFEpr2MIHJGWQqtV69P6tp25Zhqg6sPhTJ4+x1aj/7u5V5Nn0nFrdyk45Qo+6OtVvasBP VDoTM9VGIp9gRg7sR7kHU14X9HkHvVdclgPyq2VMjdC2HoGsyeCMcs/2NH5d+5tXkJt+WA0qNbX7 TflqXJv0u7GYdRN29kn3Dp2orppHoBwKM6F3dQ== ) AMERICA.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218143332 20260218142958 42294 america.gov. OFwoN1II6yha6M0xZHbIQQ7fwebnT+eOzAj8ukx6RN6IEQ8CWvLgtQb2MTmcd/hAXf/KDjPAZqrp AzpOPHS1Mc/9GBA5CfT9RpwMbqid07RJyCgSxp5Vc2JqqHeN7AD4mCUH/gc1iMzenk/w3QWCtnuZ 4Qo/nvsG05ofwrqtfvqmE9YhG9gBWBGUHSYLxMvqT65WUtjs8lCYaeu7AvB5XzYsmwBq5gfVr0Jw arvdU3SM0wZV/b+VWbseoZrX9+vXV562aKvJTgq9FSjUAvL0Gn2n30pjRJLrAgeB+AGlyUobTJUT SjL3fH8t6F9Z8IESl7jKJhcgx+CIT3VFGM0kFA== ) AMERICA.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218143332 20260218142958 44872 america.gov. JQcKoJB089mabBCXkZaurQyn4O8dh75+dxnaWEZi15MRJC3V0qPA2BOwVBZcfDpEm+DrlxBWOCmy 3kg64U+snvEI+aI/Ga48Pevo65tU45lTH7OpcJKoTjsa1WMOcBz04uGPABJuyNKtb+3AIXOP7vgz zNNnRqI7Q5lEI7SdKqOdiAujgKWoyM9C6XidSMnOr6XrV/VJU+8wU4YefpfUhXq22xCIE4l9hjib wRstkTzx5vMfwG72pU++6nXuz8ODr8q7nqGFCUUsJWsZJArw2mdRxsrDXSkCCLgxyqeG+XQbp5vx um44sOtv7ILRiePhfZqDQshuNxNFaDRDSBwG9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for AMERICA.GOV
	`AMERICA.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbTIkAi26gOuetvXV7cGFBBqg08WzST7XkgrOLLgfBZPBr4QMLv3oIn/+HUfTunLh8gtdxwj AEApPvNOPCNKhlvfDoeC18x74PGLlJ3uxnT+X/lffM13lRwbE6aKn93g3TOpxyjrb7PU0xBEaChE oZsN+4kDBG96amOAicj6B96nXoUa3XsRpF+i6s+TBVwOVmM+ClxtZaAUtAtiBoPux16rzPgaVeBN K9Z/2bl/35wYB0pmfTsysW3kIvPibO28dcgpayJtH9Ia8sS7x85veWfyGsq7UO+mEkV2XG6IzJGF 8rb5snVRriNDdRzjNquuw+EVtW/YMFdG+5+etB+OMrE= ) ; keytag 42294`
	`AMERICA.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAbBs1YyMj4GUDOLs8cgiSZkVnZB3h2mXBL2nDO/w6aBxYKzzHSRhAFMzCmcpAY2jmSz7Zqb2 SlUtygGYeOpeH2F/ytnuMPONV/8pohiUByD1lR7oUksF9qY4RaB/eLxZLrk+OiInsqRc+4nQZxl2 eSPBZpE+ZHD6ckIbivspGSdld7Si2f91SFdW7xnKPGqM5h35A6K6EFsZpVB1qJ46BFE8T3cKZGl+ FD9MdGXYd+iePLfgdkSB5qGPJ0YzttwJMph007XfZEiOFKITYlW37BbeZYhb0hfDB/rm4fzT3uZq lD103AfZrKhS0t/olFXYWcETyXxlZIQEDsbnnma655s= ) ; keytag 44872`
	`AMERICA.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbkF88vbWiHiW4LraIUk3rs+ZMG96btRVLDxq6eFAW5nYqH5Biy3rQwx0d0YiPB5IltX05JV cUFPynxcvXDpAInukx9rZkwH5+T6n3o3B0k/L8K8HRhE8feF/d/qRUZcIR4Pw7lM/yQzBshOZgRV LIg5863+nxJc9gLY0vw3RaQlK+wMNYpLCu6GHVscBhmg0ilgK5wA+h3oMgQLT+vxLYAaAEq1AO1Z uvn1IRXsLOHhgmcnu90Ro42t0aL3OH75uB+5pvtbTe7w/7Ed/mEmsG1cgJ4i8L9I5JirUgqo7Pil /V4VoMzopyF5s9EUXWqA52i9qkJ1zCuSwj0WwXHLa28= ) ; keytag 2646`
	`AMERICA.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbHzcyWfCjsJJrNKb4gXtkjxMI9btrS/YqxmTnfz6/V6FB/+DrHtHJHftL7RO4Tvd/22VcsC Dt6FN3Kfz056rECYD+gsPFqMrl8m8H52JZirJWzNatu4jx8r8k7puF6gMr9Lp2EHfao05e9/DPoA Wzl14zNoIPPZfbTHBBI97T8udbOm4nGrAPrzhBVHZOiQu02rTOvsGoeB3r0ITWSqOqwih4a856WP rNE5f/WgLIIQ/bsjcvJPhqrcYz1H7ROxBeqq5cQzREPfwdAM/Gcl0nRmH9krn9myVbFJEj/UlQPv Rb45K92u0ob63ZomViHMiBeEt0QJIyyXAr+ubTRK1QE= ) ; keytag 61824`
	`AMERICA.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAcAx8UQhzWBrmqMM+0Tc1HpJOOIu7XjGPZpGv5jHbFhUbBaMLFZQrt8Qyoxsd+KdAaOFfY1o dBP+KhoiaDXY0qifaojQ+qdav1rg/NpjoY6FANZFlmTFlko7iLePE6xRO3Y5hgfwKXL2N+PZ5K2C uOUf39xTsYXUXM7yGcgtDFXZ4DvZMP+6XNq8t0RxFANnMZEwDcU09c0gr72GI9ETu+n+zROrDYf4 75Xxjj3xWZHerH0wmyU4arQVS4JEYCNRZ5r1ZydM7QLY/WYBaIgYtHj+QxQbnmE2bt6aztBt5UyX ifhyyfaeEqRdnLyQBr4DMjAeVmFaSkVjXHTm3pPmiFs= ) ; keytag 5581`
	DNSKEY=44872/SEP is now in the chain-of-trust
	DS=44872/SHA-256 verifies DNSKEY=44872/SEP
	DNSKEY=5581/SEP is now in the chain-of-trust
	DS=5581/SHA-256 verifies DNSKEY=5581/SEP
	DS=9397/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`AMERICA.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218143332 20260218142958 5581 america.gov. K7TD9B6xFjtXzos/tvEzUPgsUiKCNCZWs2b++jhrcF9G07wd5b1Wqrx9goGyVlV+qTcN39x62ukC LMJVFEucQsxTI1Uga6jnhGJRPH9q+2zscuJXqxvp+niPtautLEc3DBY8QVxGiRltDcZu1imAoQAk F0J8QAyMFEpr2MIHJGWQqtV69P6tp25Zhqg6sPhTJ4+x1aj/7u5V5Nn0nFrdyk45Qo+6OtVvasBP VDoTM9VGIp9gRg7sR7kHU14X9HkHvVdclgPyq2VMjdC2HoGsyeCMcs/2NH5d+5tXkJt+WA0qNbX7 TflqXJv0u7GYdRN29kn3Dp2orppHoBwKM6F3dQ== )`
	`AMERICA.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218143332 20260218142958 42294 america.gov. OFwoN1II6yha6M0xZHbIQQ7fwebnT+eOzAj8ukx6RN6IEQ8CWvLgtQb2MTmcd/hAXf/KDjPAZqrp AzpOPHS1Mc/9GBA5CfT9RpwMbqid07RJyCgSxp5Vc2JqqHeN7AD4mCUH/gc1iMzenk/w3QWCtnuZ 4Qo/nvsG05ofwrqtfvqmE9YhG9gBWBGUHSYLxMvqT65WUtjs8lCYaeu7AvB5XzYsmwBq5gfVr0Jw arvdU3SM0wZV/b+VWbseoZrX9+vXV562aKvJTgq9FSjUAvL0Gn2n30pjRJLrAgeB+AGlyUobTJUT SjL3fH8t6F9Z8IESl7jKJhcgx+CIT3VFGM0kFA== )`
	`AMERICA.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218143332 20260218142958 44872 america.gov. JQcKoJB089mabBCXkZaurQyn4O8dh75+dxnaWEZi15MRJC3V0qPA2BOwVBZcfDpEm+DrlxBWOCmy 3kg64U+snvEI+aI/Ga48Pevo65tU45lTH7OpcJKoTjsa1WMOcBz04uGPABJuyNKtb+3AIXOP7vgz zNNnRqI7Q5lEI7SdKqOdiAujgKWoyM9C6XidSMnOr6XrV/VJU+8wU4YefpfUhXq22xCIE4l9hjib wRstkTzx5vMfwG72pU++6nXuz8ODr8q7nqGFCUUsJWsZJArw2mdRxsrDXSkCCLgxyqeG+XQbp5vx um44sOtv7ILRiePhfZqDQshuNxNFaDRDSBwG9A== )`
	RRSIG=5581 and DNSKEY=5581/SEP verifies the DNSKEY RRset
	RRSIG=42294 and DNSKEY=42294 verifies the DNSKEY RRset
	RRSIG=44872 and DNSKEY=44872/SEP verifies the DNSKEY RRset
	DNSKEY=42294 is now in the chain-of-trust
	DNSKEY=2646 is now in the chain-of-trust
	DNSKEY=61824 is now in the chain-of-trust
	Query to a1-63.akam.net for AMERICA.GOV/A
	Received 355 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 355 octets ;; HEADER SECTION ;; id = 21847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-63.akam.net is authoritative for AMERICA.GOV
	Found RRSIG signed by america.gov zone
	Query to a3-66.akam.net for AMERICA.GOV/SOA
	Received 849 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 849 octets ;; HEADER SECTION ;; id = 60985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN SOA ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 9139 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) AMERICA.GOV. 900 IN RRSIG ( SOA 8 2 900 20270218152958 20260218142958 42294 america.gov. lX6d3cTb16omIWmtrPY8ZKSYXFhJz1CKgkOwphSZvt5WYTyXD41NAXpfJUyzHflm8s8DmP4+31A/ +mmTGMryS/vXlLtMyCuXdCU4zv/Ly+V1jTKEnmuLRFadvwHHfLYRvw+XpKs/t8TEu1jhBlvLh3Xt oXDy6W0XXXBcKCHGVmQxJ7dfnFuEfF9dixrjB2FhHqLAwCrU2w72X4Jy3DM47uJZe0pZ9G5F6A6G d4zsGXk1xX9/NcjuPTV5rBDxD/WpKHLQtI1qz1R1e4siEelX0wF3Hm4ov1R9bTS/5t5sAkgbszv3 Smv6h/hLWC2Gyckm1qgA9UwOh7ZnDa/eed75lA== ) ;; AUTHORITY SECTION (7 records) AMERICA.GOV. 900 IN NS a3-66.akam.net. AMERICA.GOV. 900 IN NS a1-63.akam.net. AMERICA.GOV. 900 IN NS a9-64.akam.net. AMERICA.GOV. 900 IN NS a26-65.akam.net. AMERICA.GOV. 900 IN NS a8-67.akam.net. AMERICA.GOV. 900 IN NS a14-64.akam.net. AMERICA.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145130 20260218142957 42294 america.gov. BuPM427HXkbs9+lceAWrN7B/siZdn5JLytltY174KL0mIwLpXMJFzXKijUvpkW0opPvuAgLZwDSG Nfy395t3OdfsuUG+sFXyhpfVkfIWNY5BzBq63oaqPP/dXx8497pbtnjvn1XITB44XT9Yee5NW4P2 1Dcvsc/1Iwio9Xu5zO3nsfGBZmpkv2+LvyLfDgP4shm2h6q/NowxSdlTyi2wjhflm7KfiVwwHtU1 pSzjSQ/mJOCYOlodX4F7QcqlMFEltg/zU1ChlbZIuLo401TuaYBwY333BYKy0u1+QDjTYSZMFPKE nVIcrdOb3L6Yaa06yGEBA1eqMyEGKVUuW6R06Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-67.akam.net for AMERICA.GOV/SOA
	Received 849 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 849 octets ;; HEADER SECTION ;; id = 47618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN SOA ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 9139 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) AMERICA.GOV. 900 IN RRSIG ( SOA 8 2 900 20270218152958 20260218142958 42294 america.gov. lX6d3cTb16omIWmtrPY8ZKSYXFhJz1CKgkOwphSZvt5WYTyXD41NAXpfJUyzHflm8s8DmP4+31A/ +mmTGMryS/vXlLtMyCuXdCU4zv/Ly+V1jTKEnmuLRFadvwHHfLYRvw+XpKs/t8TEu1jhBlvLh3Xt oXDy6W0XXXBcKCHGVmQxJ7dfnFuEfF9dixrjB2FhHqLAwCrU2w72X4Jy3DM47uJZe0pZ9G5F6A6G d4zsGXk1xX9/NcjuPTV5rBDxD/WpKHLQtI1qz1R1e4siEelX0wF3Hm4ov1R9bTS/5t5sAkgbszv3 Smv6h/hLWC2Gyckm1qgA9UwOh7ZnDa/eed75lA== ) ;; AUTHORITY SECTION (7 records) AMERICA.GOV. 900 IN NS a9-64.akam.net. AMERICA.GOV. 900 IN NS a14-64.akam.net. AMERICA.GOV. 900 IN NS a1-63.akam.net. AMERICA.GOV. 900 IN NS a8-67.akam.net. AMERICA.GOV. 900 IN NS a26-65.akam.net. AMERICA.GOV. 900 IN NS a3-66.akam.net. AMERICA.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145130 20260218142957 42294 america.gov. BuPM427HXkbs9+lceAWrN7B/siZdn5JLytltY174KL0mIwLpXMJFzXKijUvpkW0opPvuAgLZwDSG Nfy395t3OdfsuUG+sFXyhpfVkfIWNY5BzBq63oaqPP/dXx8497pbtnjvn1XITB44XT9Yee5NW4P2 1Dcvsc/1Iwio9Xu5zO3nsfGBZmpkv2+LvyLfDgP4shm2h6q/NowxSdlTyi2wjhflm7KfiVwwHtU1 pSzjSQ/mJOCYOlodX4F7QcqlMFEltg/zU1ChlbZIuLo401TuaYBwY333BYKy0u1+QDjTYSZMFPKE nVIcrdOb3L6Yaa06yGEBA1eqMyEGKVUuW6R06Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for AMERICA.GOV/SOA
	Received 849 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 849 octets ;; HEADER SECTION ;; id = 23207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN SOA ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 9139 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) AMERICA.GOV. 900 IN RRSIG ( SOA 8 2 900 20270218152958 20260218142958 42294 america.gov. lX6d3cTb16omIWmtrPY8ZKSYXFhJz1CKgkOwphSZvt5WYTyXD41NAXpfJUyzHflm8s8DmP4+31A/ +mmTGMryS/vXlLtMyCuXdCU4zv/Ly+V1jTKEnmuLRFadvwHHfLYRvw+XpKs/t8TEu1jhBlvLh3Xt oXDy6W0XXXBcKCHGVmQxJ7dfnFuEfF9dixrjB2FhHqLAwCrU2w72X4Jy3DM47uJZe0pZ9G5F6A6G d4zsGXk1xX9/NcjuPTV5rBDxD/WpKHLQtI1qz1R1e4siEelX0wF3Hm4ov1R9bTS/5t5sAkgbszv3 Smv6h/hLWC2Gyckm1qgA9UwOh7ZnDa/eed75lA== ) ;; AUTHORITY SECTION (7 records) AMERICA.GOV. 900 IN NS a8-67.akam.net. AMERICA.GOV. 900 IN NS a1-63.akam.net. AMERICA.GOV. 900 IN NS a14-64.akam.net. AMERICA.GOV. 900 IN NS a3-66.akam.net. AMERICA.GOV. 900 IN NS a9-64.akam.net. AMERICA.GOV. 900 IN NS a26-65.akam.net. AMERICA.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145130 20260218142957 42294 america.gov. BuPM427HXkbs9+lceAWrN7B/siZdn5JLytltY174KL0mIwLpXMJFzXKijUvpkW0opPvuAgLZwDSG Nfy395t3OdfsuUG+sFXyhpfVkfIWNY5BzBq63oaqPP/dXx8497pbtnjvn1XITB44XT9Yee5NW4P2 1Dcvsc/1Iwio9Xu5zO3nsfGBZmpkv2+LvyLfDgP4shm2h6q/NowxSdlTyi2wjhflm7KfiVwwHtU1 pSzjSQ/mJOCYOlodX4F7QcqlMFEltg/zU1ChlbZIuLo401TuaYBwY333BYKy0u1+QDjTYSZMFPKE nVIcrdOb3L6Yaa06yGEBA1eqMyEGKVUuW6R06Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-65.akam.net for AMERICA.GOV/SOA
	Received 849 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 849 octets ;; HEADER SECTION ;; id = 19529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN SOA ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 9139 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) AMERICA.GOV. 900 IN RRSIG ( SOA 8 2 900 20270218152958 20260218142958 42294 america.gov. lX6d3cTb16omIWmtrPY8ZKSYXFhJz1CKgkOwphSZvt5WYTyXD41NAXpfJUyzHflm8s8DmP4+31A/ +mmTGMryS/vXlLtMyCuXdCU4zv/Ly+V1jTKEnmuLRFadvwHHfLYRvw+XpKs/t8TEu1jhBlvLh3Xt oXDy6W0XXXBcKCHGVmQxJ7dfnFuEfF9dixrjB2FhHqLAwCrU2w72X4Jy3DM47uJZe0pZ9G5F6A6G d4zsGXk1xX9/NcjuPTV5rBDxD/WpKHLQtI1qz1R1e4siEelX0wF3Hm4ov1R9bTS/5t5sAkgbszv3 Smv6h/hLWC2Gyckm1qgA9UwOh7ZnDa/eed75lA== ) ;; AUTHORITY SECTION (7 records) AMERICA.GOV. 900 IN NS a9-64.akam.net. AMERICA.GOV. 900 IN NS a8-67.akam.net. AMERICA.GOV. 900 IN NS a3-66.akam.net. AMERICA.GOV. 900 IN NS a26-65.akam.net. AMERICA.GOV. 900 IN NS a1-63.akam.net. AMERICA.GOV. 900 IN NS a14-64.akam.net. AMERICA.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145130 20260218142957 42294 america.gov. BuPM427HXkbs9+lceAWrN7B/siZdn5JLytltY174KL0mIwLpXMJFzXKijUvpkW0opPvuAgLZwDSG Nfy395t3OdfsuUG+sFXyhpfVkfIWNY5BzBq63oaqPP/dXx8497pbtnjvn1XITB44XT9Yee5NW4P2 1Dcvsc/1Iwio9Xu5zO3nsfGBZmpkv2+LvyLfDgP4shm2h6q/NowxSdlTyi2wjhflm7KfiVwwHtU1 pSzjSQ/mJOCYOlodX4F7QcqlMFEltg/zU1ChlbZIuLo401TuaYBwY333BYKy0u1+QDjTYSZMFPKE nVIcrdOb3L6Yaa06yGEBA1eqMyEGKVUuW6R06Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for AMERICA.GOV/SOA
	Received 849 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 849 octets ;; HEADER SECTION ;; id = 55660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN SOA ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 9139 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) AMERICA.GOV. 900 IN RRSIG ( SOA 8 2 900 20270218152958 20260218142958 42294 america.gov. lX6d3cTb16omIWmtrPY8ZKSYXFhJz1CKgkOwphSZvt5WYTyXD41NAXpfJUyzHflm8s8DmP4+31A/ +mmTGMryS/vXlLtMyCuXdCU4zv/Ly+V1jTKEnmuLRFadvwHHfLYRvw+XpKs/t8TEu1jhBlvLh3Xt oXDy6W0XXXBcKCHGVmQxJ7dfnFuEfF9dixrjB2FhHqLAwCrU2w72X4Jy3DM47uJZe0pZ9G5F6A6G d4zsGXk1xX9/NcjuPTV5rBDxD/WpKHLQtI1qz1R1e4siEelX0wF3Hm4ov1R9bTS/5t5sAkgbszv3 Smv6h/hLWC2Gyckm1qgA9UwOh7ZnDa/eed75lA== ) ;; AUTHORITY SECTION (7 records) AMERICA.GOV. 900 IN NS a8-67.akam.net. AMERICA.GOV. 900 IN NS a1-63.akam.net. AMERICA.GOV. 900 IN NS a3-66.akam.net. AMERICA.GOV. 900 IN NS a9-64.akam.net. AMERICA.GOV. 900 IN NS a26-65.akam.net. AMERICA.GOV. 900 IN NS a14-64.akam.net. AMERICA.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145130 20260218142957 42294 america.gov. BuPM427HXkbs9+lceAWrN7B/siZdn5JLytltY174KL0mIwLpXMJFzXKijUvpkW0opPvuAgLZwDSG Nfy395t3OdfsuUG+sFXyhpfVkfIWNY5BzBq63oaqPP/dXx8497pbtnjvn1XITB44XT9Yee5NW4P2 1Dcvsc/1Iwio9Xu5zO3nsfGBZmpkv2+LvyLfDgP4shm2h6q/NowxSdlTyi2wjhflm7KfiVwwHtU1 pSzjSQ/mJOCYOlodX4F7QcqlMFEltg/zU1ChlbZIuLo401TuaYBwY333BYKy0u1+QDjTYSZMFPKE nVIcrdOb3L6Yaa06yGEBA1eqMyEGKVUuW6R06Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-63.akam.net for AMERICA.GOV/A
	Received 355 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 355 octets ;; HEADER SECTION ;; id = 27819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AMERICA.GOV A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== )`
	RRSIG=42294 and DNSKEY=42294 verifies the A RRset

AMERICA.GOV

	Query to a3-66.akam.net for AMERICA.GOV/A
	Received 355 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 355 octets ;; HEADER SECTION ;; id = 35806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-66.akam.net is authoritative for AMERICA.GOV
	Found RRSIG signed by america.gov zone
	Query to a3-66.akam.net for AMERICA.GOV/A
	Received 355 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 355 octets ;; HEADER SECTION ;; id = 22039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AMERICA.GOV A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== )`
	RRSIG=42294 and DNSKEY=42294 verifies the A RRset

AMERICA.GOV

	Query to a26-65.akam.net for AMERICA.GOV/A
	Received 355 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 355 octets ;; HEADER SECTION ;; id = 33368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-65.akam.net is authoritative for AMERICA.GOV
	Found RRSIG signed by america.gov zone
	Query to a26-65.akam.net for AMERICA.GOV/A
	Received 355 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 355 octets ;; HEADER SECTION ;; id = 29080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AMERICA.GOV A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== )`
	RRSIG=42294 and DNSKEY=42294 verifies the A RRset

AMERICA.GOV

	Query to a9-64.akam.net for AMERICA.GOV/A
	Received 355 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 355 octets ;; HEADER SECTION ;; id = 18929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for AMERICA.GOV
	Found RRSIG signed by america.gov zone
	Query to a9-64.akam.net for AMERICA.GOV/A
	Received 355 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 355 octets ;; HEADER SECTION ;; id = 62129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AMERICA.GOV A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== )`
	RRSIG=42294 and DNSKEY=42294 verifies the A RRset

AMERICA.GOV

	Query to a14-64.akam.net for AMERICA.GOV/A
	Received 355 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 355 octets ;; HEADER SECTION ;; id = 8528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for AMERICA.GOV
	Found RRSIG signed by america.gov zone
	Query to a14-64.akam.net for AMERICA.GOV/A
	Received 355 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 355 octets ;; HEADER SECTION ;; id = 54655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AMERICA.GOV A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== )`
	RRSIG=42294 and DNSKEY=42294 verifies the A RRset

AMERICA.GOV

	Query to a8-67.akam.net for AMERICA.GOV/A
	Received 355 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 355 octets ;; HEADER SECTION ;; id = 41085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for AMERICA.GOV
	Found RRSIG signed by america.gov zone
	Query to a8-67.akam.net for AMERICA.GOV/A
	Received 355 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 355 octets ;; HEADER SECTION ;; id = 12570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMERICA.GOV. IN A ;; ANSWER SECTION (2 records) AMERICA.GOV. 900 IN A 34.236.181.236 AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AMERICA.GOV A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`AMERICA.GOV. 900 IN RRSIG ( A 8 2 900 20270218145130 20260218142957 42294 america.gov. EeHuEYabSd/Qy7Hk28eqv1W04oZgep2N+0jXnQCrYzcSqEMXVJIkK3EHqnFbxA+kue959vTi14Cd oHJs2kBy6ZA+hcp6XNMoZIEyvcf4207u7JeVgYFrZLZlWTtl6Y9dj2TRLnLiUc8BYT+6dhQfqd9J RzLAb/RKHsO4nHKgAq7AVHcBcxK9SpvaU2XJop0LRH5dYV5hYXO+/6nr4iUBokjsAGod9oTdrxSy v50h0r+lzlhj2gn1zx57wWsWuhJY6OG1/REM3uC0Y3S5UhBZFH3ix6E7G3mjgvHyFkL8hgX3HGAq KpWroJQmhloAzaIYQ7DPmrUTLWd+ChrRx+GALA== )`
	RRSIG=42294 and DNSKEY=42294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test AMERICA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: