DNSSEC Debugger - AMESLAB.GOV

Domain Name:

Time: 2026-02-23 05:46:54 UTC

Analyzing DNSSEC problems for AMESLAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 21256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for AMESLAB.GOV/A
	Received 624 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 624 octets ;; HEADER SECTION ;; id = 58612 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 616 octets ;; HEADER SECTION ;; id = 12022 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 37452 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 60628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for AMESLAB.GOV/A
	Received 392 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 392 octets ;; HEADER SECTION ;; id = 52631 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) AMESLAB.GOV. 10800 IN NS adns1.es.net. AMESLAB.GOV. 10800 IN NS adns2.es.net. AMESLAB.GOV. 10800 IN NS dns-2.iastate.edu. AMESLAB.GOV. 10800 IN NS fiber.AMESLAB.GOV. AMESLAB.GOV. 10800 IN NS scsds.AMESLAB.GOV. AMESLAB.GOV. 3600 IN DS ( 4759 8 2 22f4f48f8410d4556ab627832a607a612f114afb3ef8e9e8a89f693b62aa740b ) AMESLAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064655 20260222044655 35496 gov. Gne1HQaGQ855YvSpew4YEjf96ct8VoNPrCQD3RQZni4nMtm76mShj3ynaXcNZtJDq+e+cQW3fWgl ow7gDSC+5g== ) ;; ADDITIONAL SECTION (5 records) fiber.AMESLAB.GOV. 3600 IN A 147.155.1.77 fiber.AMESLAB.GOV. 3600 IN AAAA 2620:57:0:2c6::4d scsds.AMESLAB.GOV. 3600 IN A 147.155.1.1 scsds.AMESLAB.GOV. 3600 IN AAAA 2620:57:0:2c6::1 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for AMESLAB.GOV/DNSKEY
	Received 392 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 392 octets ;; HEADER SECTION ;; id = 56447 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) AMESLAB.GOV. 10800 IN NS adns1.es.net. AMESLAB.GOV. 10800 IN NS adns2.es.net. AMESLAB.GOV. 10800 IN NS dns-2.iastate.edu. AMESLAB.GOV. 10800 IN NS fiber.AMESLAB.GOV. AMESLAB.GOV. 10800 IN NS scsds.AMESLAB.GOV. AMESLAB.GOV. 3600 IN DS ( 4759 8 2 22f4f48f8410d4556ab627832a607a612f114afb3ef8e9e8a89f693b62aa740b ) AMESLAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064655 20260222044655 35496 gov. KoYmaJ7EOW+RRN0yRwknt1HqukoqkYs1S35BL9DGlJIwHaknsVc0BN3WQJs6p06kKFQZRHG8u0aX VLNzYT/ZJQ== ) ;; ADDITIONAL SECTION (5 records) fiber.AMESLAB.GOV. 3600 IN A 147.155.1.77 fiber.AMESLAB.GOV. 3600 IN AAAA 2620:57:0:2c6::4d scsds.AMESLAB.GOV. 3600 IN A 147.155.1.1 scsds.AMESLAB.GOV. 3600 IN AAAA 2620:57:0:2c6::1 ;; { "EDNS-VERSION": 0 }
	Found child zone AMESLAB.GOV

AMESLAB.GOV

	Checking DS between GOV and AMESLAB.GOV
	Query to c.ns.gov for AMESLAB.GOV/DS
	Received 187 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 187 octets ;; HEADER SECTION ;; id = 47201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN DS ;; ANSWER SECTION (2 records) AMESLAB.GOV. 3600 IN DS ( 4759 8 2 22f4f48f8410d4556ab627832a607a612f114afb3ef8e9e8a89f693b62aa740b ) AMESLAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064655 20260222044655 35496 gov. lYiMwgox3PRw6WNEWfEs+F/Ms8obZnJBWP4yhik/wmkUlUikUXjqY1qEYqVwmJaqg/aISkrPQMmV 55wl+65kKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for AMESLAB.GOV in the GOV zone
	DS=4759/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AMESLAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064655 20260222044655 35496 gov. lYiMwgox3PRw6WNEWfEs+F/Ms8obZnJBWP4yhik/wmkUlUikUXjqY1qEYqVwmJaqg/aISkrPQMmV 55wl+65kKw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=4759/SHA-256 is now in the chain-of-trust
	`AMESLAB.GOV. 3600 IN DS ( 4759 8 2 22f4f48f8410d4556ab627832a607a612f114afb3ef8e9e8a89f693b62aa740b )`
	Query to adns1.es.net for AMESLAB.GOV/DNSKEY
	Received 1713 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 1713 octets ;; HEADER SECTION ;; id = 5634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) ameslab.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAdsN4AREo1F+pRM5t6ZuGGpA3zqF/k0JVuk6P+sFH96X3XuHopU5GjytKgwyZFgyg6xkel3p k2V+XRQv0zIhktXXNX7v4Mw927FzUmHY0p45hOPJblOqNbeTsUZ9NJvTu4sVHzpZmHIh/Mp3izJX reONHJNfwT3pC/HY7bvXVz3xycIfDpfGoUVXFdJ6+SWwRPwFX9vri4ZJXH+rUfDFoIzOYQDV+nYH XGGxM0l8xiiKaCqFxq8RUms4KiLbYBKwesxjrmXcnqt5AOaXTBU8ALyRRgYwa8l7mrJro8Jp/DI+ RDe8Q6BTHkQex+/NQCcD6kPIn8PtVIinXhDpYWJu/+8= ) ; keytag 57303 ameslab.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbnONnQt8czoDvGLPrNk9iJTmWJ6i63/Ko82ss7bdG2qFDG4mMSzlNFChfKEaduOSq/h4KCl y3NGobiXvXmVJa8kH4FED2FNkawjZL+pUXMvkuta9weWGugomYVdbYPr5RRuq0fHMRGWZX29Mkwc kLtAulq/DGWj4Rt6pOTTdViM+gEpDPPoMHRm9RsDScRB/eXHTaH4BTzl+zi7BlTXLZ4QK2ihx3ko H0TDqEL7cXqca7y8rnK6Mv9baucv0NCtG6eRM2IDWzjUbKrhL+gfH32UtjEGPlt48e6XZzXglUfS I1c5GJxm7KMLdOziJOXy+XTycaiSXViGEyByrB6nmdwOlpruN4iASi/kmOLLNvssSTF7faBSfncL smFFhDHqBTxwuSZHR42l4uGVbOV2mQKdTDI0m/jAzRdVbMDskNOypJ/N8PQc3cn0kyEe4jQae594 M/NiCzZNx+i+MPEJOx/pVb7ZrKkRAUT/7uW6/lebyeBf54ELYhgGQLM3rJjM/HxZp+bHoZ0bRgBm /uIRVvoOm6d/sVru425RrJx5ajybVC+zsYbyeC6piXoXAXdEOi1BTYDUxYRBaW2rz6pDO8un3xoa uBjU8Yz8iiU0xaejMNLrLfUDPCPWxedQX3Ab92UUE5qcw0Lir2J8kXnCO+seyxflrGnhAFsiyu8V kkqX ) ; keytag 4759 ameslab.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260312222114 20260210212114 4759 ameslab.gov. qUjzXdfQIEK7+II/0LZr/cuqOrm12esh2aZkB51bTW5gtV2PVfNT7d4ePRUgm7HXfeerVl+pkWys EhCM7tZzZIbkup02eHkumXzhlDnEhz4aCVGoNs3huU4CtBqN2XXqq/9lXjhQulCZPVGrZ5WvdI8V H3ZiZ0rICe+/bDjyDlJ4gm2VHgKD56JSku1zgn3dDbprccI0CRLWeB3NmbF+5AxkLfr43KVLdedn LjXhkbpCx/MqvFwkyuKy/dP+fW1hb9XWaKCgYfVMhXvhyYK+IbLUKxFiXbpEjn0CQ+2IjNl10I9j /G62RdulTLlC2p+rMXyc4+DAZ6FCjcfewv+KmjwOJSGPURAy+K9x+hhqBUQ/Tqk6b8PcTEshV3kt 1EP98B47GNMc5ajxrQEH4EFJkLjbPXUC9xRb71DIJ5i4AnqvW59kaQDv2Ku/xm1I1oNn4N45sdjB iVMMugeQKGamUhonxIYFnAOaI/CaLMoiPB1HgWB46COA6XuYdYjIGdx83h2IH9yeyVplv+X24HPB N0R/3pnAok5x+gywYv207YuDEuWn9X1Pb2fwL8C7MonAH4linmMWFmiomj8cp/1Noa3S+a2sJDdF nqriAqgVUv02I7S1Ijequc48TaT4EStL6lb4BJInJ3jC8rnu2aWa4Y2APLoU2NsJxesKIo5itxk= ) ameslab.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260312222114 20260210212114 57303 ameslab.gov. QQOadWQ+ntPTYUv8Qiv+mwmL2rxtkY2PaBR3yuKoS+DbonNUz2HRRp0k1E8IZziPMMP6zxw2yUdM vImbky0dC77kVWr5vPXSfGSr9+C+e2n5Ik1nduXoLb5q8q4ZNp094VnOGohktvl+cnXgf6RsVZan 2e04PxlSPMqjpSGEMPAXiGsfHYIL3LCi4mVoVZ0iGgSjp/9jXYfpFfIv0OAp971w7UFZx0fUY6cT 7gncXk517J7OkLdy5OQI96RwLdme9Zmhv5r85NsUQv3i1HRzVQeExxcivJTCntNvDhVvFi4nPznb AvB9a9qZ+HGYnCwyvyuFuS/8ZMjCkmXuNFZyBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for AMESLAB.GOV
	`ameslab.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAdsN4AREo1F+pRM5t6ZuGGpA3zqF/k0JVuk6P+sFH96X3XuHopU5GjytKgwyZFgyg6xkel3p k2V+XRQv0zIhktXXNX7v4Mw927FzUmHY0p45hOPJblOqNbeTsUZ9NJvTu4sVHzpZmHIh/Mp3izJX reONHJNfwT3pC/HY7bvXVz3xycIfDpfGoUVXFdJ6+SWwRPwFX9vri4ZJXH+rUfDFoIzOYQDV+nYH XGGxM0l8xiiKaCqFxq8RUms4KiLbYBKwesxjrmXcnqt5AOaXTBU8ALyRRgYwa8l7mrJro8Jp/DI+ RDe8Q6BTHkQex+/NQCcD6kPIn8PtVIinXhDpYWJu/+8= ) ; keytag 57303`
	ameslab.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbnONnQt8czoDvGLPrNk9iJTmWJ6i63/Ko82ss7bdG2qFDG4mMSzlNFChfKEaduOSq/h4KCl y3NGobiXvXmVJa8kH4FED2FNkawjZL+pUXMvkuta9weWGugomYVdbYPr5RRuq0fHMRGWZX29Mkwc kLtAulq/DGWj4Rt6pOTTdViM+gEpDPPoMHRm9RsDScRB/eXHTaH4BTzl+zi7BlTXLZ4QK2ihx3ko H0TDqEL7cXqca7y8rnK6Mv9baucv0NCtG6eRM2IDWzjUbKrhL+gfH32UtjEGPlt48e6XZzXglUfS I1c5GJxm7KMLdOziJOXy+XTycaiSXViGEyByrB6nmdwOlpruN4iASi/kmOLLNvssSTF7faBSfncL smFFhDHqBTxwuSZHR42l4uGVbOV2mQKdTDI0m/jAzRdVbMDskNOypJ/N8PQc3cn0kyEe4jQae594 M/NiCzZNx+i+MPEJOx/pVb7ZrKkRAUT/7uW6/lebyeBf54ELYhgGQLM3rJjM/HxZp+bHoZ0bRgBm /uIRVvoOm6d/sVru425RrJx5ajybVC+zsYbyeC6piXoXAXdEOi1BTYDUxYRBaW2rz6pDO8un3xoa uBjU8Yz8iiU0xaejMNLrLfUDPCPWxedQX3Ab92UUE5qcw0Lir2J8kXnCO+seyxflrGnhAFsiyu8V kkqX ) ; keytag 4759
	DNSKEY=4759/SEP is now in the chain-of-trust
	DS=4759/SHA-256 verifies DNSKEY=4759/SEP
	Found 2 RRSIGs over DNSKEY RRset
	ameslab.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260312222114 20260210212114 4759 ameslab.gov. qUjzXdfQIEK7+II/0LZr/cuqOrm12esh2aZkB51bTW5gtV2PVfNT7d4ePRUgm7HXfeerVl+pkWys EhCM7tZzZIbkup02eHkumXzhlDnEhz4aCVGoNs3huU4CtBqN2XXqq/9lXjhQulCZPVGrZ5WvdI8V H3ZiZ0rICe+/bDjyDlJ4gm2VHgKD56JSku1zgn3dDbprccI0CRLWeB3NmbF+5AxkLfr43KVLdedn LjXhkbpCx/MqvFwkyuKy/dP+fW1hb9XWaKCgYfVMhXvhyYK+IbLUKxFiXbpEjn0CQ+2IjNl10I9j /G62RdulTLlC2p+rMXyc4+DAZ6FCjcfewv+KmjwOJSGPURAy+K9x+hhqBUQ/Tqk6b8PcTEshV3kt 1EP98B47GNMc5ajxrQEH4EFJkLjbPXUC9xRb71DIJ5i4AnqvW59kaQDv2Ku/xm1I1oNn4N45sdjB iVMMugeQKGamUhonxIYFnAOaI/CaLMoiPB1HgWB46COA6XuYdYjIGdx83h2IH9yeyVplv+X24HPB N0R/3pnAok5x+gywYv207YuDEuWn9X1Pb2fwL8C7MonAH4linmMWFmiomj8cp/1Noa3S+a2sJDdF nqriAqgVUv02I7S1Ijequc48TaT4EStL6lb4BJInJ3jC8rnu2aWa4Y2APLoU2NsJxesKIo5itxk= )
	`ameslab.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260312222114 20260210212114 57303 ameslab.gov. QQOadWQ+ntPTYUv8Qiv+mwmL2rxtkY2PaBR3yuKoS+DbonNUz2HRRp0k1E8IZziPMMP6zxw2yUdM vImbky0dC77kVWr5vPXSfGSr9+C+e2n5Ik1nduXoLb5q8q4ZNp094VnOGohktvl+cnXgf6RsVZan 2e04PxlSPMqjpSGEMPAXiGsfHYIL3LCi4mVoVZ0iGgSjp/9jXYfpFfIv0OAp971w7UFZx0fUY6cT 7gncXk517J7OkLdy5OQI96RwLdme9Zmhv5r85NsUQv3i1HRzVQeExxcivJTCntNvDhVvFi4nPznb AvB9a9qZ+HGYnCwyvyuFuS/8ZMjCkmXuNFZyBA== )`
	RRSIG=4759 and DNSKEY=4759/SEP verifies the DNSKEY RRset
	RRSIG=57303 and DNSKEY=57303 verifies the DNSKEY RRset
	DNSKEY=57303 is now in the chain-of-trust
	Query to adns1.es.net for AMESLAB.GOV/A
	Received 791 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 791 octets ;; HEADER SECTION ;; id = 9351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.es.net is authoritative for AMESLAB.GOV
	Found RRSIG signed by ameslab.gov zone
	Query to adns2.es.net for AMESLAB.GOV/SOA
	Received 1193 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 1193 octets ;; HEADER SECTION ;; id = 24811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN SOA ;; ANSWER SECTION (2 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) ;; AUTHORITY SECTION (6 records) ameslab.gov. 86400 IN NS dns-2.iastate.edu. ameslab.gov. 86400 IN NS fiber.ameslab.gov. ameslab.gov. 86400 IN NS adns2.es.net. ameslab.gov. 86400 IN NS adns1.es.net. ameslab.gov. 86400 IN NS scsds.ameslab.gov. ameslab.gov. 86400 IN RRSIG ( NS 8 2 86400 20260318220833 20260216211612 57303 ameslab.gov. EjGKT6lAu1ZAJkDMLxlgnP7+Y6QVnBvgUNkd3u2WxoJP0yrw1CCVhDRK8WmTIHi9F6JQQsS1F86O zOQISnWMHm8TLQdaRMAb3gx+0rpESEQUwEjQqc2I7QiVneo/l2IyNnMUIrijKHydOO+/Jn4AhavH EJ1eIGlq0y75ILEGB+/H/5D2cm1ugkeZta80/bnnYjreKtsyXK6bxfEESk4CvyTJJf5fc+cLYPO3 zD0Q+6w4rfI6EwKCuf5hixQPGe+nu7HIdAMsI/6Ounvdf1bLvFKVtQtPtG5BkTcOMHuwPT8+jj9p zvw69vtJ2dMfi+GLHlc7ZmvJiusYv9MkO2+v0Q== ) ;; ADDITIONAL SECTION (6 records) fiber.ameslab.gov. 86400 IN A 147.155.1.77 scsds.ameslab.gov. 86400 IN A 147.155.1.1 fiber.ameslab.gov. 86400 IN AAAA 2620:57:0:2c6::4d scsds.ameslab.gov. 86400 IN AAAA 2620:57:0:2c6::1 fiber.ameslab.gov. 86400 IN RRSIG ( A 8 3 86400 20260310045814 20260210212122 57303 ameslab.gov. gbZC6AkMBVl2L1fhFD8+CagJalZ9+leU5cOIwRRRSHiqqySBfFWa6jtjfZLzAbG86X6fpVgCMNC0 AbAQ/XME9nzmvqbW1mrLWaM13wANav6t48ZNltOUefH9FCbCLZElRLZtCNs6gh7WMc3GAwT8XVfK UB7N34IUupHT/IHNtWOTxnpYDJh8vL/tUJ4uy3oa64wRTV0lVarlJXUx5daneAeSIBKOB99GRYvr uAq2vbun3bp3nPtEM9Gw7GHtEYmua/cxKjxWEfyT4KbkwkrUxNpokHf2n5Q0+dLr3QqszIfIBmjT bxXsYXWlkTkygTA4WBp1czlVuNrLSZ1bVN8OuA== ) ;; { "EDNS-VERSION": 0 }
	Query to fiber.AMESLAB.GOV for AMESLAB.GOV/SOA
	Received 1193 bytes from 147.155.1.77
	;; Response received from [147.155.1.77] 1193 octets ;; HEADER SECTION ;; id = 43516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN SOA ;; ANSWER SECTION (2 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) ;; AUTHORITY SECTION (6 records) ameslab.gov. 86400 IN NS adns1.es.net. ameslab.gov. 86400 IN NS scsds.ameslab.gov. ameslab.gov. 86400 IN NS fiber.ameslab.gov. ameslab.gov. 86400 IN NS adns2.es.net. ameslab.gov. 86400 IN NS dns-2.iastate.edu. ameslab.gov. 86400 IN RRSIG ( NS 8 2 86400 20260318220833 20260216211612 57303 ameslab.gov. EjGKT6lAu1ZAJkDMLxlgnP7+Y6QVnBvgUNkd3u2WxoJP0yrw1CCVhDRK8WmTIHi9F6JQQsS1F86O zOQISnWMHm8TLQdaRMAb3gx+0rpESEQUwEjQqc2I7QiVneo/l2IyNnMUIrijKHydOO+/Jn4AhavH EJ1eIGlq0y75ILEGB+/H/5D2cm1ugkeZta80/bnnYjreKtsyXK6bxfEESk4CvyTJJf5fc+cLYPO3 zD0Q+6w4rfI6EwKCuf5hixQPGe+nu7HIdAMsI/6Ounvdf1bLvFKVtQtPtG5BkTcOMHuwPT8+jj9p zvw69vtJ2dMfi+GLHlc7ZmvJiusYv9MkO2+v0Q== ) ;; ADDITIONAL SECTION (6 records) fiber.ameslab.gov. 86400 IN A 147.155.1.77 scsds.ameslab.gov. 86400 IN A 147.155.1.1 fiber.ameslab.gov. 86400 IN AAAA 2620:57:0:2c6::4d scsds.ameslab.gov. 86400 IN AAAA 2620:57:0:2c6::1 fiber.ameslab.gov. 86400 IN RRSIG ( A 8 3 86400 20260310045814 20260210212122 57303 ameslab.gov. gbZC6AkMBVl2L1fhFD8+CagJalZ9+leU5cOIwRRRSHiqqySBfFWa6jtjfZLzAbG86X6fpVgCMNC0 AbAQ/XME9nzmvqbW1mrLWaM13wANav6t48ZNltOUefH9FCbCLZElRLZtCNs6gh7WMc3GAwT8XVfK UB7N34IUupHT/IHNtWOTxnpYDJh8vL/tUJ4uy3oa64wRTV0lVarlJXUx5daneAeSIBKOB99GRYvr uAq2vbun3bp3nPtEM9Gw7GHtEYmua/cxKjxWEfyT4KbkwkrUxNpokHf2n5Q0+dLr3QqszIfIBmjT bxXsYXWlkTkygTA4WBp1czlVuNrLSZ1bVN8OuA== ) ;; { "EDNS-VERSION": 0 }
	Query to scsds.AMESLAB.GOV for AMESLAB.GOV/SOA
	Received 1193 bytes from 147.155.1.1
	;; Response received from [147.155.1.1] 1193 octets ;; HEADER SECTION ;; id = 63273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN SOA ;; ANSWER SECTION (2 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) ;; AUTHORITY SECTION (6 records) ameslab.gov. 86400 IN NS adns2.es.net. ameslab.gov. 86400 IN NS dns-2.iastate.edu. ameslab.gov. 86400 IN NS adns1.es.net. ameslab.gov. 86400 IN NS fiber.ameslab.gov. ameslab.gov. 86400 IN NS scsds.ameslab.gov. ameslab.gov. 86400 IN RRSIG ( NS 8 2 86400 20260318220833 20260216211612 57303 ameslab.gov. EjGKT6lAu1ZAJkDMLxlgnP7+Y6QVnBvgUNkd3u2WxoJP0yrw1CCVhDRK8WmTIHi9F6JQQsS1F86O zOQISnWMHm8TLQdaRMAb3gx+0rpESEQUwEjQqc2I7QiVneo/l2IyNnMUIrijKHydOO+/Jn4AhavH EJ1eIGlq0y75ILEGB+/H/5D2cm1ugkeZta80/bnnYjreKtsyXK6bxfEESk4CvyTJJf5fc+cLYPO3 zD0Q+6w4rfI6EwKCuf5hixQPGe+nu7HIdAMsI/6Ounvdf1bLvFKVtQtPtG5BkTcOMHuwPT8+jj9p zvw69vtJ2dMfi+GLHlc7ZmvJiusYv9MkO2+v0Q== ) ;; ADDITIONAL SECTION (6 records) fiber.ameslab.gov. 86400 IN A 147.155.1.77 scsds.ameslab.gov. 86400 IN A 147.155.1.1 fiber.ameslab.gov. 86400 IN AAAA 2620:57:0:2c6::4d scsds.ameslab.gov. 86400 IN AAAA 2620:57:0:2c6::1 fiber.ameslab.gov. 86400 IN RRSIG ( A 8 3 86400 20260310045814 20260210212122 57303 ameslab.gov. gbZC6AkMBVl2L1fhFD8+CagJalZ9+leU5cOIwRRRSHiqqySBfFWa6jtjfZLzAbG86X6fpVgCMNC0 AbAQ/XME9nzmvqbW1mrLWaM13wANav6t48ZNltOUefH9FCbCLZElRLZtCNs6gh7WMc3GAwT8XVfK UB7N34IUupHT/IHNtWOTxnpYDJh8vL/tUJ4uy3oa64wRTV0lVarlJXUx5daneAeSIBKOB99GRYvr uAq2vbun3bp3nPtEM9Gw7GHtEYmua/cxKjxWEfyT4KbkwkrUxNpokHf2n5Q0+dLr3QqszIfIBmjT bxXsYXWlkTkygTA4WBp1czlVuNrLSZ1bVN8OuA== ) ;; { "EDNS-VERSION": 0 }
	Query to dns-2.iastate.edu for AMESLAB.GOV/SOA
	Received 385 bytes from 129.186.67.145
	;; Response received from [129.186.67.145] 385 octets ;; HEADER SECTION ;; id = 54267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN SOA ;; ANSWER SECTION (2 records) AMESLAB.GOV. 86400 IN SOA ( scsds.AMESLAB.GOV. dns.AMESLAB.GOV. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) AMESLAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns1.es.net for AMESLAB.GOV/A
	Received 791 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 791 octets ;; HEADER SECTION ;; id = 1784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the SOA RRset

AMESLAB.GOV

	Query to dns-2.iastate.edu for AMESLAB.GOV/A
	Received 780 bytes from 129.186.67.145
	;; Response received from [129.186.67.145] 780 octets ;; HEADER SECTION ;; id = 65454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) AMESLAB.GOV. 86400 IN SOA ( scsds.AMESLAB.GOV. dns.AMESLAB.GOV. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) AMESLAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns-2.iastate.edu is authoritative for AMESLAB.GOV
	Found RRSIG signed by ameslab.gov zone
	Query to dns-2.iastate.edu for AMESLAB.GOV/A
	Received 780 bytes from 129.186.67.145
	;; Response received from [129.186.67.145] 780 octets ;; HEADER SECTION ;; id = 13162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) AMESLAB.GOV. 86400 IN SOA ( scsds.AMESLAB.GOV. dns.AMESLAB.GOV. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) AMESLAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`AMESLAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the SOA RRset

AMESLAB.GOV

	Query to scsds.AMESLAB.GOV for AMESLAB.GOV/A
	Received 791 bytes from 147.155.1.1
	;; Response received from [147.155.1.1] 791 octets ;; HEADER SECTION ;; id = 3149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	scsds.AMESLAB.GOV is authoritative for AMESLAB.GOV
	Found RRSIG signed by ameslab.gov zone
	Query to scsds.AMESLAB.GOV for AMESLAB.GOV/A
	Received 791 bytes from 147.155.1.1
	;; Response received from [147.155.1.1] 791 octets ;; HEADER SECTION ;; id = 47326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the SOA RRset

AMESLAB.GOV

	Query to adns2.es.net for AMESLAB.GOV/A
	Received 791 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 791 octets ;; HEADER SECTION ;; id = 14757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns2.es.net is authoritative for AMESLAB.GOV
	Found RRSIG signed by ameslab.gov zone
	Query to adns2.es.net for AMESLAB.GOV/A
	Received 791 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 791 octets ;; HEADER SECTION ;; id = 64852 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the SOA RRset

AMESLAB.GOV

	Query to fiber.AMESLAB.GOV for AMESLAB.GOV/A
	Received 791 bytes from 147.155.1.77
	;; Response received from [147.155.1.77] 791 octets ;; HEADER SECTION ;; id = 29756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fiber.AMESLAB.GOV is authoritative for AMESLAB.GOV
	Found RRSIG signed by ameslab.gov zone
	Query to fiber.AMESLAB.GOV for AMESLAB.GOV/A
	Received 791 bytes from 147.155.1.77
	;; Response received from [147.155.1.77] 791 octets ;; HEADER SECTION ;; id = 30760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; AMESLAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ameslab.gov. 86400 IN SOA ( scsds.ameslab.gov. dns.ameslab.gov. 2004823847 ;serial 7200 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN NSEC3 ( 1 0 10 d6c63fb796372e9876860d39f7c353ec co1m5jm0ku7t5nno2anqvpk6mkr6nogp NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) CNTU82S1243OO8TL73N78FBU2BBQJAPA.ameslab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260310183100 20260210212131 57303 ameslab.gov. kA+wdOi85YGV5Y+wSQQgE/FlSbchjXnAdaQokW8O/47LZRiWPeqIfCd2aRQF4t0CLfW8SKX1pNTS TKNdZv+gTj4P0OuwmjUFd7Nqd/Hj1LOPdH42kaWl/aurpAoV3JPAoKlC9mJFIoX6eePcWQX1TrWd oo8MPeQYSQLSOYx5g2cnEMm2zfgZ9yg4o7oifZ6Gd3POmcE9km7dURUpCMw7GvC8djMsUvDo2LQ7 R3ef4uiF3o6iTQ98IzOkq/Hkk3fvejBVgD3Hp7x01rSoLPRsmYaMl+PX6tsrLZy/0yhTEW0d/b/j ycodYaROuAcuGEK+lunF0QBwf97dt029lh705Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ameslab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260325052739 20260223042739 57303 ameslab.gov. usPsQYsJJVysbnaS6bCoxFYWZ4lKSUZmNw491Z5dctvJ3JaiEcRhRaEBMidzlyk4BiC8H/MHsoS4 JItig0WS60I4h5XSza6/N3y4HErC0HYbDERP6KALdRNuoZRIu2SZJTPcmWdcolHdcxsk2+SZZhhQ ZqzkewInKNQEbPgRc+Nkle4yzEiwjx8z3TQGVqBa6xFMWYQpyNYva3F8Mx2oblJBsCRPbnMfbMbr wQqkb9PZ5Y3arEuLz25Q7xiVP6QVg5IRnUuxYQdOahUe5gYBTakbEC0VzUvyh0xBNAkyUm+j1CK7 3eE+SXvxWnSxILppYxVGZ9Ke7NdlKFDtoHeTpA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test AMESLAB.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: