DNSSEC Analyzer

Domain Name:

Time: 2020-10-31 16:30:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for ANL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 56810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201121000000 20201031000000 20326 . n9NwM1ChaxlOSRviHhrWhbUt4oM7GQSJHGyLSdgBfeZkJ/Tnwsz40GuFVJHt9WHCRri0/pp8i5YZ 6p5mEhOPzhPR/1H68EBxjDc5aoWZzRNMcgGWZiNPHr/bbdfs9+dpfNCtDWNjxi9p6VP1uAje4Tno /rC1DkDzNxtaTTGNnDp/FHzkdBAnsqAIge1dtamYeb2VmGNVCxc6YBgqERUo5N1BJCCN40jVDIZD ZuGVQJWr9TdN9VaTk5wLxRdBHRhKYn/l9ZsnyCQYgIuMxiwEQ1Npr9D/lznHNrpCM0xBm7Y5Vrcq b41k7KwwdC/u4kThE8ebvrjzp5selRUuNEuS6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201121000000 20201031000000 20326 . n9NwM1ChaxlOSRviHhrWhbUt4oM7GQSJHGyLSdgBfeZkJ/Tnwsz40GuFVJHt9WHCRri0/pp8i5YZ 6p5mEhOPzhPR/1H68EBxjDc5aoWZzRNMcgGWZiNPHr/bbdfs9+dpfNCtDWNjxi9p6VP1uAje4Tno /rC1DkDzNxtaTTGNnDp/FHzkdBAnsqAIge1dtamYeb2VmGNVCxc6YBgqERUo5N1BJCCN40jVDIZD ZuGVQJWr9TdN9VaTk5wLxRdBHRhKYn/l9ZsnyCQYgIuMxiwEQ1Npr9D/lznHNrpCM0xBm7Y5Vrcq b41k7KwwdC/u4kThE8ebvrjzp5selRUuNEuS6g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to e.root-servers.net for ANL.GOV/A
	Received 662 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (662 bytes) ;; HEADER SECTION ;; id = 93 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 25346 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 403 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (403 bytes) ;; HEADER SECTION ;; id = 5205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 7227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to a.gov-servers.net for ANL.GOV/A
	Received 557 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (557 bytes) ;; HEADER SECTION ;; id = 8149 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ANL.GOV. 86400 IN NS t1dns2.ANL.GOV. ANL.GOV. 86400 IN NS adns2.es.net. ANL.GOV. 86400 IN NS nsx.lbl.GOV. ANL.GOV. 86400 IN NS t1dns1.ANL.GOV. ANL.GOV. 86400 IN NS adns1.es.net. ANL.GOV. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 ) ANL.GOV. 3600 IN DS 12046 8 1 97dd1178e67307f1e51ad33f7526aa260c10491f ANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 1mWgotqq9Ng/huC2O7oeIhygKsOA8dAPl34RPOADRc+tq2N3/unMM4sz/O7f31qa6y95AsTad5fR aP3338ohZcFGzBJ3jUjyGSI1ScSEZbaxT1mmqRxqLzu+XYMmysDEsKvMkLPAqWL8duH6svZ8iIRZ cGp4gB52kubB9Vws7+cX4AIXDP+601yxiQh4PE7SEde73MVTwf0N/w1xjW4xMg== ) ;; ADDITIONAL SECTION (7 records) t1dns2.ANL.GOV. 86400 IN A 130.202.101.37 t1dns2.ANL.GOV. 86400 IN AAAA 2620:0:dc0:180d::37 nsx.lbl.GOV. 86400 IN A 131.243.64.3 nsx.lbl.GOV. 86400 IN AAAA 2620:83:8000:140::3 t1dns1.ANL.GOV. 86400 IN A 130.202.101.6 t1dns1.ANL.GOV. 86400 IN AAAA 2620:0:dc0:180e::6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for ANL.GOV/DNSKEY
	Received 557 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (557 bytes) ;; HEADER SECTION ;; id = 43659 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ANL.GOV. 86400 IN NS t1dns2.ANL.GOV. ANL.GOV. 86400 IN NS adns2.es.net. ANL.GOV. 86400 IN NS nsx.lbl.GOV. ANL.GOV. 86400 IN NS t1dns1.ANL.GOV. ANL.GOV. 86400 IN NS adns1.es.net. ANL.GOV. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 ) ANL.GOV. 3600 IN DS 12046 8 1 97dd1178e67307f1e51ad33f7526aa260c10491f ANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 1mWgotqq9Ng/huC2O7oeIhygKsOA8dAPl34RPOADRc+tq2N3/unMM4sz/O7f31qa6y95AsTad5fR aP3338ohZcFGzBJ3jUjyGSI1ScSEZbaxT1mmqRxqLzu+XYMmysDEsKvMkLPAqWL8duH6svZ8iIRZ cGp4gB52kubB9Vws7+cX4AIXDP+601yxiQh4PE7SEde73MVTwf0N/w1xjW4xMg== ) ;; ADDITIONAL SECTION (7 records) t1dns2.ANL.GOV. 86400 IN A 130.202.101.37 t1dns2.ANL.GOV. 86400 IN AAAA 2620:0:dc0:180d::37 nsx.lbl.GOV. 86400 IN A 131.243.64.3 nsx.lbl.GOV. 86400 IN AAAA 2620:83:8000:140::3 t1dns1.ANL.GOV. 86400 IN A 130.202.101.6 t1dns1.ANL.GOV. 86400 IN AAAA 2620:0:dc0:180e::6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ANL.GOV

ANL.GOV

	Checking DS between GOV and ANL.GOV
	Query to d.gov-servers.net for ANL.GOV/DS
	Received 315 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (315 bytes) ;; HEADER SECTION ;; id = 53187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN DS ;; ANSWER SECTION (3 records) ANL.GOV. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 ) ANL.GOV. 3600 IN DS 12046 8 1 97dd1178e67307f1e51ad33f7526aa260c10491f ANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 1mWgotqq9Ng/huC2O7oeIhygKsOA8dAPl34RPOADRc+tq2N3/unMM4sz/O7f31qa6y95AsTad5fR aP3338ohZcFGzBJ3jUjyGSI1ScSEZbaxT1mmqRxqLzu+XYMmysDEsKvMkLPAqWL8duH6svZ8iIRZ cGp4gB52kubB9Vws7+cX4AIXDP+601yxiQh4PE7SEde73MVTwf0N/w1xjW4xMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for ANL.GOV in the GOV zone
	DS=12046/SHA-256 has algorithm RSASHA256
	DS=12046/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 1mWgotqq9Ng/huC2O7oeIhygKsOA8dAPl34RPOADRc+tq2N3/unMM4sz/O7f31qa6y95AsTad5fR aP3338ohZcFGzBJ3jUjyGSI1ScSEZbaxT1mmqRxqLzu+XYMmysDEsKvMkLPAqWL8duH6svZ8iIRZ cGp4gB52kubB9Vws7+cX4AIXDP+601yxiQh4PE7SEde73MVTwf0N/w1xjW4xMg== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=12046/SHA-256 is now in the chain-of-trust
	`ANL.GOV. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 )`
	`ANL.GOV. 3600 IN DS 12046 8 1 97dd1178e67307f1e51ad33f7526aa260c10491f`
	Query to nsx.lbl.GOV for ANL.GOV/DNSKEY
	Received 1185 bytes from 131.243.64.3
	;; Answer received from 131.243.64.3 (1185 bytes) ;; HEADER SECTION ;; id = 35585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) anl.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAeIcu59RtoGgNJ/XdTj+R2GtyuF413rYON87DioMkTgMoZdtoWf48hq+t/f2OWyofmuvKnaN 2ESZK8p+MtPTBMcEKJp5AnSPzm5fwK+yqbeAqchZZUWQZPStxl8/XQEwNG1aRnznPuW/KD40k2nK ecSxf2/bQ4KYGaN4J46qG/nqT4J/CnqJfbY0o1hXSWEZEkspAzNQM+zxZsk3phyrE7mfu0LfQOAb eNp/spE+yesCi0TqjoAYYYokS7i2sbtCZN+1mIoot2O02dMm7qUU04+mqy/qGkd7DMg06USDnnKu kTXNmEtGOo19dEU6FxccGrqzgP2fBIu7ZMxtzYmpLzM= ) ; Key ID = 12046 anl.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcM2roG4li6xznqX1CFTWpsgD1f3vrba0OKkCvtqAVd845EbKMDZKfKRcedye6wUP1J0pGUM Z+V1ct9dqEkAltXkSazlIEk7AmUYcNrbVse10m0JxcW8sQmHrE5ZjkmSTC6YJMQL3p0RPSpvIG1b g0RwWxQP02TvTTyWtH2G0DbR3pZkOj6pJEBE3rcY3gId8/53Wbd8DCPmQTdGtNjYP2KPR+Y4Mo9S 3QoP8GAXwq43BfPFY2j3BPzCwQJsdGW7IdfNbh7LvDj3KvXy2y8LtniafyBjGQfTxQGdOe3PKAGC WjWurj03Yv4VJw41JnRVCQSHoR2xLatDao1KwGuK1Zc= ) ; Key ID = 11793 anl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201125052206 20201026043114 11793 anl.gov. MYvERXKcb4NiAHC5g+KGmptctJg/RzSgnel7tnSee4IhSpBQkDqGGdWgxvpYhPTt5viTfV7Yn4fK 5ITd7sgFCK96/CXoOM1LbPGMJELZzXraRD1ilUaksrDCKFoywycshzGYbAqRD65Ye6AttbbTogcv +WVbQaV6chfByTlLMl9IkaEn8qQRcOjw0Ntda7KEIpjdQOHg6I++xm5Bevg0xmp5sVbZeHmBDfZp PAAvgqaaiYR4nQnbQ+p/P+bN7CSRfRP5IbntFRvPcriQz3aSaQ3/KJnMW7Re4FOYA7uvqrhgzcAs hjuHVng//imOzsuPCVOe5JuTFnzM9gzHWQ0CtA== ) anl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201125052206 20201026043114 12046 anl.gov. HfGvOhLjf06tj20d9eIYImAJ8GkgVyEIb3BOp23GwmtSq8hatp1X45AqDFkvMMhMkl7WkmCKaF2m hdC4Fhc4YirDHbZgJoEYM/vfZ7jXxkL+rFfyGYCjvEw/fZz4ZEubYRrmamr/Eqohy1CU9qrPxgJx zVMdNY3vyXZtUkwvF6QYhAslb2t7J5crz2XRem9JJQ3JUh+xWGOlhl6cllz+AZgk8leos2QE0O58 kXNusyi80ylZJXbYzrJhT+tP/26VIm19WnRd0ITvzDAQbB1V+EHpAB9hraaDrlmBnfFUOIrGBBiE JQkGrWumnyjIcRoHvAwRym/riKXfYqJXuvdnzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for ANL.GOV
	`anl.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAeIcu59RtoGgNJ/XdTj+R2GtyuF413rYON87DioMkTgMoZdtoWf48hq+t/f2OWyofmuvKnaN 2ESZK8p+MtPTBMcEKJp5AnSPzm5fwK+yqbeAqchZZUWQZPStxl8/XQEwNG1aRnznPuW/KD40k2nK ecSxf2/bQ4KYGaN4J46qG/nqT4J/CnqJfbY0o1hXSWEZEkspAzNQM+zxZsk3phyrE7mfu0LfQOAb eNp/spE+yesCi0TqjoAYYYokS7i2sbtCZN+1mIoot2O02dMm7qUU04+mqy/qGkd7DMg06USDnnKu kTXNmEtGOo19dEU6FxccGrqzgP2fBIu7ZMxtzYmpLzM= ) ; Key ID = 12046`
	`anl.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcM2roG4li6xznqX1CFTWpsgD1f3vrba0OKkCvtqAVd845EbKMDZKfKRcedye6wUP1J0pGUM Z+V1ct9dqEkAltXkSazlIEk7AmUYcNrbVse10m0JxcW8sQmHrE5ZjkmSTC6YJMQL3p0RPSpvIG1b g0RwWxQP02TvTTyWtH2G0DbR3pZkOj6pJEBE3rcY3gId8/53Wbd8DCPmQTdGtNjYP2KPR+Y4Mo9S 3QoP8GAXwq43BfPFY2j3BPzCwQJsdGW7IdfNbh7LvDj3KvXy2y8LtniafyBjGQfTxQGdOe3PKAGC WjWurj03Yv4VJw41JnRVCQSHoR2xLatDao1KwGuK1Zc= ) ; Key ID = 11793`
	DNSKEY=12046/SEP is now in the chain-of-trust
	DS=12046/SHA-256 verifies DNSKEY=12046/SEP
	DS=12046/SHA-1 verifies DNSKEY=12046/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`anl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201125052206 20201026043114 11793 anl.gov. MYvERXKcb4NiAHC5g+KGmptctJg/RzSgnel7tnSee4IhSpBQkDqGGdWgxvpYhPTt5viTfV7Yn4fK 5ITd7sgFCK96/CXoOM1LbPGMJELZzXraRD1ilUaksrDCKFoywycshzGYbAqRD65Ye6AttbbTogcv +WVbQaV6chfByTlLMl9IkaEn8qQRcOjw0Ntda7KEIpjdQOHg6I++xm5Bevg0xmp5sVbZeHmBDfZp PAAvgqaaiYR4nQnbQ+p/P+bN7CSRfRP5IbntFRvPcriQz3aSaQ3/KJnMW7Re4FOYA7uvqrhgzcAs hjuHVng//imOzsuPCVOe5JuTFnzM9gzHWQ0CtA== )`
	`anl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201125052206 20201026043114 12046 anl.gov. HfGvOhLjf06tj20d9eIYImAJ8GkgVyEIb3BOp23GwmtSq8hatp1X45AqDFkvMMhMkl7WkmCKaF2m hdC4Fhc4YirDHbZgJoEYM/vfZ7jXxkL+rFfyGYCjvEw/fZz4ZEubYRrmamr/Eqohy1CU9qrPxgJx zVMdNY3vyXZtUkwvF6QYhAslb2t7J5crz2XRem9JJQ3JUh+xWGOlhl6cllz+AZgk8leos2QE0O58 kXNusyi80ylZJXbYzrJhT+tP/26VIm19WnRd0ITvzDAQbB1V+EHpAB9hraaDrlmBnfFUOIrGBBiE JQkGrWumnyjIcRoHvAwRym/riKXfYqJXuvdnzw== )`
	RRSIG=11793 and DNSKEY=11793 verifies the DNSKEY RRset
	RRSIG=12046 and DNSKEY=12046/SEP verifies the DNSKEY RRset
	DNSKEY=11793 is now in the chain-of-trust
	Query to t1dns2.ANL.GOV for ANL.GOV/A
	Received 769 bytes from 130.202.101.37
	;; Answer received from 130.202.101.37 (769 bytes) ;; HEADER SECTION ;; id = 15870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) PRI7VBA70F6K4J8D6I01NU7HNB534T7B.anl.gov. 7200 IN NSEC3 ( 1 0 10 f7ab14d7 psjg4br25h3im6svtf846lbblj6k951u NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) PRI7VBA70F6K4J8D6I01NU7HNB534T7B.anl.gov. 7200 IN RRSIG ( NSEC3 8 3 7200 20201125033110 20201026025551 11793 anl.gov. NIJgIkGhNbeX3p2PFF7bSrG5MLlZiHhUP6jmFWOZxAjf1Nst0CgK0rW5tiwxde2v0T7O8CmPxH1G 9z+/SEwVZbx0GYRCpHmAM8gRJJE0NNXw30DEZLVKVuRhLxiMMCb0inp6Zfph6YybaoLy/Ohc8m4x Dh1rFPzeMMb2+W94GZUH7ly9jNcJ7+AhLbTH31a91ghKfhTLdCN3amJgEqH64WBYQrQZTlfOPJML rIBN9Hg1kWUP2Bqc17D75EMm2fkEpo8MTerSkuO3eyHUo1pBa8fdntCMM+ZCmpBvTuJzvaDyOmgo g1WE8Hxprj3LW9kjXpLXpi82nnsaf52Qm+qPqw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ANL.GOV is authoritative for ANL.GOV
	Found RRSIG signed by anl.gov zone
	Query to adns1.es.net for ANL.GOV/SOA
	Received 390 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (390 bytes) ;; HEADER SECTION ;; id = 51029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to t1dns1.ANL.GOV for ANL.GOV/SOA
	Received 2063 bytes from 130.202.101.6
	;; Answer received from 130.202.101.6 (2063 bytes) ;; HEADER SECTION ;; id = 17777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS nsx.lbl.gov. anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20201125011712 20201026004519 11793 anl.gov. Ex1KSnZHCOl89DQX8YIe+Wx5yXMKSaK6Ul9fXxnmNG1kumkHK5DGF7ymHm9NyFDP6bjoXdLvgSBx z2gXnsyG4xD2X2Ruq3pz5i0XtctUB+2pxD6WL+XPpns7y4N+Md53vW0nyfKcGT7ZJWPSNJt18/l1 ikjnI9xtNW7eJTGbnRApjDn7aVt3q5r4VYhwv6Y+gyn/qxWMreA7kyKhtGHul+fOGIV7GPR1BYFI zgn4wZHYmvVX7WpwWXT+10EBounXXTl4vGDDiredkwECdT5mZW4pMu/x+Fc44LxB6OBTm/zpo2bl fhfpMCJHj5KshYSs3VmIu2KTCNNYvWCtztgSHQ== ) ;; ADDITIONAL SECTION (9 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125044418 20201026042137 11793 anl.gov. LEUF+sbbgbl607lrlMMT/VlM46/DacxRNe1R0ojmrfi/NO7J+8zEJHVLzdJuEq2FRNqphpsAn3XU 2p80prUFQRZ4R++uzTKIm9WAAxcXtN59fq9NBFNG4+TIttxMO0BuON4L/NIdYUIOyyKPPzDXh1MP JqXa50JSy8WimIhAX0zhDo2o2X582To+baKLkTyMVIvfsQZTaVFoqr2C7K8P5tvaaSSohTxygTdD zqdYzuArwslbN/sSZvVeY38efNZ3+RFKqPQDcF/Mir9Ao6m4cqNbrcK1tXyyVNMj+jfny3H0xakt +AId5FOAqGB5I4tqFP7IBXbTPeGB2gHGkKCdNQ== ) t1dns1.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125044418 20201026042137 11793 anl.gov. VSvp6JwXrummc9B3eajWd10d9UNkt7hxUx4/f0In5HjI0uLJNVggbpgJrGxhlQxr7bZvGEmlMPMY RixJsoWQyK/LadBXqQDXTA4BLE1Umh/qnFi4uqPcSmO+n25mkzLCZ3Q7qZgPYbDxbp3X8VRMq+CC b03mMk8pdEzRFS1qjbGuTBqJZ+LU04ZCuyIwK/h+YiAkcGWTcJfKUpTTvzIW/7pfcOb4ulT2najr /F8WTkdHOyAZ1gsIat0K5HP5a6FDcALBc4DMPufO2heUBZfAdX+tSihSB+ZYNo4WOaY1jhEKVzQd uXDmfPgnM9aM7aCZO5fJX3944Jhu3tOGXwixQg== ) t1dns2.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125055504 20201026045935 11793 anl.gov. KaI6YUk9loqkh0A+9YEKeDGoFVNCbfGIkmzD55KmjL/vjGF4WQD+WifdzvswdWdsx0Cu6iXJbB9A 2Vi4/BcDKR/GsG1lJedz4vRrbGq5urm9hGY4l/S/crEpioKjdTzu+zcBDE4BakO+FEpqNySZnuEk nZhhiPfagzswt0JijbzBDIYOmU0reL4zGLKtej8tz/XVwMexpv+4FIHcGKRB1gvu31uZ+F+UCvtI 1M7af56D90wlAOBt4+XaNn35mjtiUT2tdsvEJa0Ky7SBFGAupBrBersxhVB1tOf5jqlMvQjWM6F3 izs68bv57K/gQDr4HDEqRc35pKi/26lFAtpPeA== ) t1dns2.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125055504 20201026045935 11793 anl.gov. I6h0bwhfzHI+Gt5QE9eM4OdrholZhxCjAmsQNkdvuxFRZ7mk4hKBYeJKu48VVZiIEvIYbspx5QBp rr6Hy93cbfXwYpECGiQp9S7kjNDZmWGu2P+CdvHD9HcpGDsry+UUGXkix2DKkrJoZNQlt0xCyy+8 S5ENDU9DhktjPYMJ1fJ/3NrB9B+xZL170x92JIYS5eCW6y8wtGVZ55IGWjtqWgG/c4yyzj5dxORR Ah1jovCowgb68M635bR9wi+8Vu3uq2+Mv6hfhmSuRr0BiuktKjC5/zLAvMQ/3XrxCpSAOsRAvrOf 0pY20tw+D+Hr1d/W9uw3SVJviFscTwrSCnTe0Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nsx.lbl.GOV for ANL.GOV/SOA
	Received 2066 bytes from 131.243.64.3
	;; Answer received from 131.243.64.3 (2066 bytes) ;; HEADER SECTION ;; id = 23808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN NS nsx.lbl.gov. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20201125011712 20201026004519 11793 anl.gov. Ex1KSnZHCOl89DQX8YIe+Wx5yXMKSaK6Ul9fXxnmNG1kumkHK5DGF7ymHm9NyFDP6bjoXdLvgSBx z2gXnsyG4xD2X2Ruq3pz5i0XtctUB+2pxD6WL+XPpns7y4N+Md53vW0nyfKcGT7ZJWPSNJt18/l1 ikjnI9xtNW7eJTGbnRApjDn7aVt3q5r4VYhwv6Y+gyn/qxWMreA7kyKhtGHul+fOGIV7GPR1BYFI zgn4wZHYmvVX7WpwWXT+10EBounXXTl4vGDDiredkwECdT5mZW4pMu/x+Fc44LxB6OBTm/zpo2bl fhfpMCJHj5KshYSs3VmIu2KTCNNYvWCtztgSHQ== ) ;; ADDITIONAL SECTION (9 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125044418 20201026042137 11793 anl.gov. LEUF+sbbgbl607lrlMMT/VlM46/DacxRNe1R0ojmrfi/NO7J+8zEJHVLzdJuEq2FRNqphpsAn3XU 2p80prUFQRZ4R++uzTKIm9WAAxcXtN59fq9NBFNG4+TIttxMO0BuON4L/NIdYUIOyyKPPzDXh1MP JqXa50JSy8WimIhAX0zhDo2o2X582To+baKLkTyMVIvfsQZTaVFoqr2C7K8P5tvaaSSohTxygTdD zqdYzuArwslbN/sSZvVeY38efNZ3+RFKqPQDcF/Mir9Ao6m4cqNbrcK1tXyyVNMj+jfny3H0xakt +AId5FOAqGB5I4tqFP7IBXbTPeGB2gHGkKCdNQ== ) t1dns1.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125044418 20201026042137 11793 anl.gov. VSvp6JwXrummc9B3eajWd10d9UNkt7hxUx4/f0In5HjI0uLJNVggbpgJrGxhlQxr7bZvGEmlMPMY RixJsoWQyK/LadBXqQDXTA4BLE1Umh/qnFi4uqPcSmO+n25mkzLCZ3Q7qZgPYbDxbp3X8VRMq+CC b03mMk8pdEzRFS1qjbGuTBqJZ+LU04ZCuyIwK/h+YiAkcGWTcJfKUpTTvzIW/7pfcOb4ulT2najr /F8WTkdHOyAZ1gsIat0K5HP5a6FDcALBc4DMPufO2heUBZfAdX+tSihSB+ZYNo4WOaY1jhEKVzQd uXDmfPgnM9aM7aCZO5fJX3944Jhu3tOGXwixQg== ) t1dns2.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125055504 20201026045935 11793 anl.gov. KaI6YUk9loqkh0A+9YEKeDGoFVNCbfGIkmzD55KmjL/vjGF4WQD+WifdzvswdWdsx0Cu6iXJbB9A 2Vi4/BcDKR/GsG1lJedz4vRrbGq5urm9hGY4l/S/crEpioKjdTzu+zcBDE4BakO+FEpqNySZnuEk nZhhiPfagzswt0JijbzBDIYOmU0reL4zGLKtej8tz/XVwMexpv+4FIHcGKRB1gvu31uZ+F+UCvtI 1M7af56D90wlAOBt4+XaNn35mjtiUT2tdsvEJa0Ky7SBFGAupBrBersxhVB1tOf5jqlMvQjWM6F3 izs68bv57K/gQDr4HDEqRc35pKi/26lFAtpPeA== ) t1dns2.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125055504 20201026045935 11793 anl.gov. I6h0bwhfzHI+Gt5QE9eM4OdrholZhxCjAmsQNkdvuxFRZ7mk4hKBYeJKu48VVZiIEvIYbspx5QBp rr6Hy93cbfXwYpECGiQp9S7kjNDZmWGu2P+CdvHD9HcpGDsry+UUGXkix2DKkrJoZNQlt0xCyy+8 S5ENDU9DhktjPYMJ1fJ/3NrB9B+xZL170x92JIYS5eCW6y8wtGVZ55IGWjtqWgG/c4yyzj5dxORR Ah1jovCowgb68M635bR9wi+8Vu3uq2+Mv6hfhmSuRr0BiuktKjC5/zLAvMQ/3XrxCpSAOsRAvrOf 0pY20tw+D+Hr1d/W9uw3SVJviFscTwrSCnTe0Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to t1dns2.ANL.GOV for ANL.GOV/SOA
	Received 2063 bytes from 130.202.101.37
	;; Answer received from 130.202.101.37 (2063 bytes) ;; HEADER SECTION ;; id = 58281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN NS nsx.lbl.gov. anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20201125011712 20201026004519 11793 anl.gov. Ex1KSnZHCOl89DQX8YIe+Wx5yXMKSaK6Ul9fXxnmNG1kumkHK5DGF7ymHm9NyFDP6bjoXdLvgSBx z2gXnsyG4xD2X2Ruq3pz5i0XtctUB+2pxD6WL+XPpns7y4N+Md53vW0nyfKcGT7ZJWPSNJt18/l1 ikjnI9xtNW7eJTGbnRApjDn7aVt3q5r4VYhwv6Y+gyn/qxWMreA7kyKhtGHul+fOGIV7GPR1BYFI zgn4wZHYmvVX7WpwWXT+10EBounXXTl4vGDDiredkwECdT5mZW4pMu/x+Fc44LxB6OBTm/zpo2bl fhfpMCJHj5KshYSs3VmIu2KTCNNYvWCtztgSHQ== ) ;; ADDITIONAL SECTION (9 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125044418 20201026042137 11793 anl.gov. LEUF+sbbgbl607lrlMMT/VlM46/DacxRNe1R0ojmrfi/NO7J+8zEJHVLzdJuEq2FRNqphpsAn3XU 2p80prUFQRZ4R++uzTKIm9WAAxcXtN59fq9NBFNG4+TIttxMO0BuON4L/NIdYUIOyyKPPzDXh1MP JqXa50JSy8WimIhAX0zhDo2o2X582To+baKLkTyMVIvfsQZTaVFoqr2C7K8P5tvaaSSohTxygTdD zqdYzuArwslbN/sSZvVeY38efNZ3+RFKqPQDcF/Mir9Ao6m4cqNbrcK1tXyyVNMj+jfny3H0xakt +AId5FOAqGB5I4tqFP7IBXbTPeGB2gHGkKCdNQ== ) t1dns1.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125044418 20201026042137 11793 anl.gov. VSvp6JwXrummc9B3eajWd10d9UNkt7hxUx4/f0In5HjI0uLJNVggbpgJrGxhlQxr7bZvGEmlMPMY RixJsoWQyK/LadBXqQDXTA4BLE1Umh/qnFi4uqPcSmO+n25mkzLCZ3Q7qZgPYbDxbp3X8VRMq+CC b03mMk8pdEzRFS1qjbGuTBqJZ+LU04ZCuyIwK/h+YiAkcGWTcJfKUpTTvzIW/7pfcOb4ulT2najr /F8WTkdHOyAZ1gsIat0K5HP5a6FDcALBc4DMPufO2heUBZfAdX+tSihSB+ZYNo4WOaY1jhEKVzQd uXDmfPgnM9aM7aCZO5fJX3944Jhu3tOGXwixQg== ) t1dns2.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125055504 20201026045935 11793 anl.gov. KaI6YUk9loqkh0A+9YEKeDGoFVNCbfGIkmzD55KmjL/vjGF4WQD+WifdzvswdWdsx0Cu6iXJbB9A 2Vi4/BcDKR/GsG1lJedz4vRrbGq5urm9hGY4l/S/crEpioKjdTzu+zcBDE4BakO+FEpqNySZnuEk nZhhiPfagzswt0JijbzBDIYOmU0reL4zGLKtej8tz/XVwMexpv+4FIHcGKRB1gvu31uZ+F+UCvtI 1M7af56D90wlAOBt4+XaNn35mjtiUT2tdsvEJa0Ky7SBFGAupBrBersxhVB1tOf5jqlMvQjWM6F3 izs68bv57K/gQDr4HDEqRc35pKi/26lFAtpPeA== ) t1dns2.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125055504 20201026045935 11793 anl.gov. I6h0bwhfzHI+Gt5QE9eM4OdrholZhxCjAmsQNkdvuxFRZ7mk4hKBYeJKu48VVZiIEvIYbspx5QBp rr6Hy93cbfXwYpECGiQp9S7kjNDZmWGu2P+CdvHD9HcpGDsry+UUGXkix2DKkrJoZNQlt0xCyy+8 S5ENDU9DhktjPYMJ1fJ/3NrB9B+xZL170x92JIYS5eCW6y8wtGVZ55IGWjtqWgG/c4yyzj5dxORR Ah1jovCowgb68M635bR9wi+8Vu3uq2+Mv6hfhmSuRr0BiuktKjC5/zLAvMQ/3XrxCpSAOsRAvrOf 0pY20tw+D+Hr1d/W9uw3SVJviFscTwrSCnTe0Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns2.es.net for ANL.GOV/SOA
	Received 2066 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (2066 bytes) ;; HEADER SECTION ;; id = 2667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN NS nsx.lbl.gov. anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20201125011712 20201026004519 11793 anl.gov. Ex1KSnZHCOl89DQX8YIe+Wx5yXMKSaK6Ul9fXxnmNG1kumkHK5DGF7ymHm9NyFDP6bjoXdLvgSBx z2gXnsyG4xD2X2Ruq3pz5i0XtctUB+2pxD6WL+XPpns7y4N+Md53vW0nyfKcGT7ZJWPSNJt18/l1 ikjnI9xtNW7eJTGbnRApjDn7aVt3q5r4VYhwv6Y+gyn/qxWMreA7kyKhtGHul+fOGIV7GPR1BYFI zgn4wZHYmvVX7WpwWXT+10EBounXXTl4vGDDiredkwECdT5mZW4pMu/x+Fc44LxB6OBTm/zpo2bl fhfpMCJHj5KshYSs3VmIu2KTCNNYvWCtztgSHQ== ) ;; ADDITIONAL SECTION (9 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125044418 20201026042137 11793 anl.gov. LEUF+sbbgbl607lrlMMT/VlM46/DacxRNe1R0ojmrfi/NO7J+8zEJHVLzdJuEq2FRNqphpsAn3XU 2p80prUFQRZ4R++uzTKIm9WAAxcXtN59fq9NBFNG4+TIttxMO0BuON4L/NIdYUIOyyKPPzDXh1MP JqXa50JSy8WimIhAX0zhDo2o2X582To+baKLkTyMVIvfsQZTaVFoqr2C7K8P5tvaaSSohTxygTdD zqdYzuArwslbN/sSZvVeY38efNZ3+RFKqPQDcF/Mir9Ao6m4cqNbrcK1tXyyVNMj+jfny3H0xakt +AId5FOAqGB5I4tqFP7IBXbTPeGB2gHGkKCdNQ== ) t1dns1.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125044418 20201026042137 11793 anl.gov. VSvp6JwXrummc9B3eajWd10d9UNkt7hxUx4/f0In5HjI0uLJNVggbpgJrGxhlQxr7bZvGEmlMPMY RixJsoWQyK/LadBXqQDXTA4BLE1Umh/qnFi4uqPcSmO+n25mkzLCZ3Q7qZgPYbDxbp3X8VRMq+CC b03mMk8pdEzRFS1qjbGuTBqJZ+LU04ZCuyIwK/h+YiAkcGWTcJfKUpTTvzIW/7pfcOb4ulT2najr /F8WTkdHOyAZ1gsIat0K5HP5a6FDcALBc4DMPufO2heUBZfAdX+tSihSB+ZYNo4WOaY1jhEKVzQd uXDmfPgnM9aM7aCZO5fJX3944Jhu3tOGXwixQg== ) t1dns2.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20201125055504 20201026045935 11793 anl.gov. KaI6YUk9loqkh0A+9YEKeDGoFVNCbfGIkmzD55KmjL/vjGF4WQD+WifdzvswdWdsx0Cu6iXJbB9A 2Vi4/BcDKR/GsG1lJedz4vRrbGq5urm9hGY4l/S/crEpioKjdTzu+zcBDE4BakO+FEpqNySZnuEk nZhhiPfagzswt0JijbzBDIYOmU0reL4zGLKtej8tz/XVwMexpv+4FIHcGKRB1gvu31uZ+F+UCvtI 1M7af56D90wlAOBt4+XaNn35mjtiUT2tdsvEJa0Ky7SBFGAupBrBersxhVB1tOf5jqlMvQjWM6F3 izs68bv57K/gQDr4HDEqRc35pKi/26lFAtpPeA== ) t1dns2.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20201125055504 20201026045935 11793 anl.gov. I6h0bwhfzHI+Gt5QE9eM4OdrholZhxCjAmsQNkdvuxFRZ7mk4hKBYeJKu48VVZiIEvIYbspx5QBp rr6Hy93cbfXwYpECGiQp9S7kjNDZmWGu2P+CdvHD9HcpGDsry+UUGXkix2DKkrJoZNQlt0xCyy+8 S5ENDU9DhktjPYMJ1fJ/3NrB9B+xZL170x92JIYS5eCW6y8wtGVZ55IGWjtqWgG/c4yyzj5dxORR Ah1jovCowgb68M635bR9wi+8Vu3uq2+Mv6hfhmSuRr0BiuktKjC5/zLAvMQ/3XrxCpSAOsRAvrOf 0pY20tw+D+Hr1d/W9uw3SVJviFscTwrSCnTe0Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to t1dns2.ANL.GOV for ANL.GOV/A
	Received 769 bytes from 130.202.101.37
	;; Answer received from 130.202.101.37 (769 bytes) ;; HEADER SECTION ;; id = 24053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2020103041 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== ) PRI7VBA70F6K4J8D6I01NU7HNB534T7B.anl.gov. 7200 IN NSEC3 ( 1 0 10 f7ab14d7 psjg4br25h3im6svtf846lbblj6k951u NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) PRI7VBA70F6K4J8D6I01NU7HNB534T7B.anl.gov. 7200 IN RRSIG ( NSEC3 8 3 7200 20201125033110 20201026025551 11793 anl.gov. NIJgIkGhNbeX3p2PFF7bSrG5MLlZiHhUP6jmFWOZxAjf1Nst0CgK0rW5tiwxde2v0T7O8CmPxH1G 9z+/SEwVZbx0GYRCpHmAM8gRJJE0NNXw30DEZLVKVuRhLxiMMCb0inp6Zfph6YybaoLy/Ohc8m4x Dh1rFPzeMMb2+W94GZUH7ly9jNcJ7+AhLbTH31a91ghKfhTLdCN3amJgEqH64WBYQrQZTlfOPJML rIBN9Hg1kWUP2Bqc17D75EMm2fkEpo8MTerSkuO3eyHUo1pBa8fdntCMM+ZCmpBvTuJzvaDyOmgo g1WE8Hxprj3LW9kjXpLXpi82nnsaf52Qm+qPqw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20201130162248 20201031152248 11793 anl.gov. dpU9QOoA5hVWx9ofSY74B82BrPY55tPDhHoS1z+dKucABmTCePNmumshxWxOGG14mprvJQ1xFcwl 8Z/hFoPoGR3ZRU+dF240hholRhmqCCwKNPCpW3FaBogscYVsgMGYSxaSgpRPvizhplFFoER9L+ds bou9PsHZTBbwtewM87qxx8tCNBINf1RKLNgdB1YZd5z0F/uxIeBR7cJKcPHdDQx0yWF/iTkBx6z2 WUoOQ84YvKzI5M8Ldvmo5UMCR6xdIBdX3khBvAQnjGPVtO7RV7UkvxU/UakmWWJogQhKdz2b4Feg cjDRihR5EZa1nXKUgGibYWFNXgwsOKIgl/aLeA== )`
	RRSIG=11793 and DNSKEY=11793 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ANL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: