DNSSEC Analyzer

Domain Name:

Time: 2019-12-09 07:55:32 UTC, NTP stratum 4

Analyzing DNSSEC problems for ARM.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 47395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to i.root-servers.net for ARM.GOV/A
	Received 665 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (665 bytes) ;; HEADER SECTION ;; id = 42136 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 24928 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 52749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 55452 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to a.gov-servers.net for ARM.GOV/A
	Received 561 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (561 bytes) ;; HEADER SECTION ;; id = 54158 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ARM.GOV. 86400 IN NS adns1.es.net. ARM.GOV. 86400 IN NS t1dns1.anl.GOV. ARM.GOV. 86400 IN NS adns2.es.net. ARM.GOV. 86400 IN NS nsx.lbl.GOV. ARM.GOV. 86400 IN NS t1dns2.anl.GOV. ARM.GOV. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac ARM.GOV. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b ) ARM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. pYjGKQ4R3eH3TsOtj2q0gUjm2enWpMhvLK/55Wp+DccIkMz8GaRzpG65o1lgCW0ydMSZrghnV8Ca pnBqsqRvwlgHhg5ZH4w8/IMNNm5eY5Cc7vdE/k3qlA14o79N6DAYCwai+RMuC9vFpf/6bfFUKrKS X3wNNw4Q1eMVz/SmLKDVYpKnVHt38vafurw7TWNIFZF6XvcCuSUQr0DhKKWJlQ== ) ;; ADDITIONAL SECTION (7 records) t1dns1.anl.GOV. 86400 IN A 130.202.101.6 t1dns1.anl.GOV. 86400 IN AAAA 2620:0:dc0:180e::6 nsx.lbl.GOV. 86400 IN A 131.243.64.3 nsx.lbl.GOV. 86400 IN AAAA 2620:83:8000:140::3 t1dns2.anl.GOV. 86400 IN A 130.202.101.37 t1dns2.anl.GOV. 86400 IN AAAA 2620:0:dc0:180d::37 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for ARM.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for ARM.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 561 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (561 bytes) ;; HEADER SECTION ;; id = 48522 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ARM.GOV. 86400 IN NS adns1.es.net. ARM.GOV. 86400 IN NS t1dns1.anl.GOV. ARM.GOV. 86400 IN NS adns2.es.net. ARM.GOV. 86400 IN NS nsx.lbl.GOV. ARM.GOV. 86400 IN NS t1dns2.anl.GOV. ARM.GOV. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac ARM.GOV. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b ) ARM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. pYjGKQ4R3eH3TsOtj2q0gUjm2enWpMhvLK/55Wp+DccIkMz8GaRzpG65o1lgCW0ydMSZrghnV8Ca pnBqsqRvwlgHhg5ZH4w8/IMNNm5eY5Cc7vdE/k3qlA14o79N6DAYCwai+RMuC9vFpf/6bfFUKrKS X3wNNw4Q1eMVz/SmLKDVYpKnVHt38vafurw7TWNIFZF6XvcCuSUQr0DhKKWJlQ== ) ;; ADDITIONAL SECTION (7 records) t1dns1.anl.GOV. 86400 IN A 130.202.101.6 t1dns1.anl.GOV. 86400 IN AAAA 2620:0:dc0:180e::6 nsx.lbl.GOV. 86400 IN A 131.243.64.3 nsx.lbl.GOV. 86400 IN AAAA 2620:83:8000:140::3 t1dns2.anl.GOV. 86400 IN A 130.202.101.37 t1dns2.anl.GOV. 86400 IN AAAA 2620:0:dc0:180d::37 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ARM.GOV

ARM.GOV

	Checking DS between GOV and ARM.GOV
	Query to a.gov-servers.net for ARM.GOV/DS
	Received 315 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (315 bytes) ;; HEADER SECTION ;; id = 7187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN DS ;; ANSWER SECTION (3 records) ARM.GOV. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac ARM.GOV. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b ) ARM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. pYjGKQ4R3eH3TsOtj2q0gUjm2enWpMhvLK/55Wp+DccIkMz8GaRzpG65o1lgCW0ydMSZrghnV8Ca pnBqsqRvwlgHhg5ZH4w8/IMNNm5eY5Cc7vdE/k3qlA14o79N6DAYCwai+RMuC9vFpf/6bfFUKrKS X3wNNw4Q1eMVz/SmLKDVYpKnVHt38vafurw7TWNIFZF6XvcCuSUQr0DhKKWJlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for ARM.GOV in the GOV zone
	DS=15769/SHA-1 has algorithm RSASHA256
	DS=15769/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ARM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. pYjGKQ4R3eH3TsOtj2q0gUjm2enWpMhvLK/55Wp+DccIkMz8GaRzpG65o1lgCW0ydMSZrghnV8Ca pnBqsqRvwlgHhg5ZH4w8/IMNNm5eY5Cc7vdE/k3qlA14o79N6DAYCwai+RMuC9vFpf/6bfFUKrKS X3wNNw4Q1eMVz/SmLKDVYpKnVHt38vafurw7TWNIFZF6XvcCuSUQr0DhKKWJlQ== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=15769/SHA-1 is now in the chain-of-trust
	`ARM.GOV. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac`
	`ARM.GOV. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b )`
	Query to nsx.lbl.GOV for ARM.GOV/DNSKEY
	Received 1185 bytes from 131.243.64.3
	;; Answer received from 131.243.64.3 (1185 bytes) ;; HEADER SECTION ;; id = 34532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) arm.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAa1jCAewph7Fz9ZnAoCQSaRgCaA2/AYQvvNXsAzr8Lc7oFv1tYFhlxBVEzrKJ2IMK+99sTWE dnnelfQigJxKD9SbCraQpPtWgBKnZJHoK2lrdceLaSWbDOEimgvmzYqwx9T5Nj7HaD0r/GvZXwyU zUfThA62Ay0poG4NTLGZjvtrqjcbCww9kUnZp95agVohNttfkJpTsgX7UPX64O6MYsiy2XMrNTAF TPqXIIQb2F9WHPvLUNBi/L+iBOPCeE9XW3GMGetCu/oCSX0hDVQG/aHh+D+/hcHhrSatBZVGxgWf IGa6qHDyqJwWJAmU6hjBDsOh4W0gPI8LAD1i2Pyvtz0= ) ; Key ID = 15769 arm.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcKfn6dTBzOontHFOnoR4V+n0FC6XUhnzi+9+YycT8zJRZJIsZwvMmC60sF6zMz9iJPS8mfk 0mi9XgVa/P2lnRSnKYzwf6CkVNgBcXjEWlG0/hgom6jx9bkCF8Pr0+w14tZHDhf3kUrCazDFvVHa bDk3pJ+G3vQWeCdMnIcKkhrVzgeCmhKG3+4tWSa7YJOw8h6zt3zGSpETIHcAgy2NqfCmDQJxjdLV t+pzDyFjyYU0BPiZIirA1bn1KFoiZn/Voie7xeUxln6oYheCaUwedySnc/HKjM4siW6T5iDBW8sg S7Pww3Rhpaul2LZGOwlIxYgsAZEzvo1qm91EF+5AGhU= ) ; Key ID = 44343 arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191229160042 20191129151618 15769 arm.gov. UD2HvWlVXAyGMTpLqRqH2WcU7KmyRRS1IPizgAtIwtflZgaTkacj2fVk5saEH8flqGtWbz53VL/t 8F+YAsWlRw0U86vwgMyfkeqYcTbpNq2nbiwKA9Kv3nEUpOmyMoPVMhEL5yEwz/sz1QU0mTkpquEg S+oHiQheAxCFiiUNloR+Ad1ep+214Iv8gNjcFxXNE6pi6Pa/jiR0KaNw0tnUwNQtRYAD0FCn+b2M 9rRbAwQ687zMI9uXizCqMAGjiYehOgbM/1SU11Z330B2OB/zJRp4OO1Bzj2X0OHzL2MGfGpxN8gI jn5zRXpahXRA2it2HFbiK29pvKnGnBxbXaM9wQ== ) arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191229160042 20191129151618 44343 arm.gov. o6L70a2MdJEiDptJp2n/T0pCeiBrRc9/+Oi7A02yVay4PagaRPNMORFp0phSQfikgobeOgUHvCZR Dd/Uex4I8S+ub+3ECFhTAeY7oZEV7ju451jS8SQhXEDSgjBxN7mR5vNfHDInjxAhLnfs6m9n7JgG FNHZoD3DecveFXOsQ/kpNXzi7rxJELUpX8deZrsLwGyPhucSMbyLPvucyrR+AOZWYJW7d63/rPEY qHwtDucj0SIbsPTdhwJZPDtShSMwUGHz0KUsA9MEU3NpHEdD+++OhxQGFDf+PSuc2ji/UsXwElD0 RkdHLwO4bAvp73ZNl9SV25dHPTUXTtYE3Nw2mA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for ARM.GOV
	`arm.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAa1jCAewph7Fz9ZnAoCQSaRgCaA2/AYQvvNXsAzr8Lc7oFv1tYFhlxBVEzrKJ2IMK+99sTWE dnnelfQigJxKD9SbCraQpPtWgBKnZJHoK2lrdceLaSWbDOEimgvmzYqwx9T5Nj7HaD0r/GvZXwyU zUfThA62Ay0poG4NTLGZjvtrqjcbCww9kUnZp95agVohNttfkJpTsgX7UPX64O6MYsiy2XMrNTAF TPqXIIQb2F9WHPvLUNBi/L+iBOPCeE9XW3GMGetCu/oCSX0hDVQG/aHh+D+/hcHhrSatBZVGxgWf IGa6qHDyqJwWJAmU6hjBDsOh4W0gPI8LAD1i2Pyvtz0= ) ; Key ID = 15769`
	`arm.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcKfn6dTBzOontHFOnoR4V+n0FC6XUhnzi+9+YycT8zJRZJIsZwvMmC60sF6zMz9iJPS8mfk 0mi9XgVa/P2lnRSnKYzwf6CkVNgBcXjEWlG0/hgom6jx9bkCF8Pr0+w14tZHDhf3kUrCazDFvVHa bDk3pJ+G3vQWeCdMnIcKkhrVzgeCmhKG3+4tWSa7YJOw8h6zt3zGSpETIHcAgy2NqfCmDQJxjdLV t+pzDyFjyYU0BPiZIirA1bn1KFoiZn/Voie7xeUxln6oYheCaUwedySnc/HKjM4siW6T5iDBW8sg S7Pww3Rhpaul2LZGOwlIxYgsAZEzvo1qm91EF+5AGhU= ) ; Key ID = 44343`
	DNSKEY=15769/SEP is now in the chain-of-trust
	DS=15769/SHA-1 verifies DNSKEY=15769/SEP
	DS=15769/SHA-256 verifies DNSKEY=15769/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191229160042 20191129151618 15769 arm.gov. UD2HvWlVXAyGMTpLqRqH2WcU7KmyRRS1IPizgAtIwtflZgaTkacj2fVk5saEH8flqGtWbz53VL/t 8F+YAsWlRw0U86vwgMyfkeqYcTbpNq2nbiwKA9Kv3nEUpOmyMoPVMhEL5yEwz/sz1QU0mTkpquEg S+oHiQheAxCFiiUNloR+Ad1ep+214Iv8gNjcFxXNE6pi6Pa/jiR0KaNw0tnUwNQtRYAD0FCn+b2M 9rRbAwQ687zMI9uXizCqMAGjiYehOgbM/1SU11Z330B2OB/zJRp4OO1Bzj2X0OHzL2MGfGpxN8gI jn5zRXpahXRA2it2HFbiK29pvKnGnBxbXaM9wQ== )`
	`arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191229160042 20191129151618 44343 arm.gov. o6L70a2MdJEiDptJp2n/T0pCeiBrRc9/+Oi7A02yVay4PagaRPNMORFp0phSQfikgobeOgUHvCZR Dd/Uex4I8S+ub+3ECFhTAeY7oZEV7ju451jS8SQhXEDSgjBxN7mR5vNfHDInjxAhLnfs6m9n7JgG FNHZoD3DecveFXOsQ/kpNXzi7rxJELUpX8deZrsLwGyPhucSMbyLPvucyrR+AOZWYJW7d63/rPEY qHwtDucj0SIbsPTdhwJZPDtShSMwUGHz0KUsA9MEU3NpHEdD+++OhxQGFDf+PSuc2ji/UsXwElD0 RkdHLwO4bAvp73ZNl9SV25dHPTUXTtYE3Nw2mA== )`
	RRSIG=15769 and DNSKEY=15769/SEP verifies the DNSKEY RRset
	RRSIG=44343 and DNSKEY=44343 verifies the DNSKEY RRset
	DNSKEY=44343 is now in the chain-of-trust
	Query to adns1.es.net for ARM.GOV/A
	Error querying adns1.es.net/2001:400:ffff:ffff:ffff:0:0:4444 for ARM.GOV/A: 'IPv6 transport disabled'
	Received 769 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (769 bytes) ;; HEADER SECTION ;; id = 63023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20200104070423 20191205063645 44343 arm.gov. O/vC6r2a/lGgWwPhV9TVmaf4qfZC1sfCTsyTbAs17gKn/SFQi90huIjZqmJ75f4SayEGEyDkJX/P /2Vgb6rNjWtvpW5zNH0fVnkPOk3uWufWhsNFnxCb5xFyYoTRLUDh+KScMChmDvUkeLa1EOk3QqDl AkGMyCY2cAZpS6bMaAfPcHJjbnhXTTO8hvmotMQfnmTdB+HKD0W32tTpYX88VuLU7H4JtPS6xbbM QMt25G0+z8Q5BP4qHWDdFSjKP02QyuvthoZzSRy/bF1vvo3i+j88HPdUbmE+RAU5J8mfd2/x1ZTk 8yAXA1MJ1/+35JUrNd8YCt9eP8tcaEy7y368CA== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ARM.GOV is authoritative for ARM.GOV
	Found RRSIG signed by arm.gov zone
	Query to nsx.lbl.gov for ARM.GOV/SOA
	Error querying nsx.lbl.gov/2620:83:8000:140:0:0:0:3 for ARM.GOV/SOA: 'IPv6 transport disabled'
	Received 802 bytes from 131.243.64.3
	;; Answer received from 131.243.64.3 (802 bytes) ;; HEADER SECTION ;; id = 966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2019120436 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200108053245 20191209043245 44343 arm.gov. lA+vtxTNYa/S2mLu/vIxpwztELuEMkpxD5A/+xulBhfzLns25kNTz0USETxt2qZ/PFWC8ytunBYn 4IjgSagEgA2EhO5qxUbNGdx+Q8cNvEHYI5dL2vMCnK1UDKg1WWlQCub8+aBP3rYXn395iS+zTjt9 /0i4QmrgjeUtOJPUtY+qKIuk5kg9Zsxrr+TAC1ukDCrtTx6MfGX2lSgLnS5Z+AetR2gQeDhJzQsZ qpgWojibI6yQcr3vWIuhZJ5FmWQZmxkoP2ZqG88YC09XMwoSeew9RJF7fiE5pR7W5k8rzOP+KeNK 1p2s3WRnuvpJjCCjpl+yzAYCHHgpzhTEbrC63g== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to t1dns1.anl.gov for ARM.GOV/SOA
	Error querying t1dns1.anl.gov/2620:0:dc0:180e:0:0:0:6 for ARM.GOV/SOA: 'IPv6 transport disabled'
	Received 2064 bytes from 130.202.101.6
	;; Answer received from 130.202.101.6 (2064 bytes) ;; HEADER SECTION ;; id = 19874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2019120436 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200108053245 20191209043245 44343 arm.gov. lA+vtxTNYa/S2mLu/vIxpwztELuEMkpxD5A/+xulBhfzLns25kNTz0USETxt2qZ/PFWC8ytunBYn 4IjgSagEgA2EhO5qxUbNGdx+Q8cNvEHYI5dL2vMCnK1UDKg1WWlQCub8+aBP3rYXn395iS+zTjt9 /0i4QmrgjeUtOJPUtY+qKIuk5kg9Zsxrr+TAC1ukDCrtTx6MfGX2lSgLnS5Z+AetR2gQeDhJzQsZ qpgWojibI6yQcr3vWIuhZJ5FmWQZmxkoP2ZqG88YC09XMwoSeew9RJF7fiE5pR7W5k8rzOP+KeNK 1p2s3WRnuvpJjCCjpl+yzAYCHHgpzhTEbrC63g== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (9 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20191224004253 20191123234355 11793 anl.gov. RHrLbqeHxdsbI6exg5o3PWB70BrMisuKXcL+eP/QEcBW7gWSVKKAqGlN5iOyQgPIsOAhq1tvH73H ERfTbfLtLjeUJl+qLxlUGcP9RacqvyR5C0D3sE/6BffKKKWQQD1NrUHoqPRWMo4lz/Rv5rXKBiVa XkMctenk/QC5sfQuTTjy9ktUQeQnSNQsPFJ2xPME+dgca1HS0pBhuDIZcnvERLyBtIrp14VEVpPT Oozw3LZ7V/gedJwCFTgXj1Xubfrxzi9JPxqWyUJWXsPjtxhXXvDcsvM6YS+LTUBncxGHCswBhlEY TMfdAYfZyq1Rlm5WK0ApV98d+YjRPFi/hvdZvQ== ) t1dns1.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20191224004253 20191123234355 11793 anl.gov. Pkfv3WCD70xdSYlKyqZarBUpFnTNJbiOIffaeXwLKvKuggR3a1+NE1OXW3Yq63abVeoTA3F/VYQI EdWsG8p3uHvZ/SMeWxt+tMWCTRnLoofs1HVhYHTV9w3s6WOV0V5CjhFbOM8fh7mfq23wScgS0zO4 gt6Q3bMB6rnFFQ7DwaX52Xrr8U6KsxTeprLWMJ/Nq0Fi3ePLKPNR4FREvJferkaLdYkmkt4v2MYW 41ynK5AESAZSvTcnf/6DV4JQwgBfLfkEDKVnOCTMom6XUzb5e9oG+xjvmW8TPXnQ3VgDYo4+8DUH JJ7Rf2lAD79w2nsDnICoO1wcc+tusbWc9+rbug== ) t1dns2.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20191223235548 20191123225900 11793 anl.gov. Pg1HB21J32q0Y9PxXvg0NgGzyJ0RomKCpM9BgKLxQoAODaRO966/8zyIPInz0SJREZXYeQpzE/iU sCYlpANtKmEm748osRWcCpOhQJvrni5IPMTsuRK2E358OB4QAVB5tZpWVtySjPh9ua/eejGgMDk+ hnK8zA+MNsSMVGDJJ0/RUMz85e6IB2AnsoCfDKzbLVA409xbe4DhFvEcm02gsZL7U1L5TfpSH+dw dazn509g8wSo38+zCiJLYv2tMCWx/WKOcagkD+StU8t0G0NEtm02j23Ko5NxofncwHt3BfcDSdeR lNNTVgvlv7dIRTj8OnwZE2YieIi2p45jC26RFA== ) t1dns2.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20191223235548 20191123225900 11793 anl.gov. Tu7uGagmJNfJIrMGGY3IdZ7ftS8FsFXih3u4x6+q7YOLWCEBsrk+6MzRjQoRscW0clyupoghCJ4k Rja7Ig99vEn/Hqa/PV/BSMtdlEa+Wk0xhrzb7ZsTW+rFzuh00DTwT2AaVMzTNFDVBi6mDVVd+XC0 H5dwOF8QviTphC1EaC+QFU4puXQBtlr5WuDSYnG7jX8gMyOABakt77irFKxo0WV/KJsHAKt5pf8f bUoR77N0NB704feqRW4hCgkFlujrAj7GWRtqJCerCsLfiz7yw1ZaYy/GiJ/Y8MlJ0C2TZ55Hh61Z pZL4lovNkkAvI+UZyMtltrKOAcva/FjAxcbJhw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns1.es.net for ARM.GOV/SOA
	Received 802 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (802 bytes) ;; HEADER SECTION ;; id = 15764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2019120436 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200108053245 20191209043245 44343 arm.gov. lA+vtxTNYa/S2mLu/vIxpwztELuEMkpxD5A/+xulBhfzLns25kNTz0USETxt2qZ/PFWC8ytunBYn 4IjgSagEgA2EhO5qxUbNGdx+Q8cNvEHYI5dL2vMCnK1UDKg1WWlQCub8+aBP3rYXn395iS+zTjt9 /0i4QmrgjeUtOJPUtY+qKIuk5kg9Zsxrr+TAC1ukDCrtTx6MfGX2lSgLnS5Z+AetR2gQeDhJzQsZ qpgWojibI6yQcr3vWIuhZJ5FmWQZmxkoP2ZqG88YC09XMwoSeew9RJF7fiE5pR7W5k8rzOP+KeNK 1p2s3WRnuvpJjCCjpl+yzAYCHHgpzhTEbrC63g== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to t1dns2.anl.gov for ARM.GOV/SOA
	Received 2064 bytes from 130.202.101.37
	;; Answer received from 130.202.101.37 (2064 bytes) ;; HEADER SECTION ;; id = 51553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2019120436 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200108053245 20191209043245 44343 arm.gov. lA+vtxTNYa/S2mLu/vIxpwztELuEMkpxD5A/+xulBhfzLns25kNTz0USETxt2qZ/PFWC8ytunBYn 4IjgSagEgA2EhO5qxUbNGdx+Q8cNvEHYI5dL2vMCnK1UDKg1WWlQCub8+aBP3rYXn395iS+zTjt9 /0i4QmrgjeUtOJPUtY+qKIuk5kg9Zsxrr+TAC1ukDCrtTx6MfGX2lSgLnS5Z+AetR2gQeDhJzQsZ qpgWojibI6yQcr3vWIuhZJ5FmWQZmxkoP2ZqG88YC09XMwoSeew9RJF7fiE5pR7W5k8rzOP+KeNK 1p2s3WRnuvpJjCCjpl+yzAYCHHgpzhTEbrC63g== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (9 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20191224004253 20191123234355 11793 anl.gov. RHrLbqeHxdsbI6exg5o3PWB70BrMisuKXcL+eP/QEcBW7gWSVKKAqGlN5iOyQgPIsOAhq1tvH73H ERfTbfLtLjeUJl+qLxlUGcP9RacqvyR5C0D3sE/6BffKKKWQQD1NrUHoqPRWMo4lz/Rv5rXKBiVa XkMctenk/QC5sfQuTTjy9ktUQeQnSNQsPFJ2xPME+dgca1HS0pBhuDIZcnvERLyBtIrp14VEVpPT Oozw3LZ7V/gedJwCFTgXj1Xubfrxzi9JPxqWyUJWXsPjtxhXXvDcsvM6YS+LTUBncxGHCswBhlEY TMfdAYfZyq1Rlm5WK0ApV98d+YjRPFi/hvdZvQ== ) t1dns1.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20191224004253 20191123234355 11793 anl.gov. Pkfv3WCD70xdSYlKyqZarBUpFnTNJbiOIffaeXwLKvKuggR3a1+NE1OXW3Yq63abVeoTA3F/VYQI EdWsG8p3uHvZ/SMeWxt+tMWCTRnLoofs1HVhYHTV9w3s6WOV0V5CjhFbOM8fh7mfq23wScgS0zO4 gt6Q3bMB6rnFFQ7DwaX52Xrr8U6KsxTeprLWMJ/Nq0Fi3ePLKPNR4FREvJferkaLdYkmkt4v2MYW 41ynK5AESAZSvTcnf/6DV4JQwgBfLfkEDKVnOCTMom6XUzb5e9oG+xjvmW8TPXnQ3VgDYo4+8DUH JJ7Rf2lAD79w2nsDnICoO1wcc+tusbWc9+rbug== ) t1dns2.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20191223235548 20191123225900 11793 anl.gov. Pg1HB21J32q0Y9PxXvg0NgGzyJ0RomKCpM9BgKLxQoAODaRO966/8zyIPInz0SJREZXYeQpzE/iU sCYlpANtKmEm748osRWcCpOhQJvrni5IPMTsuRK2E358OB4QAVB5tZpWVtySjPh9ua/eejGgMDk+ hnK8zA+MNsSMVGDJJ0/RUMz85e6IB2AnsoCfDKzbLVA409xbe4DhFvEcm02gsZL7U1L5TfpSH+dw dazn509g8wSo38+zCiJLYv2tMCWx/WKOcagkD+StU8t0G0NEtm02j23Ko5NxofncwHt3BfcDSdeR lNNTVgvlv7dIRTj8OnwZE2YieIi2p45jC26RFA== ) t1dns2.anl.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20191223235548 20191123225900 11793 anl.gov. Tu7uGagmJNfJIrMGGY3IdZ7ftS8FsFXih3u4x6+q7YOLWCEBsrk+6MzRjQoRscW0clyupoghCJ4k Rja7Ig99vEn/Hqa/PV/BSMtdlEa+Wk0xhrzb7ZsTW+rFzuh00DTwT2AaVMzTNFDVBi6mDVVd+XC0 H5dwOF8QviTphC1EaC+QFU4puXQBtlr5WuDSYnG7jX8gMyOABakt77irFKxo0WV/KJsHAKt5pf8f bUoR77N0NB704feqRW4hCgkFlujrAj7GWRtqJCerCsLfiz7yw1ZaYy/GiJ/Y8MlJ0C2TZ55Hh61Z pZL4lovNkkAvI+UZyMtltrKOAcva/FjAxcbJhw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns2.es.net for ARM.GOV/SOA
	Received 802 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (802 bytes) ;; HEADER SECTION ;; id = 13116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2019120436 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200108053245 20191209043245 44343 arm.gov. lA+vtxTNYa/S2mLu/vIxpwztELuEMkpxD5A/+xulBhfzLns25kNTz0USETxt2qZ/PFWC8ytunBYn 4IjgSagEgA2EhO5qxUbNGdx+Q8cNvEHYI5dL2vMCnK1UDKg1WWlQCub8+aBP3rYXn395iS+zTjt9 /0i4QmrgjeUtOJPUtY+qKIuk5kg9Zsxrr+TAC1ukDCrtTx6MfGX2lSgLnS5Z+AetR2gQeDhJzQsZ qpgWojibI6yQcr3vWIuhZJ5FmWQZmxkoP2ZqG88YC09XMwoSeew9RJF7fiE5pR7W5k8rzOP+KeNK 1p2s3WRnuvpJjCCjpl+yzAYCHHgpzhTEbrC63g== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns1.es.net for ARM.GOV/A
	Error querying adns1.es.net/2001:400:ffff:ffff:ffff:0:0:4444 for ARM.GOV/A: 'IPv6 transport disabled'
	Received 769 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (769 bytes) ;; HEADER SECTION ;; id = 37132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ARM.GOV. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20200104070423 20191205063645 44343 arm.gov. O/vC6r2a/lGgWwPhV9TVmaf4qfZC1sfCTsyTbAs17gKn/SFQi90huIjZqmJ75f4SayEGEyDkJX/P /2Vgb6rNjWtvpW5zNH0fVnkPOk3uWufWhsNFnxCb5xFyYoTRLUDh+KScMChmDvUkeLa1EOk3QqDl AkGMyCY2cAZpS6bMaAfPcHJjbnhXTTO8hvmotMQfnmTdB+HKD0W32tTpYX88VuLU7H4JtPS6xbbM QMt25G0+z8Q5BP4qHWDdFSjKP02QyuvthoZzSRy/bF1vvo3i+j88HPdUbmE+RAU5J8mfd2/x1ZTk 8yAXA1MJ1/+35JUrNd8YCt9eP8tcaEy7y368CA== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20191229134451 20191129124516 44343 arm.gov. PyxiL1KqUS2mfMPUusXTnuQRYQ26cxlx/iSK59DQuZFoOyr0/ne17uDMdKOPKoo+qwTLTTGqXOm3 T/Xa3tS7DtApiech1r6DNZVJGLYg5lSng5FkSkOMXepqfwW+N10SSapl3KasU+Yc22nBTLw9D3pw vuFs8Ubf9dZ3vc6ISVc1z+G2ynSWkrTOHee7sQJL5mu7VSJQyamvFv5GVBpdLwYWQ8K/sAy2eAm5 9ioonKu0jg7Op+iHdYQSbZNSgcupJiXEaT0eGvMFODU15StKAPZdhItXD8sw5JOwEp/DkAA/RAcv IlZsjO5E9tvV1Yf93YpVQeE96WjsVaj8T+cCiQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ARM.GOV A RR has value 128.219.248.38
	Found 1 RRSIGs over A RRset
	`arm.gov. 86400 IN RRSIG ( A 8 2 86400 20200104070423 20191205063645 44343 arm.gov. O/vC6r2a/lGgWwPhV9TVmaf4qfZC1sfCTsyTbAs17gKn/SFQi90huIjZqmJ75f4SayEGEyDkJX/P /2Vgb6rNjWtvpW5zNH0fVnkPOk3uWufWhsNFnxCb5xFyYoTRLUDh+KScMChmDvUkeLa1EOk3QqDl AkGMyCY2cAZpS6bMaAfPcHJjbnhXTTO8hvmotMQfnmTdB+HKD0W32tTpYX88VuLU7H4JtPS6xbbM QMt25G0+z8Q5BP4qHWDdFSjKP02QyuvthoZzSRy/bF1vvo3i+j88HPdUbmE+RAU5J8mfd2/x1ZTk 8yAXA1MJ1/+35JUrNd8YCt9eP8tcaEy7y368CA== )`
	RRSIG=44343 and DNSKEY=44343 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ARM.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: