DNSSEC Debugger

Domain Name:

Time: 2025-10-15 13:36:29 UTC

Analyzing DNSSEC problems for BPA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 45047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for BPA.GOV/A
	Received 614 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 614 octets ;; HEADER SECTION ;; id = 32263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . 1Lf14jgL4DVY4+iNXSw2RQ8SDe7LK8h3XgCJbdL59bAXMw41pSp6epcA+MBqP66hKCPcnylQACMU qeEF2ey/JOnDj/83aV1DVbA9wb9pRL2bJt/RU84S4j1m5cj/pCU8bfebsz5BJzorv3upAZahnNte neQ/zRD2+WUIXf1mgYEGXAPxdcT8INtwlbsrDk6QhsBihMCPNYiixBsH7bemvZYudxGT+nXNBY1k N01AWZzisRl3TkIhuHJIkL7SV78prmCTfjjKF3zAiBGp9ZfK91q7uRc7vg0+tpEDZR7Wco/48E7s AS5HPj0VGK83U4CdtWPIQg0iahnxiSWZY4TWOA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 610 octets ;; HEADER SECTION ;; id = 62499 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . 1Lf14jgL4DVY4+iNXSw2RQ8SDe7LK8h3XgCJbdL59bAXMw41pSp6epcA+MBqP66hKCPcnylQACMU qeEF2ey/JOnDj/83aV1DVbA9wb9pRL2bJt/RU84S4j1m5cj/pCU8bfebsz5BJzorv3upAZahnNte neQ/zRD2+WUIXf1mgYEGXAPxdcT8INtwlbsrDk6QhsBihMCPNYiixBsH7bemvZYudxGT+nXNBY1k N01AWZzisRl3TkIhuHJIkL7SV78prmCTfjjKF3zAiBGp9ZfK91q7uRc7vg0+tpEDZR7Wco/48E7s AS5HPj0VGK83U4CdtWPIQg0iahnxiSWZY4TWOA== ) ;; ADDITIONAL SECTION (9 records) c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 61190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . 1Lf14jgL4DVY4+iNXSw2RQ8SDe7LK8h3XgCJbdL59bAXMw41pSp6epcA+MBqP66hKCPcnylQACMU qeEF2ey/JOnDj/83aV1DVbA9wb9pRL2bJt/RU84S4j1m5cj/pCU8bfebsz5BJzorv3upAZahnNte neQ/zRD2+WUIXf1mgYEGXAPxdcT8INtwlbsrDk6QhsBihMCPNYiixBsH7bemvZYudxGT+nXNBY1k N01AWZzisRl3TkIhuHJIkL7SV78prmCTfjjKF3zAiBGp9ZfK91q7uRc7vg0+tpEDZR7Wco/48E7s AS5HPj0VGK83U4CdtWPIQg0iahnxiSWZY4TWOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . 1Lf14jgL4DVY4+iNXSw2RQ8SDe7LK8h3XgCJbdL59bAXMw41pSp6epcA+MBqP66hKCPcnylQACMU qeEF2ey/JOnDj/83aV1DVbA9wb9pRL2bJt/RU84S4j1m5cj/pCU8bfebsz5BJzorv3upAZahnNte neQ/zRD2+WUIXf1mgYEGXAPxdcT8INtwlbsrDk6QhsBihMCPNYiixBsH7bemvZYudxGT+nXNBY1k N01AWZzisRl3TkIhuHJIkL7SV78prmCTfjjKF3zAiBGp9ZfK91q7uRc7vg0+tpEDZR7Wco/48E7s AS5HPj0VGK83U4CdtWPIQg0iahnxiSWZY4TWOA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 43074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for BPA.GOV/A
	Received 299 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 299 octets ;; HEADER SECTION ;; id = 30782 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BPA.GOV. 10800 IN NS ns1.BPA.GOV. BPA.GOV. 10800 IN NS ns2.BPA.GOV. BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251016143629 20251014123629 35496 gov. rje/ufSDoEY5g6cnQXET1IvtvOLAQkQaP8dzdfJPSSoX/1n5Nmd2789XenOwSB28SowqFZiKSDB3 k3HU5ZbBrQ== ) ;; ADDITIONAL SECTION (3 records) ns1.BPA.GOV. 3600 IN A 170.160.36.10 ns2.BPA.GOV. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for BPA.GOV/DNSKEY
	Received 299 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 299 octets ;; HEADER SECTION ;; id = 22188 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BPA.GOV. 10800 IN NS ns1.BPA.GOV. BPA.GOV. 10800 IN NS ns2.BPA.GOV. BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251016143629 20251014123629 35496 gov. fLw6v58A11Ja20eNJkgJdrBopmTeltMPhkEEPyEQoQp9BQ7eKjedb/R+vMUhan6Nc7LNW7tcjlFg f4jiyYijFw== ) ;; ADDITIONAL SECTION (3 records) ns1.BPA.GOV. 3600 IN A 170.160.36.10 ns2.BPA.GOV. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone BPA.GOV

BPA.GOV

	Checking DS between GOV and BPA.GOV
	Query to a.ns.GOV for BPA.GOV/DS
	Received 231 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 231 octets ;; HEADER SECTION ;; id = 10434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DS ;; ANSWER SECTION (3 records) BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251016143629 20251014123629 35496 gov. /OFkSYe2tS2JxayKG7+4D4JHk+mSR5mbhpFs0g4f0g71CP6UTLQjyJofmvfhwd3z1udEAD54+G3I 3dArzbo2Bg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for BPA.GOV in the GOV zone
	DS=14926/SHA-256 has algorithm RSASHA256
	DS=61645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251016143629 20251014123629 35496 gov. /OFkSYe2tS2JxayKG7+4D4JHk+mSR5mbhpFs0g4f0g71CP6UTLQjyJofmvfhwd3z1udEAD54+G3I 3dArzbo2Bg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14926/SHA-256 is now in the chain-of-trust
	DS=61645/SHA-256 is now in the chain-of-trust
	`BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 )`
	`BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 )`
	Query to ns2.BPA.GOV for BPA.GOV/DNSKEY
	Received 2320 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2320 octets ;; HEADER SECTION ;; id = 20231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926 BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645 BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdj13Ht1Zqp1jiXiMyUh7VgeiwYbBy9J8w3VJB+jFmky6z2lng0cp58INaRG/e2oSPYNVGjn BkU0BbOJSqEXXQjl8bgAtxIR46E2e6uFPNBk0h96JYK5ImNC23k0Svq9s4TUaSt7LHZ0Q2q8teve aCqbCTrW2S/r++htg7xLpAKL7Fazm0pUosSE5jeVUPudNRAtC/B3+tUa1i9NGDOyCtOq4qcuhKQ8 6STpjDhftrITn3XtRquRSzuo4btT+X881ROCacMT5o/6xs0CBMzMwvG2LJOsmoh5EkP9fAR/1Pj5 HzlK82Tsd86eclO7yqtgF6SWj377bqA2JzK64tHm2UE= ) ; keytag 36904 BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZr79aDvqqIazvPN9Q0HA0B7az890dEVT1JkI5VYfql7GHjiVml1vBzdO0zAs9m3iANpP0K8 FIQ6yU2a7BGAxTnLDjNTfls4ZRGYY9TDxgdmU7j6xYXruK6CFMLqvs0weM3I80NXzTicuxU98IGx RwdlXmfg7zzGrlXBSeUaq3mCCFjRNBEaEx4OgachaaWGcBNyUmdv7tYDgLA0wcwQTntsJTvHgG0d vnaRjtlHFXJ5qTTqLjKArenfK15rM7nTlcQA0ecuhjs4nU+xdok4lm9oCliEQZ9XiL7bBR9gNjhV HOP7WXDdaQ/O671iDJyLK77eiYpbmHLFAYO/t3FIaYM= ) ; keytag 44994 BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 14926 bpa.gov. Kargd5hydEhLv1o9dQ0PwytF+ldiFrOMmrEdEd/6P2REvRRlkRH183gXubikuCo4xivYRuGXSWhg gksDYCHGASspka3bqosFU+dzc3w6VM1FiIzky22KemN4LrX3SZCvT+tRjz3GVA+Mq5Fvnmyfbu6S oh4chBGJy5dOlQT6AtGK9ndnl6yIBlKCiASvb9uLt2lE+F5gY15y9aKiTkODtXCh2Veq+qDJVYaA hQbhxrfU6ZWYQ3aakCflQ17A4NJTC8rk9GqPtboP6CNi4BDTDlo2ld7LiTIWbvxUz40PkjwBgaap zAPJh0rWliGJZwwhYNTglHN15U0XB6H+7lDHkg== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 61645 bpa.gov. MYmRJZr96ppe1bQJsK6e6DrZQrO2oCIM4MoEdn4Tv+EXC/LhucKZSFGapvkuymjdnBrL0PPNEtLw 4TMvvm10j0LnvR69iU7aR/pU51M437OPHKvlx06Qa6Jk7AELkWtTXsiDGw0aYrQToj2nOjVKHo1k In6/XZUH7/TF/OOxJB79XMn0NOX78J96qfqJZhWktz+hozY3MRJKMHsUzoZOwcKh4oN9e5PiFaE0 lfsuw436oxMBjt/aRzMlKLOGanQ39uDwNrvDBfOGRSq/1dbr+mdbhD01TV4OZwOqQxNSQe+peTqt IXvLfmHkAiaGxoN1pY8u7aXNczBguOdGF/H5LA== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 36904 bpa.gov. SMgOKlLdkd08/bLMJ/H559isUBy+ZtivPw2/eg8WcxbdlGb5Jn5uTX+rgzv/q/62bYzKew5jDPg3 n2Z2VMaHBsic9OSw8Aoy8tNAzfPbdkpPykJOLWaV1qLdX3ZROffxPE+bYEMAiP2oKgi5lOmW8mff 33F/mH/F8hyod7kdBQI4eqeKei0bS5QMBj1fuov5CtnL4sOcIBi4ojjG4/GcOwbtzoLykNdRTrpR /54PFCG88XH5yHkslgcKsonYYlO18/mtqJa4jLnbWRjTYfPme/KK/RTIza/jWNmsW7jaQ48Lr7gl t/o924uT9OTVESsmhffD//H5xdAvuVhUYi8KgA== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 44994 bpa.gov. PW35jLWeDugk3q+NGUc/iGu6xuXZKDjHlHpT5Ore8xiolk2dZ3xIVM0w34pJXVMJJdooMS3jz+d0 6YhjBRHDZBpSbJxGN3XMR8SijMm7lUXh+nj9pja7/+3tuCCUV4gpvgLYB5iXqNb4svgHZVKb0C3c 1DzMeM5Inh3pcp5R2NGg8baN2WFcI6cR9trUhpM+wxe7BDfZiJqYoAoO5jBlbTvUl21rtXrR3pZJ pC92YtVBvCc3lIKIW7+IfInysyTkcdSpqoIHCcmjzXTb46nmPCU6LQ5kaTwrWRqs0LEkSOFxVmfN p9LK04+lLKlH57HvlcjC22FDxSB7xO35fPgRsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for BPA.GOV
	`BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926`
	`BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645`
	`BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdj13Ht1Zqp1jiXiMyUh7VgeiwYbBy9J8w3VJB+jFmky6z2lng0cp58INaRG/e2oSPYNVGjn BkU0BbOJSqEXXQjl8bgAtxIR46E2e6uFPNBk0h96JYK5ImNC23k0Svq9s4TUaSt7LHZ0Q2q8teve aCqbCTrW2S/r++htg7xLpAKL7Fazm0pUosSE5jeVUPudNRAtC/B3+tUa1i9NGDOyCtOq4qcuhKQ8 6STpjDhftrITn3XtRquRSzuo4btT+X881ROCacMT5o/6xs0CBMzMwvG2LJOsmoh5EkP9fAR/1Pj5 HzlK82Tsd86eclO7yqtgF6SWj377bqA2JzK64tHm2UE= ) ; keytag 36904`
	`BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZr79aDvqqIazvPN9Q0HA0B7az890dEVT1JkI5VYfql7GHjiVml1vBzdO0zAs9m3iANpP0K8 FIQ6yU2a7BGAxTnLDjNTfls4ZRGYY9TDxgdmU7j6xYXruK6CFMLqvs0weM3I80NXzTicuxU98IGx RwdlXmfg7zzGrlXBSeUaq3mCCFjRNBEaEx4OgachaaWGcBNyUmdv7tYDgLA0wcwQTntsJTvHgG0d vnaRjtlHFXJ5qTTqLjKArenfK15rM7nTlcQA0ecuhjs4nU+xdok4lm9oCliEQZ9XiL7bBR9gNjhV HOP7WXDdaQ/O671iDJyLK77eiYpbmHLFAYO/t3FIaYM= ) ; keytag 44994`
	DNSKEY=14926/SEP is now in the chain-of-trust
	DS=14926/SHA-256 verifies DNSKEY=14926/SEP
	DNSKEY=61645/SEP is now in the chain-of-trust
	DS=61645/SHA-256 verifies DNSKEY=61645/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 14926 bpa.gov. Kargd5hydEhLv1o9dQ0PwytF+ldiFrOMmrEdEd/6P2REvRRlkRH183gXubikuCo4xivYRuGXSWhg gksDYCHGASspka3bqosFU+dzc3w6VM1FiIzky22KemN4LrX3SZCvT+tRjz3GVA+Mq5Fvnmyfbu6S oh4chBGJy5dOlQT6AtGK9ndnl6yIBlKCiASvb9uLt2lE+F5gY15y9aKiTkODtXCh2Veq+qDJVYaA hQbhxrfU6ZWYQ3aakCflQ17A4NJTC8rk9GqPtboP6CNi4BDTDlo2ld7LiTIWbvxUz40PkjwBgaap zAPJh0rWliGJZwwhYNTglHN15U0XB6H+7lDHkg== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 61645 bpa.gov. MYmRJZr96ppe1bQJsK6e6DrZQrO2oCIM4MoEdn4Tv+EXC/LhucKZSFGapvkuymjdnBrL0PPNEtLw 4TMvvm10j0LnvR69iU7aR/pU51M437OPHKvlx06Qa6Jk7AELkWtTXsiDGw0aYrQToj2nOjVKHo1k In6/XZUH7/TF/OOxJB79XMn0NOX78J96qfqJZhWktz+hozY3MRJKMHsUzoZOwcKh4oN9e5PiFaE0 lfsuw436oxMBjt/aRzMlKLOGanQ39uDwNrvDBfOGRSq/1dbr+mdbhD01TV4OZwOqQxNSQe+peTqt IXvLfmHkAiaGxoN1pY8u7aXNczBguOdGF/H5LA== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 36904 bpa.gov. SMgOKlLdkd08/bLMJ/H559isUBy+ZtivPw2/eg8WcxbdlGb5Jn5uTX+rgzv/q/62bYzKew5jDPg3 n2Z2VMaHBsic9OSw8Aoy8tNAzfPbdkpPykJOLWaV1qLdX3ZROffxPE+bYEMAiP2oKgi5lOmW8mff 33F/mH/F8hyod7kdBQI4eqeKei0bS5QMBj1fuov5CtnL4sOcIBi4ojjG4/GcOwbtzoLykNdRTrpR /54PFCG88XH5yHkslgcKsonYYlO18/mtqJa4jLnbWRjTYfPme/KK/RTIza/jWNmsW7jaQ48Lr7gl t/o924uT9OTVESsmhffD//H5xdAvuVhUYi8KgA== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251018023143 20251011013143 44994 bpa.gov. PW35jLWeDugk3q+NGUc/iGu6xuXZKDjHlHpT5Ore8xiolk2dZ3xIVM0w34pJXVMJJdooMS3jz+d0 6YhjBRHDZBpSbJxGN3XMR8SijMm7lUXh+nj9pja7/+3tuCCUV4gpvgLYB5iXqNb4svgHZVKb0C3c 1DzMeM5Inh3pcp5R2NGg8baN2WFcI6cR9trUhpM+wxe7BDfZiJqYoAoO5jBlbTvUl21rtXrR3pZJ pC92YtVBvCc3lIKIW7+IfInysyTkcdSpqoIHCcmjzXTb46nmPCU6LQ5kaTwrWRqs0LEkSOFxVmfN p9LK04+lLKlH57HvlcjC22FDxSB7xO35fPgRsg== )`
	RRSIG=14926 and DNSKEY=14926/SEP verifies the DNSKEY RRset
	RRSIG=61645 and DNSKEY=61645/SEP verifies the DNSKEY RRset
	RRSIG=36904 and DNSKEY=36904 verifies the DNSKEY RRset
	RRSIG=44994 and DNSKEY=44994 verifies the DNSKEY RRset
	DNSKEY=36904 is now in the chain-of-trust
	DNSKEY=44994 is now in the chain-of-trust
	Query to ns1.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 28265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251020164306 20251013154306 36904 bpa.gov. g96AjLMvudUT9SR1k4ARf+SmskqW1NfJpORIqOHPKr3bXm0Ds7U8lyD/mLj62YYBoPJ6v8CVNLDR JqOrNLYIrkRHd2Z0IjnXp2dHu99+wTu18L4SzFlBxyfkpW8ojFA4McHlfkOr3UNYgVBaDyZ+1cKt VO1VZfHoBQB8aTCQZJg/vH/BH2+LJkM2JQKW+9UbF7z+ggAIHvOqUwO8sGOB84fBwB3CjTg/xVxN Y38axkNET8K2lxTKtm2xrvIomrWSxsy6kLitq+8fY01dpADIwRXblFIaVAC2SFZdCHlFGJnJ16o3 dFTzrFBLGv7adltTZKoPUseNVvL503O9QhxReQ== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251021164011 20251014154011 44994 bpa.gov. OLPxN6pucYEycmAuhJdTxjFleW0g3qXALYc9azwlAxgUB9C3JCM1yXuEsn0tXNTnLowKyBYQOTbg P2paW+J7uIY3WDBG4HhMSgQolbq8atliXLzHO8qb2zC0TJxuHryvk8h1v2TE4Cw/fhfl2B333JlM qunViu7RT6nfPBh79uep21dxO1KV+DKFIygmiBycKtZypIAMr0eyVrPfQpF1XctEnpSVqEyhkJ/a zOa82aCaE8sm6Z8cEg8NapBS334Mt+3AJIK4RCOhaPRVlENxmngh0vRvV6g6U4Cr9QgOubLgFOIj rqRlJTwPfUbldTQDf4m7UCBR4iRanZGVHcPnQg== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251020163717 20251013153717 36904 bpa.gov. bMPYwphpuUUpmTAT1rTDVzSev+I6g/XfOn5SXPJHrywBCGl4kcyuS2rrQ+7t/+b+YNG4Guw2rcl9 XYMn4yqIiBjIOLkbuTvBmWtc5OfLup1xz3RmkS+koTRNZy8oqY7oMAV/WKlX90FkpEmcSzAzJ1Cw QOGrki7vqNdEisydIJVMxhAaGzP+Zdyg3YOY6phx2/oZsQ5F65YuoBSUjGJMyNHBD2g1l3tV5I1S J0ou3z0PhXCYscN87JYlAOhGM15CxH2j5hHGS5dUhgofAWKq7Ttt/bHQTuXGc34WfhxlVDJpOlla jZzYSKzwUHVr7W4qUyRkQdjeU4rkj000A/MiFQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251021163714 20251014153714 44994 bpa.gov. glc1rHTEI0C+94rKoUZdwaaYIyKpbkev454/6NnXXc3IOoq0cuU/aDcp4HENO+qgYCpbj7fGWQKw 7GCZlSmwTP3Ca7tmNCBRkOie9l+73cPwoOeaQWIetFuY+EKHi2+/xfpD1VlNszTDfeydcbpKTwvo c37YoWZUg0WCI6eVa4n9z9fu9Szv8mvoKSNXvBHfuyaynz9oRL48pgNXgbi8xAH0Z1CRKorIp/Gu oqPdhFMfpfA47VsmqVmfeN2i9B50IJu7OEekd+k4wX5KCUrTcMXF2HMQsl94Vc/LbtZ6Bfd/XdLa eTXBxBw8kuTuUf/P+Y+NHsbId0YkWmEMrCBvoQ== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163717 20251013153717 36904 bpa.gov. lkPy/R3psBWC6VTLS6cVUrHnmdM3ZLSK8jYXNq1MXAgQuLYdu/d2llrd1Fenz95Z4IH6W9gH44+8 C6WfqeZRut6igfKfuyJgXzOOSs7fXy3NZzjxqc0C4lHcz9xKaP6cutjByjMHC1nFtMGK7ZYFPLVD omZHFR+LFnBOPu0Nm3Z6KlojHgVHt8CxeBTRCRCG23SBtr4pG5/ncyFT7eyx5S2VFNhUbLVeLvSB nLXAesABSGL8xHYNNVMmLCLDi+yo7hgJ6if3l5SDKC4LHVyMiCN0VEp69/dMS2bQmK5Zg0XHRrD7 TtscLPNCwldEicV9ZNQbKkVfAwtKgmORhYAFNQ== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163714 20251014153714 44994 bpa.gov. T/6c66q1zISkFfsZfmRytJRGCq1Mlv8N3WpMwt8+DxQXJYIFzZh9/3hqbyFp3CKrxRRqEWVDIveE GQV95+twOpymO0c1xpYNJr5hu4Ecsph70IP3yImX6iCkibekljwxTi5p2v3UTXeFJp9VqpzMynfj Ov3S+wSKF7/788fNwM1OikfunzyHeTut5ZWgATIsNeHb0IaNo1f0zvHN3bR9YzsIFcjRb/gFPf4y c6Ypp/KhIcoh1mhgUlbuvA3oTswsGP9I4ayScS1mcrVzZC/1C3dkcp804fQUR83CRiy+qUwgTfUU vJSfMgtQNPClma8/BsI3ohibEO1OYa5K5VAqug== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163717 20251013153717 36904 bpa.gov. Cl5QwUIpyFZrjilc61DBBaBPtFCO5cO+k3b3LO/dQLGuEmZNhZMLp56zX8ajRyLK2TT+SwlPoD5l 4hWgvKitE75/88ZLisYukDmo91HZMGgaiZxZ5RWKYlA5M87XVGgbwPIvCsSioApCXpCfyrvUvNui WSna24VcYz24qeYFJBE5r6xWhuZ/zmLKK8aZ7RNG5s+03iw2ahSFwb/jv6Mb5NTbfUsfSvVUzbze ZIiQkMqXXvcpCK1+fN7WwIu4VlT4v8mAObbtgn60ZzwwSoqt5F4nNpfALd1D3NGa61yqSFuZVoQw wNvIiULi4qWkFJHxZbyIEjWB0XLMwDM2CV11ew== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163714 20251014153714 44994 bpa.gov. d0o1AOPrHwOCK6JLkaSgD2QRuWnbYB3Qgcgw7hbCjn3H/iVeYFym7AmN9cUSs4bEFB+wxrStfI0r 4f1K7GfAU9gFfqtOEaRypqPZD23yJuSuGzXyqwoJhu5fFQl15kTfjsM6MGrF91i7QWlw5keIcGsK 0bNIE2pyB06c13/J02kNEaIbM748xVUnsQWr0Nt9hbA1MYP7MsNtM1LwZPhm28Uy18fg5hh0LKJS 52PTjrqtKTJjxEM4dGQmUaKH6/VWcymZGeVWPckGClkBo8mE5Pg0KbeTrtbI5/bO2AmWSddQ3gOy fNMlEmgcPXivfONu922ZHqOG+cPYYoCxADLkOg== ) ;; { "EDNS-VERSION": 0 }
	ns1.BPA.GOV is authoritative for BPA.GOV
	Found RRSIG signed by bpa.gov zone
	Query to ns2.BPA.GOV for BPA.GOV/SOA
	Received 2511 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2511 octets ;; HEADER SECTION ;; id = 26955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN SOA ;; ANSWER SECTION (3 records) BPA.GOV. 43200 IN SOA ( ns1.BPA.GOV. hostmaster.BPA.GOV. 2025090902 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) BPA.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20251021013923 20251014003923 36904 bpa.gov. p41cXG4lhmCvj0eq38I0XBBZMfcsPeevTiKuzF9afbQ4V1T0OhBUZVM24X/Rj389zLavfGedra/d hDtR+yweSnN8n7Jj2ur9kQYZX7ZijdKalf/ovK4Pe5lsCCY7PILM1ifRgwNZabYSfN7Kk6iWfMv/ 9OmKsSp6ocGQn2qCJDPPZ9BfWGK+E7QIVqtahXvf3ALovp6otDnRRH/a1e/4n/VqocnrkIWqUM2e pEPGITHtXZej6G6DRarcA1B0XbeLGaxpY6ui0MzaXv9nXf4qy4PdOA6zpw3BZtZuHM6S1FlYZ9kV NFgzKdDaQSjDMWiVvW8L/RK2UnIQLddDTvnyyA== ) BPA.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20251021173551 20251014163551 44994 bpa.gov. LMd1BgqUEB2l02Qubph4r8OQPOJXrRH9wUF8qQ4o3NB8wBGF9Y9PYRxs5ZitWreKLn9/nL/q30tF lhi55j0vt/CmVwD84tGuzHphi0Q9fIEEB3atjxngkbEv2eN5hnCxW70h30GeqKcjek2evS4UZ42B Y4rUgd9RHr5E/bt/Xb8DKYLwbfeSyNTeatFxp0hMMCyUWrbb2wq22QHEmrAlkbqBkrl+T4s6noUS uqErtGi0d6i4SsjmbQPFrI9qTHN6O/F7MZgpTmuMRC3qkhGRmfLxULx0wcr7jwBm3JBofu8AYF6h BvLL19qrAQx4mQl0hwNFlv1qlZ/17zCcYbhAYQ== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251020163719 20251013153719 36904 bpa.gov. we8AVVSLjcQxYxBgWtVg5SUdgwRx7Tw7CuShtDUHpOLVbxiOv4lqYh+VAjSzxJqCFzpBy76wEMNy WrvZwmd0cBEGq1jfD5BgZZd90/KjiI5Fycn3WuC26UAwWFWX93mLKxycQmhz62YKAmNIJXA1E/Mm rA+lz747pzL0i+gNgHhxRNBAeAZMMj15DhUogapN9Yd5BeROpOws7HtHSUVPzzHDf2RmU5dqxok7 6AH205uvujeHqeZ2yaz2IArjHAF8dZmmw020BiU8ZbYhLo7UpyAuEjfeWKL36vwqMYqsrx1evC5h 0lCUbGmcUFQhxc0YqkJVqD1gZ4WnjXiyFgz6AQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251021163713 20251014153713 44994 bpa.gov. VocUOaAu+BsgXHjpxp5fWCNSP/kyVbzIg6OT202rqdaFCe+OnS2nbo1ZgWXSZtrBilOYf+mAE4Br 40PSN9QBvYEaHDZorHpKNZdqE7I4oWv1v0R9JVuVqbOUAKJY5xbZdCH876FPPbROoBMo0uvzxvNG 7lRs9FtsBuV1bJnbKfPLgOCELK3dUmtu5MtJpClN5eK/v0ZERBkZjpXkmWVlGlXXJLpSlYfz2PKR onBkWORXjMp0OxyQ5Dk5hYfwN1h8Yxm6rS9EtI/BrFmdBO5iBHF7mOrs1VluR9Z6kpRS2l8FHxgh zXdhbrEqzXZ1CE4R/r83om2/FuauMw76WkMiCA== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163719 20251013153719 36904 bpa.gov. MZhrk/akvbaKxMJFkH4nbiBqgeqrCvgCJtaxBFI9KHL1C8MMk59evaPtjuuP2zX5zjsflyuqb8RJ PbKFg7yV6N3xOs/tlN8fbzHoeZ9pLIZTZIHEH10jUNnHX19eSl23Vaz+ARSJLX+j+V+kWG0gs/mV yR6Uq4dI/d3RVJzht4FIKy85GDFNcoWzj21txL5aUAYudUNj54CSQMuOTWGTjjnt3p7Qvisrhkam t8ptRWpNMvnHucAK9aOgnKkPzqV79vjZI9gUnud+L6115SQTUlr7gQKgIEVuRup6FN2Ax4ZwqXRf 2EwTFwOET6nQSmSRPM6gHeO1BhYs2l2Tx4mDNQ== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163713 20251014153713 44994 bpa.gov. Duapl2RXlwZzDTpaG/YggsbBQToBYoebJUOgRIgFwn0gK6Mblqav3ky4lpDpZKtGIvMQUuPLFI50 GdBeV4M/mv8CkqKKRW/oetqsjhBmObcXV0qjTQTjOQVFJyttgAUw+IGxammA9YnHd5P4kVaOFf9m EsKi5jPH7Ayp+wiO1/p5VGxFNkOTNcVIodmImcToVZvKGXNg/9buhMmQ8qWLQ8A03zMGcxnVfCWq RCC/H0bDYijr9rLpw1vk7MhgpXjGi00MTtDU6GWppmrReggDeGmYDg9Z7bA/hoCyBatmzEFEWcZa ObXIyu9ZkNwtu5b8DWCKtWyfQF3kEY3/tCYEXQ== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163719 20251013153719 36904 bpa.gov. KX7AhAyJE3ieoaAf/+sAH3qE5zS7YqaBv2j71D+sm7Km7HdUMuSPeOhXWiHTtpN8Crhy2wlHhZnI GuRsdSPNRfV5qNLFglpjbwJcQQEu/UV1bf3QMY38fUzstY+41MTSWo8O8MbVMSxgxk9QNHKdCCv8 VlPZ98OBowFU1P3flioGqGqMFu3zatuwP6Uyd/hQKLc4smE8dgdDG2pyJgmd2HwVGuHZSni8ISz6 LC7DzyW1OROZd3SlZ7XPbtbl47Ib621S9lgicbGZORJeoqx4FohH2mgS3g8ipb8gytN/EsmhePKM FR52Q2w2qsCnEEoCajxdX2bIzd59NQbiUu/hCg== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163713 20251014153713 44994 bpa.gov. Chfs66Q5b0ow/Ohb0q60WUT6O/ZPiMT+5pjha3BhNwadHe5B8PdSh42M1bTd4nJ/BO/eb9atUVXc v/Z8cOdcFVZFI2pmMaoHkD1qMC+ZgL7uyxG6a9t5hHyRXXl8bs0lEx6xAh1B4rXUfimskYmslqIW 1339wAl7boMIVuiukc8TRY6s14kHMCzHySxJx62gFKfJ8DEs3UQe3uaggLAI3+2FoIkfXxLOFMRO uiRltLF3OBA20quankH17bGgZTraqokdJS/aNU32PkU5HSQZfKHidErS1//UYO9IE67Cum5v808r mUao9yyb7s3itETsFoEogxcXlkdtRgJUGBXBCA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 42016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251020164306 20251013154306 36904 bpa.gov. g96AjLMvudUT9SR1k4ARf+SmskqW1NfJpORIqOHPKr3bXm0Ds7U8lyD/mLj62YYBoPJ6v8CVNLDR JqOrNLYIrkRHd2Z0IjnXp2dHu99+wTu18L4SzFlBxyfkpW8ojFA4McHlfkOr3UNYgVBaDyZ+1cKt VO1VZfHoBQB8aTCQZJg/vH/BH2+LJkM2JQKW+9UbF7z+ggAIHvOqUwO8sGOB84fBwB3CjTg/xVxN Y38axkNET8K2lxTKtm2xrvIomrWSxsy6kLitq+8fY01dpADIwRXblFIaVAC2SFZdCHlFGJnJ16o3 dFTzrFBLGv7adltTZKoPUseNVvL503O9QhxReQ== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251021164011 20251014154011 44994 bpa.gov. OLPxN6pucYEycmAuhJdTxjFleW0g3qXALYc9azwlAxgUB9C3JCM1yXuEsn0tXNTnLowKyBYQOTbg P2paW+J7uIY3WDBG4HhMSgQolbq8atliXLzHO8qb2zC0TJxuHryvk8h1v2TE4Cw/fhfl2B333JlM qunViu7RT6nfPBh79uep21dxO1KV+DKFIygmiBycKtZypIAMr0eyVrPfQpF1XctEnpSVqEyhkJ/a zOa82aCaE8sm6Z8cEg8NapBS334Mt+3AJIK4RCOhaPRVlENxmngh0vRvV6g6U4Cr9QgOubLgFOIj rqRlJTwPfUbldTQDf4m7UCBR4iRanZGVHcPnQg== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251020163717 20251013153717 36904 bpa.gov. bMPYwphpuUUpmTAT1rTDVzSev+I6g/XfOn5SXPJHrywBCGl4kcyuS2rrQ+7t/+b+YNG4Guw2rcl9 XYMn4yqIiBjIOLkbuTvBmWtc5OfLup1xz3RmkS+koTRNZy8oqY7oMAV/WKlX90FkpEmcSzAzJ1Cw QOGrki7vqNdEisydIJVMxhAaGzP+Zdyg3YOY6phx2/oZsQ5F65YuoBSUjGJMyNHBD2g1l3tV5I1S J0ou3z0PhXCYscN87JYlAOhGM15CxH2j5hHGS5dUhgofAWKq7Ttt/bHQTuXGc34WfhxlVDJpOlla jZzYSKzwUHVr7W4qUyRkQdjeU4rkj000A/MiFQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251021163714 20251014153714 44994 bpa.gov. glc1rHTEI0C+94rKoUZdwaaYIyKpbkev454/6NnXXc3IOoq0cuU/aDcp4HENO+qgYCpbj7fGWQKw 7GCZlSmwTP3Ca7tmNCBRkOie9l+73cPwoOeaQWIetFuY+EKHi2+/xfpD1VlNszTDfeydcbpKTwvo c37YoWZUg0WCI6eVa4n9z9fu9Szv8mvoKSNXvBHfuyaynz9oRL48pgNXgbi8xAH0Z1CRKorIp/Gu oqPdhFMfpfA47VsmqVmfeN2i9B50IJu7OEekd+k4wX5KCUrTcMXF2HMQsl94Vc/LbtZ6Bfd/XdLa eTXBxBw8kuTuUf/P+Y+NHsbId0YkWmEMrCBvoQ== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163717 20251013153717 36904 bpa.gov. lkPy/R3psBWC6VTLS6cVUrHnmdM3ZLSK8jYXNq1MXAgQuLYdu/d2llrd1Fenz95Z4IH6W9gH44+8 C6WfqeZRut6igfKfuyJgXzOOSs7fXy3NZzjxqc0C4lHcz9xKaP6cutjByjMHC1nFtMGK7ZYFPLVD omZHFR+LFnBOPu0Nm3Z6KlojHgVHt8CxeBTRCRCG23SBtr4pG5/ncyFT7eyx5S2VFNhUbLVeLvSB nLXAesABSGL8xHYNNVMmLCLDi+yo7hgJ6if3l5SDKC4LHVyMiCN0VEp69/dMS2bQmK5Zg0XHRrD7 TtscLPNCwldEicV9ZNQbKkVfAwtKgmORhYAFNQ== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163714 20251014153714 44994 bpa.gov. T/6c66q1zISkFfsZfmRytJRGCq1Mlv8N3WpMwt8+DxQXJYIFzZh9/3hqbyFp3CKrxRRqEWVDIveE GQV95+twOpymO0c1xpYNJr5hu4Ecsph70IP3yImX6iCkibekljwxTi5p2v3UTXeFJp9VqpzMynfj Ov3S+wSKF7/788fNwM1OikfunzyHeTut5ZWgATIsNeHb0IaNo1f0zvHN3bR9YzsIFcjRb/gFPf4y c6Ypp/KhIcoh1mhgUlbuvA3oTswsGP9I4ayScS1mcrVzZC/1C3dkcp804fQUR83CRiy+qUwgTfUU vJSfMgtQNPClma8/BsI3ohibEO1OYa5K5VAqug== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163717 20251013153717 36904 bpa.gov. Cl5QwUIpyFZrjilc61DBBaBPtFCO5cO+k3b3LO/dQLGuEmZNhZMLp56zX8ajRyLK2TT+SwlPoD5l 4hWgvKitE75/88ZLisYukDmo91HZMGgaiZxZ5RWKYlA5M87XVGgbwPIvCsSioApCXpCfyrvUvNui WSna24VcYz24qeYFJBE5r6xWhuZ/zmLKK8aZ7RNG5s+03iw2ahSFwb/jv6Mb5NTbfUsfSvVUzbze ZIiQkMqXXvcpCK1+fN7WwIu4VlT4v8mAObbtgn60ZzwwSoqt5F4nNpfALd1D3NGa61yqSFuZVoQw wNvIiULi4qWkFJHxZbyIEjWB0XLMwDM2CV11ew== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163714 20251014153714 44994 bpa.gov. d0o1AOPrHwOCK6JLkaSgD2QRuWnbYB3Qgcgw7hbCjn3H/iVeYFym7AmN9cUSs4bEFB+wxrStfI0r 4f1K7GfAU9gFfqtOEaRypqPZD23yJuSuGzXyqwoJhu5fFQl15kTfjsM6MGrF91i7QWlw5keIcGsK 0bNIE2pyB06c13/J02kNEaIbM748xVUnsQWr0Nt9hbA1MYP7MsNtM1LwZPhm28Uy18fg5hh0LKJS 52PTjrqtKTJjxEM4dGQmUaKH6/VWcymZGeVWPckGClkBo8mE5Pg0KbeTrtbI5/bO2AmWSddQ3gOy fNMlEmgcPXivfONu922ZHqOG+cPYYoCxADLkOg== ) ;; { "EDNS-VERSION": 0 }
	BPA.GOV A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251020164306 20251013154306 36904 bpa.gov. g96AjLMvudUT9SR1k4ARf+SmskqW1NfJpORIqOHPKr3bXm0Ds7U8lyD/mLj62YYBoPJ6v8CVNLDR JqOrNLYIrkRHd2Z0IjnXp2dHu99+wTu18L4SzFlBxyfkpW8ojFA4McHlfkOr3UNYgVBaDyZ+1cKt VO1VZfHoBQB8aTCQZJg/vH/BH2+LJkM2JQKW+9UbF7z+ggAIHvOqUwO8sGOB84fBwB3CjTg/xVxN Y38axkNET8K2lxTKtm2xrvIomrWSxsy6kLitq+8fY01dpADIwRXblFIaVAC2SFZdCHlFGJnJ16o3 dFTzrFBLGv7adltTZKoPUseNVvL503O9QhxReQ== )`
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251021164011 20251014154011 44994 bpa.gov. OLPxN6pucYEycmAuhJdTxjFleW0g3qXALYc9azwlAxgUB9C3JCM1yXuEsn0tXNTnLowKyBYQOTbg P2paW+J7uIY3WDBG4HhMSgQolbq8atliXLzHO8qb2zC0TJxuHryvk8h1v2TE4Cw/fhfl2B333JlM qunViu7RT6nfPBh79uep21dxO1KV+DKFIygmiBycKtZypIAMr0eyVrPfQpF1XctEnpSVqEyhkJ/a zOa82aCaE8sm6Z8cEg8NapBS334Mt+3AJIK4RCOhaPRVlENxmngh0vRvV6g6U4Cr9QgOubLgFOIj rqRlJTwPfUbldTQDf4m7UCBR4iRanZGVHcPnQg== )`
	RRSIG=36904 and DNSKEY=36904 verifies the A RRset
	RRSIG=44994 and DNSKEY=44994 verifies the A RRset

BPA.GOV

	Query to ns2.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 26421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251020164615 20251013154615 36904 bpa.gov. LpafCr215keg8gBuQS+lVX9YLwPSEk1Rl7PG0wbAGlqTf38PobKRw6e2anu12CGW3K6wZvG3SXbm iX8glIqwac5FvVDY9HmcdXbeX9oziqXiuu8Fx/nKVylyecVuUYSazsDXr+Cw7umSqs3Yx0U72J+w NvtnGzGs8q+gicKI4IcQNVcL2KfUypauXb8fO9nnLxeI2gGlT8CtBxSOvn21w+mlfBVjS/R3ErYK gJiUSkS9qqe5I9wVpZQLOFg80aFpt6b185OLYtJBIuWZ6VsWOCNaL2wXVyHDni3Z8N/7tFfwTcOv 7zr5rHSwxEOcvCqok46MWHfjTf4NHCp/1oeyJQ== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251021164605 20251014154605 44994 bpa.gov. mERYm13WQ5zqDQUsAjDFAtgaA9c3e0VrPVmKW2lEYc9RDU8+vuosHCqE9XM1jDGZpV/d9qI54FU2 8S0tdOJLyj4YdPgB4SwQma/mrq2MJ8vIlIjIuQfROCKu7+irmnrMocj1VpFvVygRwDM27i+s+BlU UNz3ev2EF+4Bz3HI5K3OTMeHcXBAWmeWK8pij3xNoGkhvEpyimJ/t5hY0WV/P8xYvpx+qr5SQs/H z9E2M0/VwVbDAAN8z5zTSXZwhQptSBb5quqK7rPXUT+RVcLoIOiFTkLSPt1ZX4T4tX7Dp9TYbTvy Kzmfd9IfP+HkoNP8W0cbGMER3kekZY90M4bKug== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251020163725 20251013153725 36904 bpa.gov. VZfsEjncc/pjdfdCIQ1PVTX8r7SJPCUyDRCQe1RkJE9DjiYQVQMJAwFUrVp4amzLduSuaPr5kUDq tk17byA6aJQg/E7SukYe7bwYQXjJBzWClfDrM1qg6nRlHnQXTz8w53jp7fnpLzHRmDDOETA4hv10 Vfza3Lo+9vKiopvF2nLJBQrv1mbVTkW4ke80QW53O21Tbjnb5UlAW7BTBOwHwcfEM6YyvfG4YB0U FGx3wFau901OXs56c1lhdiR96/kAg4kBsukbmF70FGmGrRAt4GRkU4PkBNWPXJr/4kDpS2WZF7s1 h2//hBmV6+PTgkeQS18sUOLlNLOrJ3v51YmG5w== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251021163716 20251014153716 44994 bpa.gov. EUFbb9zMs60KOQIqpO+3LjHOtnnX5IKYH5j4KvedFhY7XoPNGkBLJ89UXVcw03rpGobSvLYPEN9Z TA+sv3+BjjwKKBsNa12Vt1HmZ/ImNEJwDu6uhyAejCV8godWtj5HBczrA/xj1ZivUq8ACTSJoHfm sz4U29UkCC4L0/bwFqpWFuD4yZd890srSJ477C59+oQcCKXSjR3c+5V7/GJB8HNVXML3gLkBSljY HitrHFrWBfR7ynCuv8oleVCp/8sWXHwF3HubgdLNout/TCytGn+4wpIUSSy3jp8Tu60r//JZ1vMk oqcWQrshtoAhdTYw0Dnr7m4otPgevpqoX7DHig== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163725 20251013153725 36904 bpa.gov. TiW/xiYeOO2r83I5Vw48ri4WjQrvfp8NOHXzzFdwg1evZlPPwE0Yu0lBABcmu3mwYLAhJeZySQ9o VRiHFvsdGfRCLe7pNEXnNjHMdLKP4Q8Ksh27Sn34dWWjbjNp++wa/hup663CHIbS1xFX0QBKEQJr ie13rsDQkFwbvhpioxjv5ioyeGkmNxsBtdZyHPJxkQQkWqLiubB4hUyYGXHEW7/BVOy9sIJjmdDJ /A9k7aQpOqt3FgDS3FxfAnQ92IyK78j1xczHceRQ08pBr9vM+6tgncGYAGRW8wSdbG879ukX8Tkz 2veCYbZCuvlwPHpNQAGw/5kahjjBTZgmYeALUg== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163716 20251014153716 44994 bpa.gov. M72xkx9C8HOoPmMpd2xIuPC9bk1b64ePqccneL9VZd8sw90QmVTLHUKA6OIJh/E1Ev1jMlm914hz ushmv4KAgHYQCDGKhcAvLnGBNTBHC4XUx+VNu3v6Pdz+L4xJhDjYE3Xk7XJK2neP88KTHcNE2ddO owAShx5eVuWmDacP9WZQJOJfMcRgUg6IIhP14DVEhJgrrSnopsvh6n1I/Em2THdk/SVUnVkzEL+N cRgEK7gilQB4OWaaF/qhZIKCH3tMZLS4fejXZvXfPJVM5Idyb/oFX5YFF3/2IJgE/6E6XTacVwmY HnYfsz2bIF7SM1wlZcBhdkNcsbOVMCUV7ZgBsQ== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163725 20251013153725 36904 bpa.gov. YIlgN+d/FdrURkYlelgKmeE/+zgjH9UBneaH1cYeTXE/GRJOdIMMRgzZax02zlb1+zeyivnj5/h3 59YiiauByrRsAnrhuSUXJ9iauz8wAnZoqBS5dUB2BgZVOjFHMn//apWqfawMYjK+KCCiq+jw9X6U ZlwuDTTPsCt1FDUx2rofXTL2dKV+zx7QiX+izcGtjV8JebSQe5VdimEOktwvJx8nRRuI/ENXWLtP Fci0NJq3OrSsTc8zrmEU60AlgvhZ6bJbATiWUdVraDNx/5KR1KZzKHdSxS3ajeJZfqgOrQDIe/Re cm0G8hMoc8+EyPOoj9wETfCYfw/gF5Y3imQNtA== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163716 20251014153716 44994 bpa.gov. ggDN9s5171F0n47E5iBRang89hmBqlMcpY7w1+2xWI2LKQmaKnhWjXIaNAkVPgTEDJ6caAAaK8vV lPmkPugY/z/riXNaKQVEEFqd0fRUIZkM/HnmV3mbdb5gf7dnWlCRiun4biW+FaVF2lySD8EiKRv+ K/Kwz9RLItsk9khHzyuyAuT8z4yGa3K5KDiusKOygXFnLWlLw7Y9Me0bvIDZWtwWbxQCV0dDKA80 /Tcq0q75cXB+s5hsQh7udNCjcDQerLJBaD5D60FtwWnSgacAAEHU9e730Yvc9CmlbvxKe/UhjmBq 5AhpFevGwRr0yqKoYh2Nwru0RACqejUzo+3pXA== ) ;; { "EDNS-VERSION": 0 }
	ns2.BPA.GOV is authoritative for BPA.GOV
	Found RRSIG signed by bpa.gov zone
	Query to ns2.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 61336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251020164615 20251013154615 36904 bpa.gov. LpafCr215keg8gBuQS+lVX9YLwPSEk1Rl7PG0wbAGlqTf38PobKRw6e2anu12CGW3K6wZvG3SXbm iX8glIqwac5FvVDY9HmcdXbeX9oziqXiuu8Fx/nKVylyecVuUYSazsDXr+Cw7umSqs3Yx0U72J+w NvtnGzGs8q+gicKI4IcQNVcL2KfUypauXb8fO9nnLxeI2gGlT8CtBxSOvn21w+mlfBVjS/R3ErYK gJiUSkS9qqe5I9wVpZQLOFg80aFpt6b185OLYtJBIuWZ6VsWOCNaL2wXVyHDni3Z8N/7tFfwTcOv 7zr5rHSwxEOcvCqok46MWHfjTf4NHCp/1oeyJQ== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251021164605 20251014154605 44994 bpa.gov. mERYm13WQ5zqDQUsAjDFAtgaA9c3e0VrPVmKW2lEYc9RDU8+vuosHCqE9XM1jDGZpV/d9qI54FU2 8S0tdOJLyj4YdPgB4SwQma/mrq2MJ8vIlIjIuQfROCKu7+irmnrMocj1VpFvVygRwDM27i+s+BlU UNz3ev2EF+4Bz3HI5K3OTMeHcXBAWmeWK8pij3xNoGkhvEpyimJ/t5hY0WV/P8xYvpx+qr5SQs/H z9E2M0/VwVbDAAN8z5zTSXZwhQptSBb5quqK7rPXUT+RVcLoIOiFTkLSPt1ZX4T4tX7Dp9TYbTvy Kzmfd9IfP+HkoNP8W0cbGMER3kekZY90M4bKug== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251020163725 20251013153725 36904 bpa.gov. VZfsEjncc/pjdfdCIQ1PVTX8r7SJPCUyDRCQe1RkJE9DjiYQVQMJAwFUrVp4amzLduSuaPr5kUDq tk17byA6aJQg/E7SukYe7bwYQXjJBzWClfDrM1qg6nRlHnQXTz8w53jp7fnpLzHRmDDOETA4hv10 Vfza3Lo+9vKiopvF2nLJBQrv1mbVTkW4ke80QW53O21Tbjnb5UlAW7BTBOwHwcfEM6YyvfG4YB0U FGx3wFau901OXs56c1lhdiR96/kAg4kBsukbmF70FGmGrRAt4GRkU4PkBNWPXJr/4kDpS2WZF7s1 h2//hBmV6+PTgkeQS18sUOLlNLOrJ3v51YmG5w== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251021163716 20251014153716 44994 bpa.gov. EUFbb9zMs60KOQIqpO+3LjHOtnnX5IKYH5j4KvedFhY7XoPNGkBLJ89UXVcw03rpGobSvLYPEN9Z TA+sv3+BjjwKKBsNa12Vt1HmZ/ImNEJwDu6uhyAejCV8godWtj5HBczrA/xj1ZivUq8ACTSJoHfm sz4U29UkCC4L0/bwFqpWFuD4yZd890srSJ477C59+oQcCKXSjR3c+5V7/GJB8HNVXML3gLkBSljY HitrHFrWBfR7ynCuv8oleVCp/8sWXHwF3HubgdLNout/TCytGn+4wpIUSSy3jp8Tu60r//JZ1vMk oqcWQrshtoAhdTYw0Dnr7m4otPgevpqoX7DHig== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163725 20251013153725 36904 bpa.gov. TiW/xiYeOO2r83I5Vw48ri4WjQrvfp8NOHXzzFdwg1evZlPPwE0Yu0lBABcmu3mwYLAhJeZySQ9o VRiHFvsdGfRCLe7pNEXnNjHMdLKP4Q8Ksh27Sn34dWWjbjNp++wa/hup663CHIbS1xFX0QBKEQJr ie13rsDQkFwbvhpioxjv5ioyeGkmNxsBtdZyHPJxkQQkWqLiubB4hUyYGXHEW7/BVOy9sIJjmdDJ /A9k7aQpOqt3FgDS3FxfAnQ92IyK78j1xczHceRQ08pBr9vM+6tgncGYAGRW8wSdbG879ukX8Tkz 2veCYbZCuvlwPHpNQAGw/5kahjjBTZgmYeALUg== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163716 20251014153716 44994 bpa.gov. M72xkx9C8HOoPmMpd2xIuPC9bk1b64ePqccneL9VZd8sw90QmVTLHUKA6OIJh/E1Ev1jMlm914hz ushmv4KAgHYQCDGKhcAvLnGBNTBHC4XUx+VNu3v6Pdz+L4xJhDjYE3Xk7XJK2neP88KTHcNE2ddO owAShx5eVuWmDacP9WZQJOJfMcRgUg6IIhP14DVEhJgrrSnopsvh6n1I/Em2THdk/SVUnVkzEL+N cRgEK7gilQB4OWaaF/qhZIKCH3tMZLS4fejXZvXfPJVM5Idyb/oFX5YFF3/2IJgE/6E6XTacVwmY HnYfsz2bIF7SM1wlZcBhdkNcsbOVMCUV7ZgBsQ== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251020163725 20251013153725 36904 bpa.gov. YIlgN+d/FdrURkYlelgKmeE/+zgjH9UBneaH1cYeTXE/GRJOdIMMRgzZax02zlb1+zeyivnj5/h3 59YiiauByrRsAnrhuSUXJ9iauz8wAnZoqBS5dUB2BgZVOjFHMn//apWqfawMYjK+KCCiq+jw9X6U ZlwuDTTPsCt1FDUx2rofXTL2dKV+zx7QiX+izcGtjV8JebSQe5VdimEOktwvJx8nRRuI/ENXWLtP Fci0NJq3OrSsTc8zrmEU60AlgvhZ6bJbATiWUdVraDNx/5KR1KZzKHdSxS3ajeJZfqgOrQDIe/Re cm0G8hMoc8+EyPOoj9wETfCYfw/gF5Y3imQNtA== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251021163716 20251014153716 44994 bpa.gov. ggDN9s5171F0n47E5iBRang89hmBqlMcpY7w1+2xWI2LKQmaKnhWjXIaNAkVPgTEDJ6caAAaK8vV lPmkPugY/z/riXNaKQVEEFqd0fRUIZkM/HnmV3mbdb5gf7dnWlCRiun4biW+FaVF2lySD8EiKRv+ K/Kwz9RLItsk9khHzyuyAuT8z4yGa3K5KDiusKOygXFnLWlLw7Y9Me0bvIDZWtwWbxQCV0dDKA80 /Tcq0q75cXB+s5hsQh7udNCjcDQerLJBaD5D60FtwWnSgacAAEHU9e730Yvc9CmlbvxKe/UhjmBq 5AhpFevGwRr0yqKoYh2Nwru0RACqejUzo+3pXA== ) ;; { "EDNS-VERSION": 0 }
	BPA.GOV A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251020164615 20251013154615 36904 bpa.gov. LpafCr215keg8gBuQS+lVX9YLwPSEk1Rl7PG0wbAGlqTf38PobKRw6e2anu12CGW3K6wZvG3SXbm iX8glIqwac5FvVDY9HmcdXbeX9oziqXiuu8Fx/nKVylyecVuUYSazsDXr+Cw7umSqs3Yx0U72J+w NvtnGzGs8q+gicKI4IcQNVcL2KfUypauXb8fO9nnLxeI2gGlT8CtBxSOvn21w+mlfBVjS/R3ErYK gJiUSkS9qqe5I9wVpZQLOFg80aFpt6b185OLYtJBIuWZ6VsWOCNaL2wXVyHDni3Z8N/7tFfwTcOv 7zr5rHSwxEOcvCqok46MWHfjTf4NHCp/1oeyJQ== )`
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251021164605 20251014154605 44994 bpa.gov. mERYm13WQ5zqDQUsAjDFAtgaA9c3e0VrPVmKW2lEYc9RDU8+vuosHCqE9XM1jDGZpV/d9qI54FU2 8S0tdOJLyj4YdPgB4SwQma/mrq2MJ8vIlIjIuQfROCKu7+irmnrMocj1VpFvVygRwDM27i+s+BlU UNz3ev2EF+4Bz3HI5K3OTMeHcXBAWmeWK8pij3xNoGkhvEpyimJ/t5hY0WV/P8xYvpx+qr5SQs/H z9E2M0/VwVbDAAN8z5zTSXZwhQptSBb5quqK7rPXUT+RVcLoIOiFTkLSPt1ZX4T4tX7Dp9TYbTvy Kzmfd9IfP+HkoNP8W0cbGMER3kekZY90M4bKug== )`
	RRSIG=36904 and DNSKEY=36904 verifies the A RRset
	RRSIG=44994 and DNSKEY=44994 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test BPA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: