DNSSEC Analyzer

Domain Name:

Time: 2022-08-19 02:56:15 UTC, NTP stratum 16

Analyzing DNSSEC problems for CAO.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (864 octets) ;; HEADER SECTION ;; id = 65096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to g.root-servers.net for CAO.GOV/A
	Received 629 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (629 octets) ;; HEADER SECTION ;; id = 17722 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (622 octets) ;; HEADER SECTION ;; id = 45741 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (370 octets) ;; HEADER SECTION ;; id = 62023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 10999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220901190254 20220817185754 7698 gov. CAUF2dUSWIxgy0kbX/6uROO/4YSi2zqc2haaEz0UWYeZAKcoiIGLLSIcFOw8KIZpimFOAmnIvIzf uHTuMUbg1BiUv81R8c2ZHONoeY5sh3/mPa9wnpBkJotuq5UjA8pL9nUZpSb4XQHGXQGzdu7e/vfx kdkWaJCMxTQV0SQ3lPAmxGt6RK/IiLvsytFpwQKgBzTIJ+vyHtpgVeQvGRGkxeVMQ3xmq9FTr5Mv h5q3lbMZCxpUhGmugeJXs7LSzItWx75wHqHkblfW/notU2obtNmJrOptNJchlYQ8LoWMqYLscBPp /CAoSP/Yeou62I+v6D7l5C5Rv9hNzyitiZpKlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220901190254 20220817185754 7698 gov. CAUF2dUSWIxgy0kbX/6uROO/4YSi2zqc2haaEz0UWYeZAKcoiIGLLSIcFOw8KIZpimFOAmnIvIzf uHTuMUbg1BiUv81R8c2ZHONoeY5sh3/mPa9wnpBkJotuq5UjA8pL9nUZpSb4XQHGXQGzdu7e/vfx kdkWaJCMxTQV0SQ3lPAmxGt6RK/IiLvsytFpwQKgBzTIJ+vyHtpgVeQvGRGkxeVMQ3xmq9FTr5Mv h5q3lbMZCxpUhGmugeJXs7LSzItWx75wHqHkblfW/notU2obtNmJrOptNJchlYQ8LoWMqYLscBPp /CAoSP/Yeou62I+v6D7l5C5Rv9hNzyitiZpKlQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to c.gov-servers.net for CAO.GOV/A
	Received 480 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (480 octets) ;; HEADER SECTION ;; id = 9334 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) CAO.GOV. 86400 IN NS usw6.akam.net. CAO.GOV. 86400 IN NS usw1.akam.net. CAO.GOV. 86400 IN NS ns1-145.akam.net. CAO.GOV. 86400 IN NS use6.akam.net. CAO.GOV. 86400 IN NS zc.akam.net. CAO.GOV. 86400 IN NS ns1-176.akam.net. CAO.GOV. 86400 IN NS asia9.akam.net. CAO.GOV. 86400 IN NS usw5.akam.net. CAO.GOV. 3600 IN DS 19348 7 1 13db0bc10ca127194d0ae4f5e3f276655a9cca2d CAO.GOV. 3600 IN DS ( 19348 7 2 7d433a6f94722f28691e0e12f5c54179cdab74da526a05f8b60c6ed179cf0cd9 ) CAO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234036 20220818234036 261 gov. Sh1v/8+FUK3lq8OFpCVfEnv6a2wgwNmDY4ioygNFlQvJteWaYTEvjkLu9JUZwwGTkmajlKpS9HdH zRp+98G/GU+fqKbgRVhfsFW8wIb6FRIkXwu0RZfV/MH5QX09WKRsYm+w9djDYdaC8/hfURcpMFgN ZkGth7TmdabR5XPKi38dUJzijuOFDzezQBKguJybl9LwLnXKnhaT+ZdV2uG60g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for CAO.GOV/DNSKEY
	Received 480 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (480 octets) ;; HEADER SECTION ;; id = 35519 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) CAO.GOV. 86400 IN NS ns1-145.akam.net. CAO.GOV. 86400 IN NS usw5.akam.net. CAO.GOV. 86400 IN NS use6.akam.net. CAO.GOV. 86400 IN NS asia9.akam.net. CAO.GOV. 86400 IN NS ns1-176.akam.net. CAO.GOV. 86400 IN NS usw1.akam.net. CAO.GOV. 86400 IN NS usw6.akam.net. CAO.GOV. 86400 IN NS zc.akam.net. CAO.GOV. 3600 IN DS 19348 7 1 13db0bc10ca127194d0ae4f5e3f276655a9cca2d CAO.GOV. 3600 IN DS ( 19348 7 2 7d433a6f94722f28691e0e12f5c54179cdab74da526a05f8b60c6ed179cf0cd9 ) CAO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234036 20220818234036 261 gov. Sh1v/8+FUK3lq8OFpCVfEnv6a2wgwNmDY4ioygNFlQvJteWaYTEvjkLu9JUZwwGTkmajlKpS9HdH zRp+98G/GU+fqKbgRVhfsFW8wIb6FRIkXwu0RZfV/MH5QX09WKRsYm+w9djDYdaC8/hfURcpMFgN ZkGth7TmdabR5XPKi38dUJzijuOFDzezQBKguJybl9LwLnXKnhaT+ZdV2uG60g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CAO.GOV

CAO.GOV

	Checking DS between GOV and CAO.GOV
	Query to c.gov-servers.net for CAO.GOV/DS
	Received 315 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (315 octets) ;; HEADER SECTION ;; id = 62310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN DS ;; ANSWER SECTION (3 records) CAO.GOV. 3600 IN DS 19348 7 1 13db0bc10ca127194d0ae4f5e3f276655a9cca2d CAO.GOV. 3600 IN DS ( 19348 7 2 7d433a6f94722f28691e0e12f5c54179cdab74da526a05f8b60c6ed179cf0cd9 ) CAO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234036 20220818234036 261 gov. Sh1v/8+FUK3lq8OFpCVfEnv6a2wgwNmDY4ioygNFlQvJteWaYTEvjkLu9JUZwwGTkmajlKpS9HdH zRp+98G/GU+fqKbgRVhfsFW8wIb6FRIkXwu0RZfV/MH5QX09WKRsYm+w9djDYdaC8/hfURcpMFgN ZkGth7TmdabR5XPKi38dUJzijuOFDzezQBKguJybl9LwLnXKnhaT+ZdV2uG60g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for CAO.GOV in the GOV zone
	DS=19348/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=19348/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`CAO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234036 20220818234036 261 gov. Sh1v/8+FUK3lq8OFpCVfEnv6a2wgwNmDY4ioygNFlQvJteWaYTEvjkLu9JUZwwGTkmajlKpS9HdH zRp+98G/GU+fqKbgRVhfsFW8wIb6FRIkXwu0RZfV/MH5QX09WKRsYm+w9djDYdaC8/hfURcpMFgN ZkGth7TmdabR5XPKi38dUJzijuOFDzezQBKguJybl9LwLnXKnhaT+ZdV2uG60g== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=19348/SHA-1 is now in the chain-of-trust
	`CAO.GOV. 3600 IN DS 19348 7 1 13db0bc10ca127194d0ae4f5e3f276655a9cca2d`
	`CAO.GOV. 3600 IN DS ( 19348 7 2 7d433a6f94722f28691e0e12f5c54179cdab74da526a05f8b60c6ed179cf0cd9 )`
	Query to usw5.akam.net for CAO.GOV/DNSKEY
	Received 903 bytes from 23.211.132.64
	;; Response received from 23.211.132.64 (903 octets) ;; HEADER SECTION ;; id = 61056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) CAO.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAaNW8u/Dh5P00kv+pYB0CMYSuZWft2lAsudQR+0MgzPerBlw6aX3VLwsaAVG6XitJSi31Vqq GTNkxxh4qLDeAKHodP2kp7p99W3/m8BQ8F4fQweNczsGwNsTTbpkADegw1QfuFzFcxmYym7OG406 lArpQbzaz4AS0NvztZUPTgyFPjy9TpcnD55ov3/LMhFjpLUyE4Lj+bCX34PIV9dASG4dR36HBpeH SqsEyh34Z0d7Ln37hm5rdKx98kLcgXAgn2jyqdDjhH4EeobYKyOfNGw/2uYmjMy0VGbJl29ep8sR rulrDs2y+GJJWwPhkUjcxd7SpyQ10m5K+2kP+EHEECk= ) ; Key ID = 19348 CAO.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAeCp840SPVQ0in6sgNk454g61vgJYEBS5oVOr1rkZ1sQE4l9j92WIJpPWNGeHmh+egGvQsC9 G7/QeHQ9OPyv8zShK3iiQXiKGHMhMgQ4cIkebKv3+UO2hWHJkgJrqrP7htOzte/guqBYpvn24Ckf OD3kbOrevDbJQ7MQ3USqZ3Nt ) ; Key ID = 16532 CAO.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAdoHR2vjdrMYAlM53nFAbn77PDCuzYbMXnitLGGesIc9sB8ZCab/nfyD/DEqgHEPEdk3G7SQ dtS9Ck3xniAilxhJ2HP6YzZw0MICAIXhJfLIY58J5nNAeRNznj/yvH4a7DdUSBqjugiXyXjbeVFd Ut5SI6MDJKIcyp/b19wQhDdZ ) ; Key ID = 17435 CAO.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20220821185307 20220818175307 19348 cao.gov. lYjKhVNwOufVDUuMr78brb2OIn79qe5gXh+9DTLO/1hNUMnumSuaBDbzoglfFNaNhrHyLnBCk5F6 4OU7JuHGFWbrGodITrdexe3T+jplAu3tbHTnmI7nSwdAZTK81kSH1idDjdnhMoqjT2f0B8qECVnp 2xQze0zYx+DqWCvqP2FUFzIck2wGvu5GEFgwOPBomYPFzAQfYpLhE1wl+aqC7kcUHevnar/IQAEg UVim8cr7Vmn5EUrVIdJDOimOHZS70nDCIK+EpmZXliDFzQhgHtiqOVbNeN2AuejI/9emNptDUGVz DnvjNdq4I3ct1apJA+/iO6iFd0jyq1ZXXXW7xg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for CAO.GOV
	`CAO.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAaNW8u/Dh5P00kv+pYB0CMYSuZWft2lAsudQR+0MgzPerBlw6aX3VLwsaAVG6XitJSi31Vqq GTNkxxh4qLDeAKHodP2kp7p99W3/m8BQ8F4fQweNczsGwNsTTbpkADegw1QfuFzFcxmYym7OG406 lArpQbzaz4AS0NvztZUPTgyFPjy9TpcnD55ov3/LMhFjpLUyE4Lj+bCX34PIV9dASG4dR36HBpeH SqsEyh34Z0d7Ln37hm5rdKx98kLcgXAgn2jyqdDjhH4EeobYKyOfNGw/2uYmjMy0VGbJl29ep8sR rulrDs2y+GJJWwPhkUjcxd7SpyQ10m5K+2kP+EHEECk= ) ; Key ID = 19348`
	`CAO.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAeCp840SPVQ0in6sgNk454g61vgJYEBS5oVOr1rkZ1sQE4l9j92WIJpPWNGeHmh+egGvQsC9 G7/QeHQ9OPyv8zShK3iiQXiKGHMhMgQ4cIkebKv3+UO2hWHJkgJrqrP7htOzte/guqBYpvn24Ckf OD3kbOrevDbJQ7MQ3USqZ3Nt ) ; Key ID = 16532`
	`CAO.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAdoHR2vjdrMYAlM53nFAbn77PDCuzYbMXnitLGGesIc9sB8ZCab/nfyD/DEqgHEPEdk3G7SQ dtS9Ck3xniAilxhJ2HP6YzZw0MICAIXhJfLIY58J5nNAeRNznj/yvH4a7DdUSBqjugiXyXjbeVFd Ut5SI6MDJKIcyp/b19wQhDdZ ) ; Key ID = 17435`
	DNSKEY=19348/SEP is now in the chain-of-trust
	DS=19348/SHA-1 verifies DNSKEY=19348/SEP
	DS=19348/SHA-256 verifies DNSKEY=19348/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`CAO.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20220821185307 20220818175307 19348 cao.gov. lYjKhVNwOufVDUuMr78brb2OIn79qe5gXh+9DTLO/1hNUMnumSuaBDbzoglfFNaNhrHyLnBCk5F6 4OU7JuHGFWbrGodITrdexe3T+jplAu3tbHTnmI7nSwdAZTK81kSH1idDjdnhMoqjT2f0B8qECVnp 2xQze0zYx+DqWCvqP2FUFzIck2wGvu5GEFgwOPBomYPFzAQfYpLhE1wl+aqC7kcUHevnar/IQAEg UVim8cr7Vmn5EUrVIdJDOimOHZS70nDCIK+EpmZXliDFzQhgHtiqOVbNeN2AuejI/9emNptDUGVz DnvjNdq4I3ct1apJA+/iO6iFd0jyq1ZXXXW7xg== )`
	RRSIG=19348 and DNSKEY=19348/SEP verifies the DNSKEY RRset
	DNSKEY=16532 is now in the chain-of-trust
	DNSKEY=17435 is now in the chain-of-trust
	Query to usw5.akam.net for CAO.GOV/A
	Received 219 bytes from 23.211.132.64
	;; Response received from 23.211.132.64 (219 octets) ;; HEADER SECTION ;; id = 26436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	usw5.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to usw1.akam.net for CAO.GOV/SOA
	Received 552 bytes from 23.61.199.66
	;; Response received from 23.61.199.66 (552 octets) ;; HEADER SECTION ;; id = 15272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to asia9.akam.net for CAO.GOV/SOA
	Received 552 bytes from 95.100.175.65
	;; Response received from 95.100.175.65 (552 octets) ;; HEADER SECTION ;; id = 49760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-176.akam.net for CAO.GOV/SOA
	Received 552 bytes from 193.108.91.176
	;; Response received from 193.108.91.176 (552 octets) ;; HEADER SECTION ;; id = 61094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-145.akam.net for CAO.GOV/SOA
	Received 552 bytes from 193.108.91.145
	;; Response received from 193.108.91.145 (552 octets) ;; HEADER SECTION ;; id = 39446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to use6.akam.net for CAO.GOV/SOA
	Received 552 bytes from 2.16.40.65
	;; Response received from 2.16.40.65 (552 octets) ;; HEADER SECTION ;; id = 20915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to zc.akam.net for CAO.GOV/SOA
	Received 552 bytes from 184.26.160.66
	;; Response received from 184.26.160.66 (552 octets) ;; HEADER SECTION ;; id = 14886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to usw6.akam.net for CAO.GOV/SOA
	Received 552 bytes from 23.61.199.64
	;; Response received from 23.61.199.64 (552 octets) ;; HEADER SECTION ;; id = 39609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN SOA ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN SOA ( max.GOV. maxsupport.max.GOV. 2022081601 ;serial 86400 ;refresh 86400 ;retry 14515200 ;expire 600 ;minimum ) CAO.GOV. 600 IN RRSIG ( SOA 7 2 600 20220821185307 20220818175307 17435 cao.gov. OIR2gWr09ZN/tKBV+LufE9gJL7lIEu+DkpkDgTS3v2/jciIc5tUSsn75IOTVrJLDlo9x6GTixuMw x8N4zTTSDF4eJpB2laC77yT5AS05CADHTiMFEJ9c3QQDMiaY9NGg9wjZfPJ2azGfRAsJ4hb7zlxP K4VfYvuUhJ/w4Zv6ZSs= ) ;; AUTHORITY SECTION (7 records) CAO.GOV. 600 IN NS a5-64.akam.net. CAO.GOV. 600 IN NS a20-65.akam.net. CAO.GOV. 600 IN NS a12-64.akam.net. CAO.GOV. 600 IN NS a1-61.akam.net. CAO.GOV. 600 IN NS a22-66.akam.net. CAO.GOV. 600 IN NS a3-67.akam.net. CAO.GOV. 600 IN RRSIG ( NS 7 2 600 20220821185307 20220818175307 17435 cao.gov. GWcYvCVARNp1NcWP/yBYYBHJ0UFXJ3LA5jMkCrhAYQMSsgceljAWGyhnjNsa0UW1taP1Q6QkHf9J Cqsgq60Y+hUk9+OdoqsOfog2eE6CjdC+cFNGqBUvYXvl/vcvBTdMP3t1+m1iBXce86n8FncKU2Jm roFKK38WJQv1xbdwOZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to usw5.akam.net for CAO.GOV/A
	Received 219 bytes from 23.211.132.64
	;; Response received from 23.211.132.64 (219 octets) ;; HEADER SECTION ;; id = 10145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to usw6.akam.net for CAO.GOV/A
	Received 219 bytes from 23.61.199.64
	;; Response received from 23.61.199.64 (219 octets) ;; HEADER SECTION ;; id = 46398 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	usw6.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to usw6.akam.net for CAO.GOV/A
	Received 219 bytes from 23.61.199.64
	;; Response received from 23.61.199.64 (219 octets) ;; HEADER SECTION ;; id = 5565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to asia9.akam.net for CAO.GOV/A
	Received 219 bytes from 95.100.175.65
	;; Response received from 95.100.175.65 (219 octets) ;; HEADER SECTION ;; id = 61699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	asia9.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to asia9.akam.net for CAO.GOV/A
	Received 219 bytes from 95.100.175.65
	;; Response received from 95.100.175.65 (219 octets) ;; HEADER SECTION ;; id = 24631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to zc.akam.net for CAO.GOV/A
	Received 219 bytes from 184.26.160.66
	;; Response received from 184.26.160.66 (219 octets) ;; HEADER SECTION ;; id = 9348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	zc.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to zc.akam.net for CAO.GOV/A
	Received 219 bytes from 184.26.160.66
	;; Response received from 184.26.160.66 (219 octets) ;; HEADER SECTION ;; id = 61729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to ns1-176.akam.net for CAO.GOV/A
	Received 219 bytes from 193.108.91.176
	;; Response received from 193.108.91.176 (219 octets) ;; HEADER SECTION ;; id = 18381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1-176.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to ns1-176.akam.net for CAO.GOV/A
	Received 219 bytes from 193.108.91.176
	;; Response received from 193.108.91.176 (219 octets) ;; HEADER SECTION ;; id = 57143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to ns1-145.akam.net for CAO.GOV/A
	Received 219 bytes from 193.108.91.145
	;; Response received from 193.108.91.145 (219 octets) ;; HEADER SECTION ;; id = 12150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1-145.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to ns1-145.akam.net for CAO.GOV/A
	Received 219 bytes from 193.108.91.145
	;; Response received from 193.108.91.145 (219 octets) ;; HEADER SECTION ;; id = 44413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to use6.akam.net for CAO.GOV/A
	Received 219 bytes from 2.16.40.65
	;; Response received from 2.16.40.65 (219 octets) ;; HEADER SECTION ;; id = 49774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	use6.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to use6.akam.net for CAO.GOV/A
	Received 219 bytes from 2.16.40.65
	;; Response received from 2.16.40.65 (219 octets) ;; HEADER SECTION ;; id = 60261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

CAO.GOV

	Query to usw1.akam.net for CAO.GOV/A
	Received 219 bytes from 23.61.199.66
	;; Response received from 23.61.199.66 (219 octets) ;; HEADER SECTION ;; id = 31520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	usw1.akam.net is authoritative for CAO.GOV
	Found RRSIG signed by cao.gov zone
	Query to usw1.akam.net for CAO.GOV/A
	Received 219 bytes from 23.61.199.66
	;; Response received from 23.61.199.66 (219 octets) ;; HEADER SECTION ;; id = 12987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAO.GOV. IN A ;; ANSWER SECTION (2 records) CAO.GOV. 600 IN A 159.142.165.70 CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAO.GOV A RR has value 159.142.165.70
	Found 1 RRSIGs over A RRset
	`CAO.GOV. 600 IN RRSIG ( A 7 2 600 20220821185307 20220818175307 17435 cao.gov. H3oMgEYrpT6ZX/nDbQ4X1+3LvrIppjqpuVwcMEvVpiHoVt7oyib/8ChQmCjKkG3hYvuH9cmYEnaF 1qyJzEs1K/K5dpsI+AI9z/9nyy3jiL0DXfxVCGD2diMDENuLfb1hY0gYAI1nCJfIhRfaXBwx2JeF jKvaYYD1Cbi/He7ZN2Q= )`
	RRSIG=17435 and DNSKEY=17435 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CAO.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: