DNSSEC Debugger

Domain Name:

Time: 2025-07-05 02:23:32 UTC

Analyzing DNSSEC problems for DEA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1414 octets ;; HEADER SECTION ;; id = 42934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to i.root-servers.net for DEA.GOV/A
	Received 620 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 620 octets ;; HEADER SECTION ;; id = 9121 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250717170000 20250704160000 46441 . Gb1CT7UdWuUIhm+u39d1/mv2KvIY27eJ9cqMc8sH28n4FkbKVrAvwyqujJpFVA8zDlkmGStPj438 Dsmlt5C1D1OZBzbEh9/FtWBdtNmU0NC3Lwniga9tIOjq/C7WroxvJ+L7RJ1kkQSeokxaylvlPhPW BNj40bxh74ZAfpaUNzPBo5CqcY8IoNQcJkOnjlSueoyRIx6YtSwSxEI6Wyu5iv0Ct+6wlrxXsMlL A/knCNV4dbLnr9bdOo6DgnE0YCzBQP69Zj4bCVeUtIeK7VHyGAtMp7nH6NV64WXhprAHuc/A1guN CvCwio7ucq17WotN9qKcg02PKIQFZ+goR8kXfA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 21549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20250717170000 20250704160000 46441 . Gb1CT7UdWuUIhm+u39d1/mv2KvIY27eJ9cqMc8sH28n4FkbKVrAvwyqujJpFVA8zDlkmGStPj438 Dsmlt5C1D1OZBzbEh9/FtWBdtNmU0NC3Lwniga9tIOjq/C7WroxvJ+L7RJ1kkQSeokxaylvlPhPW BNj40bxh74ZAfpaUNzPBo5CqcY8IoNQcJkOnjlSueoyRIx6YtSwSxEI6Wyu5iv0Ct+6wlrxXsMlL A/knCNV4dbLnr9bdOo6DgnE0YCzBQP69Zj4bCVeUtIeK7VHyGAtMp7nH6NV64WXhprAHuc/A1guN CvCwio7ucq17WotN9qKcg02PKIQFZ+goR8kXfA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 38235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20250717170000 20250704160000 46441 . Gb1CT7UdWuUIhm+u39d1/mv2KvIY27eJ9cqMc8sH28n4FkbKVrAvwyqujJpFVA8zDlkmGStPj438 Dsmlt5C1D1OZBzbEh9/FtWBdtNmU0NC3Lwniga9tIOjq/C7WroxvJ+L7RJ1kkQSeokxaylvlPhPW BNj40bxh74ZAfpaUNzPBo5CqcY8IoNQcJkOnjlSueoyRIx6YtSwSxEI6Wyu5iv0Ct+6wlrxXsMlL A/knCNV4dbLnr9bdOo6DgnE0YCzBQP69Zj4bCVeUtIeK7VHyGAtMp7nH6NV64WXhprAHuc/A1guN CvCwio7ucq17WotN9qKcg02PKIQFZ+goR8kXfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20250717170000 20250704160000 46441 . Gb1CT7UdWuUIhm+u39d1/mv2KvIY27eJ9cqMc8sH28n4FkbKVrAvwyqujJpFVA8zDlkmGStPj438 Dsmlt5C1D1OZBzbEh9/FtWBdtNmU0NC3Lwniga9tIOjq/C7WroxvJ+L7RJ1kkQSeokxaylvlPhPW BNj40bxh74ZAfpaUNzPBo5CqcY8IoNQcJkOnjlSueoyRIx6YtSwSxEI6Wyu5iv0Ct+6wlrxXsMlL A/knCNV4dbLnr9bdOo6DgnE0YCzBQP69Zj4bCVeUtIeK7VHyGAtMp7nH6NV64WXhprAHuc/A1guN CvCwio7ucq17WotN9qKcg02PKIQFZ+goR8kXfA== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 40900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.GOV for DEA.GOV/A
	Received 314 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 314 octets ;; HEADER SECTION ;; id = 2262 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DEA.GOV. 10800 IN NS a1-61.akam.net. DEA.GOV. 10800 IN NS a10-66.akam.net. DEA.GOV. 10800 IN NS a12-67.akam.net. DEA.GOV. 10800 IN NS a13-64.akam.net. DEA.GOV. 10800 IN NS a7-65.akam.net. DEA.GOV. 10800 IN NS a8-66.akam.net. DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250706032332 20250704012332 35496 gov. rh4EE0wxoB+D2WJ/3+WmPEzwuoVytRDGxpYLEBiPQTs6UPiN/gYt7/y0KR4E4t8fZYE6aUX4j7uO BrtGbzV4cQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for DEA.GOV/DNSKEY
	Received 314 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 314 octets ;; HEADER SECTION ;; id = 62091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DEA.GOV. 10800 IN NS a1-61.akam.net. DEA.GOV. 10800 IN NS a10-66.akam.net. DEA.GOV. 10800 IN NS a12-67.akam.net. DEA.GOV. 10800 IN NS a13-64.akam.net. DEA.GOV. 10800 IN NS a7-65.akam.net. DEA.GOV. 10800 IN NS a8-66.akam.net. DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250706032332 20250704012332 35496 gov. OFeRDmkVPFU6QNDUuU5XYFbNobsrWBCvCpz19PcsIXOwSc1APiXQOVfZK/tyVqc0R1KlgodNiZro BWgFTke+Og== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone DEA.GOV

DEA.GOV

	Checking DS between GOV and DEA.GOV
	Query to d.ns.GOV for DEA.GOV/DS
	Received 183 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 183 octets ;; HEADER SECTION ;; id = 706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN DS ;; ANSWER SECTION (2 records) DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250706032332 20250704012332 35496 gov. F1SaECl5Q5Q6xoAoGGoKmn5hntATaHkd7B9zNGKqQgtfa/j/aivDdcZO9OXJRa1eLnhd/sy273FZ BF1tCHIvdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for DEA.GOV in the GOV zone
	DS=6809/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250706032332 20250704012332 35496 gov. F1SaECl5Q5Q6xoAoGGoKmn5hntATaHkd7B9zNGKqQgtfa/j/aivDdcZO9OXJRa1eLnhd/sy273FZ BF1tCHIvdw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=6809/SHA-256 is now in the chain-of-trust
	`DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 )`
	Query to a13-64.akam.net for DEA.GOV/DNSKEY
	Received 1474 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 1474 octets ;; HEADER SECTION ;; id = 10966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAZwPqEeQab4yZvheninDHrCYftlWvnvdK+JyGe0u/uqczWYaVlwmL2egRDzh9bZtzi0HOd4C hdJY4BX8oZlfs3+LOT9nw6i18kSE171kYDK+svtv6pGvAZ/gB3aVf/nuJai/1BxJennlGUIoyNEx P893s5bGXngyhyH8L186xKPCL1QKJjS5BjWkRY7f77qoT3yacmbZEElCWlp0Y+Sc0rq9JAbH0J8u iycpgAk0Pk3AX4fiFPIal/cAwC2Oe2r7/7YswUnPFLp+DLVhbIl7SB84lO+m0aHIahpaYcIRB2e8 IplxqO4gkavwuRu8nHuL26JrMRij9SDCXVxZbC2W8ec= ) ; keytag 40447 DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAeNWDF9cYKb3tp1sP1KYx+cdWR1GTIiAWZCmWRytFMTuycEzsXJ6Pho8UUC97szsxos/UscW ikKvE5O/x92QXWgClETRmrkTtcbVhJyHiHbS/DDTp8vC7mch1ytzez+6q4/Wc+NR5ABQiFoH4Im1 kCrD3L9stEmdxL7e6HOxrZsQi1CkfdCRWn3iewp6+VL6/yRRjMrbCY51Mt4oVD83Je1cXGzn/dEm hT92zIJVgX2rJEKdFcAlXiTF6o+IqOt0LSwCh4GPtqt0r/llp7o56MluFycmCyso2WMLeJ09mF4F NbhXYiuOfykfYQ/7+AZQHAmFvRiNccRGxQg+AjC6BAE= ) ; keytag 6809 DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAb/VQpfSUTssDTlAVBU+ZaAun4qVWbtgor1lyCzWp8ivc7B/ud3NO00j7WZejEl4QR2K8GTP c0SUngPGeL/yXzl0Qrzx2kSIvDEDRNPKEuYE5LIKX3r3iVDV3pKC15M1+kj0QBZrQHAs9QfIW6Xq ZGndostFIK34Usyzqt94pV4F ) ; keytag 6300 DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAcnWU/RgglsJDLFrYaX83S45mRpy710yyMRzKj7gbu/sOjM2DlUGz+bpYJlhuhLfRxcPCt9W 631V8iTWpr1xb18a3qtU54Sp4jt3z66smictXcj1wOeuMGKXiT4dKGbnh+nM2TOuqS74DZ4uQraZ Wl7qEsmpIkIooS5a+QoT/8CJ ) ; keytag 7606 DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250707033624 20250704023624 6809 dea.gov. 2SN4qUZRs02lgchOycGew3+oTkIunaenvI5nlNEvle8mQX8+CN5U+5H5At+UZkJYDpx4witCIEgI VmMAXmlex14TPhMog6OAIs6zAFW58aeK+qHg1HeVgMTMHydtCMnx7mFaufNQA6KkOcdv1GyFonJJ +XBl2Z/bBm6eCh0N5KpqOQsGIZmFSan26e7IvaSqiAEfOdnfusAAAfMdHH7hHNIAqRyFDikw092B HA0HlMqPcJyOuAKeRHqh1FfmtJO+AlRuMbYlcbyzH4GOlFoTwM5m3FtcQAOQe+thyPvQiq5kdPaz iJeFpb2/QJeygApHl/mY0rMIt77k0+xNuDiXTA== ) DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250707033624 20250704023624 40447 dea.gov. iWLe6sPAnCTAcVb3Ws8TJnb2tQK5UJfvYdbU67G5xlRmwxhyt3Rw6P0Fbv5aXBKAU9z3TOMU7OD9 Yal/eSrdDf2ghT/WH/NXlvBr8J/ulU6QiAE7r1XQk9sHUgxM+NoscylOZiu1NfXJeiNnXCYsrak/ opttLSpFPftER937tzout6XYR7LTWmGMNsNP5GvgeZOV7LA9ASHrhaCpf9g5CU5FaOBcAqhJAaKZ cLhDUIXLw3/KaWH6OOHDVH7eKgMLBZ31eFYK3FcKi6+7T72HqoqeFT4ShZiZkn2cXXMQLCZY0i71 bs9h/QO8oaY0YtRw4Dod2rUBnXU81haee2L//A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for DEA.GOV
	`DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAZwPqEeQab4yZvheninDHrCYftlWvnvdK+JyGe0u/uqczWYaVlwmL2egRDzh9bZtzi0HOd4C hdJY4BX8oZlfs3+LOT9nw6i18kSE171kYDK+svtv6pGvAZ/gB3aVf/nuJai/1BxJennlGUIoyNEx P893s5bGXngyhyH8L186xKPCL1QKJjS5BjWkRY7f77qoT3yacmbZEElCWlp0Y+Sc0rq9JAbH0J8u iycpgAk0Pk3AX4fiFPIal/cAwC2Oe2r7/7YswUnPFLp+DLVhbIl7SB84lO+m0aHIahpaYcIRB2e8 IplxqO4gkavwuRu8nHuL26JrMRij9SDCXVxZbC2W8ec= ) ; keytag 40447`
	`DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAeNWDF9cYKb3tp1sP1KYx+cdWR1GTIiAWZCmWRytFMTuycEzsXJ6Pho8UUC97szsxos/UscW ikKvE5O/x92QXWgClETRmrkTtcbVhJyHiHbS/DDTp8vC7mch1ytzez+6q4/Wc+NR5ABQiFoH4Im1 kCrD3L9stEmdxL7e6HOxrZsQi1CkfdCRWn3iewp6+VL6/yRRjMrbCY51Mt4oVD83Je1cXGzn/dEm hT92zIJVgX2rJEKdFcAlXiTF6o+IqOt0LSwCh4GPtqt0r/llp7o56MluFycmCyso2WMLeJ09mF4F NbhXYiuOfykfYQ/7+AZQHAmFvRiNccRGxQg+AjC6BAE= ) ; keytag 6809`
	`DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAb/VQpfSUTssDTlAVBU+ZaAun4qVWbtgor1lyCzWp8ivc7B/ud3NO00j7WZejEl4QR2K8GTP c0SUngPGeL/yXzl0Qrzx2kSIvDEDRNPKEuYE5LIKX3r3iVDV3pKC15M1+kj0QBZrQHAs9QfIW6Xq ZGndostFIK34Usyzqt94pV4F ) ; keytag 6300`
	`DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAcnWU/RgglsJDLFrYaX83S45mRpy710yyMRzKj7gbu/sOjM2DlUGz+bpYJlhuhLfRxcPCt9W 631V8iTWpr1xb18a3qtU54Sp4jt3z66smictXcj1wOeuMGKXiT4dKGbnh+nM2TOuqS74DZ4uQraZ Wl7qEsmpIkIooS5a+QoT/8CJ ) ; keytag 7606`
	DNSKEY=6809/SEP is now in the chain-of-trust
	DS=6809/SHA-256 verifies DNSKEY=6809/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250707033624 20250704023624 6809 dea.gov. 2SN4qUZRs02lgchOycGew3+oTkIunaenvI5nlNEvle8mQX8+CN5U+5H5At+UZkJYDpx4witCIEgI VmMAXmlex14TPhMog6OAIs6zAFW58aeK+qHg1HeVgMTMHydtCMnx7mFaufNQA6KkOcdv1GyFonJJ +XBl2Z/bBm6eCh0N5KpqOQsGIZmFSan26e7IvaSqiAEfOdnfusAAAfMdHH7hHNIAqRyFDikw092B HA0HlMqPcJyOuAKeRHqh1FfmtJO+AlRuMbYlcbyzH4GOlFoTwM5m3FtcQAOQe+thyPvQiq5kdPaz iJeFpb2/QJeygApHl/mY0rMIt77k0+xNuDiXTA== )`
	`DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250707033624 20250704023624 40447 dea.gov. iWLe6sPAnCTAcVb3Ws8TJnb2tQK5UJfvYdbU67G5xlRmwxhyt3Rw6P0Fbv5aXBKAU9z3TOMU7OD9 Yal/eSrdDf2ghT/WH/NXlvBr8J/ulU6QiAE7r1XQk9sHUgxM+NoscylOZiu1NfXJeiNnXCYsrak/ opttLSpFPftER937tzout6XYR7LTWmGMNsNP5GvgeZOV7LA9ASHrhaCpf9g5CU5FaOBcAqhJAaKZ cLhDUIXLw3/KaWH6OOHDVH7eKgMLBZ31eFYK3FcKi6+7T72HqoqeFT4ShZiZkn2cXXMQLCZY0i71 bs9h/QO8oaY0YtRw4Dod2rUBnXU81haee2L//A== )`
	RRSIG=6809 and DNSKEY=6809/SEP verifies the DNSKEY RRset
	RRSIG=40447 and DNSKEY=40447/SEP verifies the DNSKEY RRset
	DNSKEY=40447/SEP is now in the chain-of-trust
	DNSKEY=6300 is now in the chain-of-trust
	DNSKEY=7606 is now in the chain-of-trust
	Query to a8-66.akam.net for DEA.GOV/A
	Received 219 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 219 octets ;; HEADER SECTION ;; id = 14332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 23.223.128.77 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. dsc5J9kcAgAO4+92saGH5tLqewkBNEDJzETnbXDtPlNF4k10FRpLnj1/3TEclDegoIFMLSdqpRgm 73m7d6nThAdTdNkRzZWJiUwY6YUPe/8sjNIhPZN3r7rOYVnXV8A4Mhi9LgtHK1Xmfjn7rRyLmBmc aWXn+IAinUShhouMbhM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-66.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a7-65.akam.net for DEA.GOV/SOA
	Received 558 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 558 octets ;; HEADER SECTION ;; id = 17915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20250707033624 20250704023624 6300 dea.gov. LuBKJIzvtnudfguSumbtqP2mGcK0UitGIw9LtB5eV84tvtPmjUb+xNAPwzP1ESgoQ+sBcZpFxcw2 OwMFScwQyPg7m385rxAqXbpgzNwlsQ71BPergFC8niaYcQp1Nn660kn+K7oJNCcIBW56vR6QT3Rw cllSjPaVZFwzbBxcA14= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20250707033624 20250704023624 6300 dea.gov. JZJDL2ttWo3pFj/tg2KJZ6ZaJY9TzGahrNkJnQr/Q0PSFZ3l+HVMMMBHCGnXy19gzFhZctmZK/eN Pu/Tp9nRfAlTx5bogxh075/pZ4lYJ+U6E7qXhlEOpof5Slg+BSAdXQZggeJE4qpYhPf28sQQq9BF QM8Xe14FSyHacIRrd8U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for DEA.GOV/SOA
	Received 558 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 558 octets ;; HEADER SECTION ;; id = 166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20250707033624 20250704023624 6300 dea.gov. LuBKJIzvtnudfguSumbtqP2mGcK0UitGIw9LtB5eV84tvtPmjUb+xNAPwzP1ESgoQ+sBcZpFxcw2 OwMFScwQyPg7m385rxAqXbpgzNwlsQ71BPergFC8niaYcQp1Nn660kn+K7oJNCcIBW56vR6QT3Rw cllSjPaVZFwzbBxcA14= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20250707033624 20250704023624 6300 dea.gov. JZJDL2ttWo3pFj/tg2KJZ6ZaJY9TzGahrNkJnQr/Q0PSFZ3l+HVMMMBHCGnXy19gzFhZctmZK/eN Pu/Tp9nRfAlTx5bogxh075/pZ4lYJ+U6E7qXhlEOpof5Slg+BSAdXQZggeJE4qpYhPf28sQQq9BF QM8Xe14FSyHacIRrd8U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a13-64.akam.net for DEA.GOV/SOA
	Received 558 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 558 octets ;; HEADER SECTION ;; id = 10140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20250707033624 20250704023624 6300 dea.gov. LuBKJIzvtnudfguSumbtqP2mGcK0UitGIw9LtB5eV84tvtPmjUb+xNAPwzP1ESgoQ+sBcZpFxcw2 OwMFScwQyPg7m385rxAqXbpgzNwlsQ71BPergFC8niaYcQp1Nn660kn+K7oJNCcIBW56vR6QT3Rw cllSjPaVZFwzbBxcA14= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20250707033624 20250704023624 6300 dea.gov. JZJDL2ttWo3pFj/tg2KJZ6ZaJY9TzGahrNkJnQr/Q0PSFZ3l+HVMMMBHCGnXy19gzFhZctmZK/eN Pu/Tp9nRfAlTx5bogxh075/pZ4lYJ+U6E7qXhlEOpof5Slg+BSAdXQZggeJE4qpYhPf28sQQq9BF QM8Xe14FSyHacIRrd8U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-67.akam.net for DEA.GOV/SOA
	Received 558 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 558 octets ;; HEADER SECTION ;; id = 8127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20250707033624 20250704023624 6300 dea.gov. LuBKJIzvtnudfguSumbtqP2mGcK0UitGIw9LtB5eV84tvtPmjUb+xNAPwzP1ESgoQ+sBcZpFxcw2 OwMFScwQyPg7m385rxAqXbpgzNwlsQ71BPergFC8niaYcQp1Nn660kn+K7oJNCcIBW56vR6QT3Rw cllSjPaVZFwzbBxcA14= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20250707033624 20250704023624 6300 dea.gov. JZJDL2ttWo3pFj/tg2KJZ6ZaJY9TzGahrNkJnQr/Q0PSFZ3l+HVMMMBHCGnXy19gzFhZctmZK/eN Pu/Tp9nRfAlTx5bogxh075/pZ4lYJ+U6E7qXhlEOpof5Slg+BSAdXQZggeJE4qpYhPf28sQQq9BF QM8Xe14FSyHacIRrd8U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-61.akam.net for DEA.GOV/SOA
	Received 558 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 558 octets ;; HEADER SECTION ;; id = 12171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20250707033624 20250704023624 6300 dea.gov. LuBKJIzvtnudfguSumbtqP2mGcK0UitGIw9LtB5eV84tvtPmjUb+xNAPwzP1ESgoQ+sBcZpFxcw2 OwMFScwQyPg7m385rxAqXbpgzNwlsQ71BPergFC8niaYcQp1Nn660kn+K7oJNCcIBW56vR6QT3Rw cllSjPaVZFwzbBxcA14= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20250707033624 20250704023624 6300 dea.gov. JZJDL2ttWo3pFj/tg2KJZ6ZaJY9TzGahrNkJnQr/Q0PSFZ3l+HVMMMBHCGnXy19gzFhZctmZK/eN Pu/Tp9nRfAlTx5bogxh075/pZ4lYJ+U6E7qXhlEOpof5Slg+BSAdXQZggeJE4qpYhPf28sQQq9BF QM8Xe14FSyHacIRrd8U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-66.akam.net for DEA.GOV/A
	Received 219 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 219 octets ;; HEADER SECTION ;; id = 42463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 23.195.231.203 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. mcTrvOmmNzpBHRHuFSb+qfR5163pMI4uVEbkaHkod2nQqeuu/3QTQU/cRy4naBWaQoTwX00/JbfC aJQ59J5qoBrHuCOyeWyUfOd36iFXleht6EqsF8X2tSjcRPh2zs/pZ7vW6G/bY6QKaHrl2PpYj/oJ A8g75lIMgoi3ZJ6GCRE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 23.195.231.203
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. mcTrvOmmNzpBHRHuFSb+qfR5163pMI4uVEbkaHkod2nQqeuu/3QTQU/cRy4naBWaQoTwX00/JbfC aJQ59J5qoBrHuCOyeWyUfOd36iFXleht6EqsF8X2tSjcRPh2zs/pZ7vW6G/bY6QKaHrl2PpYj/oJ A8g75lIMgoi3ZJ6GCRE= )`
	RRSIG=6300 and DNSKEY=6300 verifies the A RRset

DEA.GOV

	Query to a10-66.akam.net for DEA.GOV/A
	Received 219 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 219 octets ;; HEADER SECTION ;; id = 32838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 23.223.167.201 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. ObMLdMoPkBqVRWU7b3Ko13FpWPIoJDP5IHTqO+i+3qLNCNCaX5QZIFx9FvoNTx1R3NHcuRaslfkZ pd9/bRhJG6AIcn0joRkpM5DYpIBItIw303gxBKr8iU4n+5MH0S1QNLp0v47uaRcXVOtbRrDPessB K2KfdCteHjzYM7Sn0q8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-66.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a10-66.akam.net for DEA.GOV/A
	Received 219 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 219 octets ;; HEADER SECTION ;; id = 23568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 23.223.167.201 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. ObMLdMoPkBqVRWU7b3Ko13FpWPIoJDP5IHTqO+i+3qLNCNCaX5QZIFx9FvoNTx1R3NHcuRaslfkZ pd9/bRhJG6AIcn0joRkpM5DYpIBItIw303gxBKr8iU4n+5MH0S1QNLp0v47uaRcXVOtbRrDPessB K2KfdCteHjzYM7Sn0q8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 23.223.167.201
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. ObMLdMoPkBqVRWU7b3Ko13FpWPIoJDP5IHTqO+i+3qLNCNCaX5QZIFx9FvoNTx1R3NHcuRaslfkZ pd9/bRhJG6AIcn0joRkpM5DYpIBItIw303gxBKr8iU4n+5MH0S1QNLp0v47uaRcXVOtbRrDPessB K2KfdCteHjzYM7Sn0q8= )`
	RRSIG=6300 and DNSKEY=6300 verifies the A RRset

DEA.GOV

	Query to a12-67.akam.net for DEA.GOV/A
	Received 219 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 219 octets ;; HEADER SECTION ;; id = 65283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 184.86.172.214 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. C/92u+rRUqfjZ6kCMy3kBsBSEb3Arlid9zlQfpiYFJ8EC6eJKCMKvK24Fjogc9ynS06z4KH19PA9 9tCzA3kWjnK/bccyukeyErtSiTB+kAWBTjOaAm7PU5rZfttBONpht+tx2FFrRzbkmy3I9I1RcnKe FHQGkBUPO/YBKSHtNXs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-67.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a12-67.akam.net for DEA.GOV/A
	Received 219 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 219 octets ;; HEADER SECTION ;; id = 56866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 184.86.172.214 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. C/92u+rRUqfjZ6kCMy3kBsBSEb3Arlid9zlQfpiYFJ8EC6eJKCMKvK24Fjogc9ynS06z4KH19PA9 9tCzA3kWjnK/bccyukeyErtSiTB+kAWBTjOaAm7PU5rZfttBONpht+tx2FFrRzbkmy3I9I1RcnKe FHQGkBUPO/YBKSHtNXs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 184.86.172.214
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. C/92u+rRUqfjZ6kCMy3kBsBSEb3Arlid9zlQfpiYFJ8EC6eJKCMKvK24Fjogc9ynS06z4KH19PA9 9tCzA3kWjnK/bccyukeyErtSiTB+kAWBTjOaAm7PU5rZfttBONpht+tx2FFrRzbkmy3I9I1RcnKe FHQGkBUPO/YBKSHtNXs= )`
	RRSIG=6300 and DNSKEY=6300 verifies the A RRset

DEA.GOV

	Query to a1-61.akam.net for DEA.GOV/A
	Received 219 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 219 octets ;; HEADER SECTION ;; id = 65163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-61.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a1-61.akam.net for DEA.GOV/A
	Received 219 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 219 octets ;; HEADER SECTION ;; id = 57926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 104.100.61.189
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= )`
	RRSIG=6300 and DNSKEY=6300 verifies the A RRset

DEA.GOV

	Query to a7-65.akam.net for DEA.GOV/A
	Received 219 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 219 octets ;; HEADER SECTION ;; id = 43508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-65.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a7-65.akam.net for DEA.GOV/A
	Received 219 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 219 octets ;; HEADER SECTION ;; id = 50526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.90.71.201 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. PRayOe1pFk5sncrJ0SpYTDfE/Nz1jxJMfqb7FfTo8tNgLrF3QPLZrcgeIlPCruQ2uu9MTjQqNMly kiLbBiaMlS5f/2wXhhEjTScT4nnqQmp5JepevKcTzj0+/o+AhN9SyVzWH0egFKKbhtcm9q5rgWor TQfhfl+t91X/1LFuIT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 104.90.71.201
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. PRayOe1pFk5sncrJ0SpYTDfE/Nz1jxJMfqb7FfTo8tNgLrF3QPLZrcgeIlPCruQ2uu9MTjQqNMly kiLbBiaMlS5f/2wXhhEjTScT4nnqQmp5JepevKcTzj0+/o+AhN9SyVzWH0egFKKbhtcm9q5rgWor TQfhfl+t91X/1LFuIT4= )`
	RRSIG=6300 and DNSKEY=6300 verifies the A RRset

DEA.GOV

	Query to a13-64.akam.net for DEA.GOV/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 61551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a13-64.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a13-64.akam.net for DEA.GOV/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 27181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 104.100.61.189
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20250707033624 20250704023624 6300 dea.gov. eQHqO7SIFscOiW2EmzVYolIQRFjfGrc7OmCTD4IL4ZIblCdl8LuYOvnfRixmtdrGWfHf8jtK66A3 zAExhuJP5P6iu445LLdc40K9lusZClYQbjFr5CiRDMshWvEALrg82Hweq5aYVc57LY03cROPFhVL g1QijS6CrgN4KY1BT3Y= )`
	RRSIG=6300 and DNSKEY=6300 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DEA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: