DNSSEC Debugger

Domain Name:

Time: 2026-01-05 08:35:04 UTC

Analyzing DNSSEC problems for DEA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1414 octets ;; HEADER SECTION ;; id = 6282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260122000000 20260101000000 20326 . USkvPpFyQAxqOkImrqqrMdiekwo0VJR5VGDlDxCNsI1dJ79PzX9wXPKprjsMZf77Xbo2SmRTCz+r bNtUtTmiKtDNsRROj9+45I4ExW1w3JKx3SrfHdORnrM0FK14YI+BbOJGkVsSMfJkscC2IWDb0APd vZgkUvYmi1ERmu4UG6CAujAmHe7GbLtEQlzMEdlCrYAgRtJo5RstNivFZ5A9WiBQMlfOAoEf0zr7 FDbHocQa2i983Jc3TzNJcRZwmQRpV1beonuMzQ3BumxE8n0sLX3pd6YFfZeO5J+kY8NVKFrSyEpf i83Yucy2Jd5LJwDo4t2kHHmG03LbkZbeGPkawg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260122000000 20260101000000 20326 . USkvPpFyQAxqOkImrqqrMdiekwo0VJR5VGDlDxCNsI1dJ79PzX9wXPKprjsMZf77Xbo2SmRTCz+r bNtUtTmiKtDNsRROj9+45I4ExW1w3JKx3SrfHdORnrM0FK14YI+BbOJGkVsSMfJkscC2IWDb0APd vZgkUvYmi1ERmu4UG6CAujAmHe7GbLtEQlzMEdlCrYAgRtJo5RstNivFZ5A9WiBQMlfOAoEf0zr7 FDbHocQa2i983Jc3TzNJcRZwmQRpV1beonuMzQ3BumxE8n0sLX3pd6YFfZeO5J+kY8NVKFrSyEpf i83Yucy2Jd5LJwDo4t2kHHmG03LbkZbeGPkawg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to m.root-servers.net for DEA.GOV/A
	Received 620 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 620 octets ;; HEADER SECTION ;; id = 8097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260118050000 20260105040000 21831 . GaAbYLBwsPQ5F7cRrjGNofI/VnpFUJUt5QLN1MTYcFYgzuxs7CG8e7tDXJ2lx4bZvMsMKOqSpJPZ 1FiJ3+WPS1wiv2DOVBc04hGzhcO7zP7BAroO0ZXReQeDkE0a4F7QsmDT4NwYTlrdNoZgDC1f++wE WqFYO6ivQgVVgZZrLjUoq22gcB+Rm189Ft/OQBSZQDy7rKCSMTIW9jHlRH9In7K0oA+FfZ3O8tlD 98cF4C1n+32BjIzDQndawFOepLI3vFcXDZ3cCHi/JNL9ww8rUATfEci07AlPfS3crYFPbU9gk2gQ MrgeaGAcz4cu+s6rw/QTlpUSgRkMXAK9q0B9mQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 59794 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260118050000 20260105040000 21831 . GaAbYLBwsPQ5F7cRrjGNofI/VnpFUJUt5QLN1MTYcFYgzuxs7CG8e7tDXJ2lx4bZvMsMKOqSpJPZ 1FiJ3+WPS1wiv2DOVBc04hGzhcO7zP7BAroO0ZXReQeDkE0a4F7QsmDT4NwYTlrdNoZgDC1f++wE WqFYO6ivQgVVgZZrLjUoq22gcB+Rm189Ft/OQBSZQDy7rKCSMTIW9jHlRH9In7K0oA+FfZ3O8tlD 98cF4C1n+32BjIzDQndawFOepLI3vFcXDZ3cCHi/JNL9ww8rUATfEci07AlPfS3crYFPbU9gk2gQ MrgeaGAcz4cu+s6rw/QTlpUSgRkMXAK9q0B9mQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 14165 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260118050000 20260105040000 21831 . GaAbYLBwsPQ5F7cRrjGNofI/VnpFUJUt5QLN1MTYcFYgzuxs7CG8e7tDXJ2lx4bZvMsMKOqSpJPZ 1FiJ3+WPS1wiv2DOVBc04hGzhcO7zP7BAroO0ZXReQeDkE0a4F7QsmDT4NwYTlrdNoZgDC1f++wE WqFYO6ivQgVVgZZrLjUoq22gcB+Rm189Ft/OQBSZQDy7rKCSMTIW9jHlRH9In7K0oA+FfZ3O8tlD 98cF4C1n+32BjIzDQndawFOepLI3vFcXDZ3cCHi/JNL9ww8rUATfEci07AlPfS3crYFPbU9gk2gQ MrgeaGAcz4cu+s6rw/QTlpUSgRkMXAK9q0B9mQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260118050000 20260105040000 21831 . GaAbYLBwsPQ5F7cRrjGNofI/VnpFUJUt5QLN1MTYcFYgzuxs7CG8e7tDXJ2lx4bZvMsMKOqSpJPZ 1FiJ3+WPS1wiv2DOVBc04hGzhcO7zP7BAroO0ZXReQeDkE0a4F7QsmDT4NwYTlrdNoZgDC1f++wE WqFYO6ivQgVVgZZrLjUoq22gcB+Rm189Ft/OQBSZQDy7rKCSMTIW9jHlRH9In7K0oA+FfZ3O8tlD 98cF4C1n+32BjIzDQndawFOepLI3vFcXDZ3cCHi/JNL9ww8rUATfEci07AlPfS3crYFPbU9gk2gQ MrgeaGAcz4cu+s6rw/QTlpUSgRkMXAK9q0B9mQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 61547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.GOV for DEA.GOV/A
	Received 314 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 314 octets ;; HEADER SECTION ;; id = 53805 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DEA.GOV. 10800 IN NS a1-61.akam.net. DEA.GOV. 10800 IN NS a10-66.akam.net. DEA.GOV. 10800 IN NS a12-67.akam.net. DEA.GOV. 10800 IN NS a13-64.akam.net. DEA.GOV. 10800 IN NS a7-65.akam.net. DEA.GOV. 10800 IN NS a8-66.akam.net. DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260106093504 20260104073504 35496 gov. ifm3vWE3n/FmmCsPxDRm9CL9jqEdqveExz76NpqHl8QOwSlzzfjww/NlszOVKxDaYjKUppIqMuth SlJ+18J7Ng== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for DEA.GOV/DNSKEY
	Received 314 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 314 octets ;; HEADER SECTION ;; id = 32476 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DEA.GOV. 10800 IN NS a1-61.akam.net. DEA.GOV. 10800 IN NS a10-66.akam.net. DEA.GOV. 10800 IN NS a12-67.akam.net. DEA.GOV. 10800 IN NS a13-64.akam.net. DEA.GOV. 10800 IN NS a7-65.akam.net. DEA.GOV. 10800 IN NS a8-66.akam.net. DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260106093504 20260104073504 35496 gov. Q4EnnHT+xj3uCZQflRUBb/3gNSJuOBVMs57BQkJkHcKJu1fcr9FWkGN4zJX1bl3afHu8UfgozQJZ hNRfpzRgUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone DEA.GOV

DEA.GOV

	Checking DS between GOV and DEA.GOV
	Query to d.ns.GOV for DEA.GOV/DS
	Received 183 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 183 octets ;; HEADER SECTION ;; id = 35519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN DS ;; ANSWER SECTION (2 records) DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260106093504 20260104073504 35496 gov. K01X+0quEkLyMTWxWZWv5eZvV+HhdwMHffUKfM/KeLS5c8lR6lN4bsL73JvxLvmiKRaFyPaNnx0z OLmf0EmuaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for DEA.GOV in the GOV zone
	DS=6809/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DEA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260106093504 20260104073504 35496 gov. K01X+0quEkLyMTWxWZWv5eZvV+HhdwMHffUKfM/KeLS5c8lR6lN4bsL73JvxLvmiKRaFyPaNnx0z OLmf0EmuaQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=6809/SHA-256 is now in the chain-of-trust
	`DEA.GOV. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 )`
	Query to a10-66.akam.net for DEA.GOV/DNSKEY
	Received 1474 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 1474 octets ;; HEADER SECTION ;; id = 57720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAeNWDF9cYKb3tp1sP1KYx+cdWR1GTIiAWZCmWRytFMTuycEzsXJ6Pho8UUC97szsxos/UscW ikKvE5O/x92QXWgClETRmrkTtcbVhJyHiHbS/DDTp8vC7mch1ytzez+6q4/Wc+NR5ABQiFoH4Im1 kCrD3L9stEmdxL7e6HOxrZsQi1CkfdCRWn3iewp6+VL6/yRRjMrbCY51Mt4oVD83Je1cXGzn/dEm hT92zIJVgX2rJEKdFcAlXiTF6o+IqOt0LSwCh4GPtqt0r/llp7o56MluFycmCyso2WMLeJ09mF4F NbhXYiuOfykfYQ/7+AZQHAmFvRiNccRGxQg+AjC6BAE= ) ; keytag 6809 DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAZwPqEeQab4yZvheninDHrCYftlWvnvdK+JyGe0u/uqczWYaVlwmL2egRDzh9bZtzi0HOd4C hdJY4BX8oZlfs3+LOT9nw6i18kSE171kYDK+svtv6pGvAZ/gB3aVf/nuJai/1BxJennlGUIoyNEx P893s5bGXngyhyH8L186xKPCL1QKJjS5BjWkRY7f77qoT3yacmbZEElCWlp0Y+Sc0rq9JAbH0J8u iycpgAk0Pk3AX4fiFPIal/cAwC2Oe2r7/7YswUnPFLp+DLVhbIl7SB84lO+m0aHIahpaYcIRB2e8 IplxqO4gkavwuRu8nHuL26JrMRij9SDCXVxZbC2W8ec= ) ; keytag 40447 DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAc5Uk9pKEC/og2Z61RwKE143UhWexpqXR3+akdqNguye3Lp8KPfmG+XR8O6VZoOAo7z+J/X8 wPk5mMSA+j9w7vSpu3040/sfPA3MrasfEDKjcME9LRYCkv3mXvvXBu0psMkVu9aFdmvkoZdAdH0b /EDWVlYVHsZnRqLgr1RWyHpx ) ; keytag 46944 DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAbPPSzPvTNrhUt9okuzAGWmos/j3yiEiaBwsQWGLBOsziiX0G+czAYCyj+p8gQo50du/SLgl JoSA8PSwn6w4yb0QWt32fEBeb8mmHVxJSrEZa313ajLcGadEQZU7jcgb/aupeCdqVD/a9b0u2/jG 6qlxywBIyeMrUUMYtBWTFoMv ) ; keytag 16438 DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260107154837 20260104144837 6809 dea.gov. gk/piqPMi3QuYtU33rLkHSG853NEXriIQdzO7gtiiFWoVv5AH1B3vOGrRD7xm/UaKiGDj8dTnkaM PsQbDpfgBj1tipzQCEFZ6DGZfuh1gvpdrtqk3NlCVH9s9IX4ybE7f1zzwXArd2dy20A3L9I39+Bo +Qtl0DgS6q49/p2yc0ev3EXzZ/f316CSFZwhMECBrmRaumQuH67MZRN38MBl+KdjNsd/ydVbrJUM cABNJX2ZT3d+vcczSurknWynUheb0vLQVDUy2BoRFdhknRPXjzhv7ZjwlkLRBB7ERFRfeyhyzlcf 0RnzdB6Ys7RS01Vq4nVxwN3CpVOZRn1xie95Vg== ) DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260107154837 20260104144837 40447 dea.gov. MmE2inueuh3yF6a2OqBIpwaLf0CYzgGZVGFjzrAGSN0ZlqChgXQjKimcJ7OPWjBo+Oirkm+RW4nX Z+LqHYFQicv6u5cH9GkB7XIiiEbVaYshju5uh00nki0B9KrcDOMVeLXyA4b31o1gzWSRFRQStQNH NrARDWY86JPhN2dr/08EU+M5VKywqoz4N9FH6dZucl6TIH/H5qJt/2xniqWrGFQnv7z9D/MD86ta 83xrUOHIKNCBooJrPJ6Rbtm6DYQASHtLLw9i7SdKsq1597MO9VInIlfgUTgM8bsH9UWTLwYFEG0S 0uCCDuT/L4PpclXvCnn01P3XW6qMmZey2ZdnYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for DEA.GOV
	`DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAeNWDF9cYKb3tp1sP1KYx+cdWR1GTIiAWZCmWRytFMTuycEzsXJ6Pho8UUC97szsxos/UscW ikKvE5O/x92QXWgClETRmrkTtcbVhJyHiHbS/DDTp8vC7mch1ytzez+6q4/Wc+NR5ABQiFoH4Im1 kCrD3L9stEmdxL7e6HOxrZsQi1CkfdCRWn3iewp6+VL6/yRRjMrbCY51Mt4oVD83Je1cXGzn/dEm hT92zIJVgX2rJEKdFcAlXiTF6o+IqOt0LSwCh4GPtqt0r/llp7o56MluFycmCyso2WMLeJ09mF4F NbhXYiuOfykfYQ/7+AZQHAmFvRiNccRGxQg+AjC6BAE= ) ; keytag 6809`
	`DEA.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAZwPqEeQab4yZvheninDHrCYftlWvnvdK+JyGe0u/uqczWYaVlwmL2egRDzh9bZtzi0HOd4C hdJY4BX8oZlfs3+LOT9nw6i18kSE171kYDK+svtv6pGvAZ/gB3aVf/nuJai/1BxJennlGUIoyNEx P893s5bGXngyhyH8L186xKPCL1QKJjS5BjWkRY7f77qoT3yacmbZEElCWlp0Y+Sc0rq9JAbH0J8u iycpgAk0Pk3AX4fiFPIal/cAwC2Oe2r7/7YswUnPFLp+DLVhbIl7SB84lO+m0aHIahpaYcIRB2e8 IplxqO4gkavwuRu8nHuL26JrMRij9SDCXVxZbC2W8ec= ) ; keytag 40447`
	`DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAc5Uk9pKEC/og2Z61RwKE143UhWexpqXR3+akdqNguye3Lp8KPfmG+XR8O6VZoOAo7z+J/X8 wPk5mMSA+j9w7vSpu3040/sfPA3MrasfEDKjcME9LRYCkv3mXvvXBu0psMkVu9aFdmvkoZdAdH0b /EDWVlYVHsZnRqLgr1RWyHpx ) ; keytag 46944`
	`DEA.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAbPPSzPvTNrhUt9okuzAGWmos/j3yiEiaBwsQWGLBOsziiX0G+czAYCyj+p8gQo50du/SLgl JoSA8PSwn6w4yb0QWt32fEBeb8mmHVxJSrEZa313ajLcGadEQZU7jcgb/aupeCdqVD/a9b0u2/jG 6qlxywBIyeMrUUMYtBWTFoMv ) ; keytag 16438`
	DNSKEY=6809/SEP is now in the chain-of-trust
	DS=6809/SHA-256 verifies DNSKEY=6809/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260107154837 20260104144837 6809 dea.gov. gk/piqPMi3QuYtU33rLkHSG853NEXriIQdzO7gtiiFWoVv5AH1B3vOGrRD7xm/UaKiGDj8dTnkaM PsQbDpfgBj1tipzQCEFZ6DGZfuh1gvpdrtqk3NlCVH9s9IX4ybE7f1zzwXArd2dy20A3L9I39+Bo +Qtl0DgS6q49/p2yc0ev3EXzZ/f316CSFZwhMECBrmRaumQuH67MZRN38MBl+KdjNsd/ydVbrJUM cABNJX2ZT3d+vcczSurknWynUheb0vLQVDUy2BoRFdhknRPXjzhv7ZjwlkLRBB7ERFRfeyhyzlcf 0RnzdB6Ys7RS01Vq4nVxwN3CpVOZRn1xie95Vg== )`
	`DEA.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260107154837 20260104144837 40447 dea.gov. MmE2inueuh3yF6a2OqBIpwaLf0CYzgGZVGFjzrAGSN0ZlqChgXQjKimcJ7OPWjBo+Oirkm+RW4nX Z+LqHYFQicv6u5cH9GkB7XIiiEbVaYshju5uh00nki0B9KrcDOMVeLXyA4b31o1gzWSRFRQStQNH NrARDWY86JPhN2dr/08EU+M5VKywqoz4N9FH6dZucl6TIH/H5qJt/2xniqWrGFQnv7z9D/MD86ta 83xrUOHIKNCBooJrPJ6Rbtm6DYQASHtLLw9i7SdKsq1597MO9VInIlfgUTgM8bsH9UWTLwYFEG0S 0uCCDuT/L4PpclXvCnn01P3XW6qMmZey2ZdnYg== )`
	RRSIG=6809 and DNSKEY=6809/SEP verifies the DNSKEY RRset
	RRSIG=40447 and DNSKEY=40447/SEP verifies the DNSKEY RRset
	DNSKEY=40447/SEP is now in the chain-of-trust
	DNSKEY=46944 is now in the chain-of-trust
	DNSKEY=16438 is now in the chain-of-trust
	Query to a7-65.akam.net for DEA.GOV/A
	Received 219 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 219 octets ;; HEADER SECTION ;; id = 58462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-65.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a10-66.akam.net for DEA.GOV/SOA
	Received 558 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 558 octets ;; HEADER SECTION ;; id = 29490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207471 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260107154837 20260104144837 46944 dea.gov. usUaFaDYFeB1eAA1cCSRs/HEzem+nz8Q/ocNaY1UZ/WJr1JL7h6oVqtkDy1IXPPn/KePl7wJ2fwU FUqqtdO1bEhWSGQy3rCTh1SbERWU5BdhGIj3gFy79v5CZdhiP5dbNYskNpWvRRDMLZ6xILrAC64q 1NoMjrhU9VTwU1xHEIA= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260107154837 20260104144837 46944 dea.gov. IejKShy6BB5eHvwRL4tX3DHfFcoO4UJN0q5p2L6B5x1OddrIjXieWMWjG5BzYzLy26CWn0SohTcI X83hVl2Rd26gFhoRqeqcL4i0ku8QUFzx3EfcePjC1LJOUCX7gu8NTUCTuNjUkPR+aiKKSgBnuOaT Z4gE2Rdr8pDOj/R5CfM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-61.akam.net for DEA.GOV/SOA
	Received 558 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 558 octets ;; HEADER SECTION ;; id = 37575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207471 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260107154837 20260104144837 46944 dea.gov. usUaFaDYFeB1eAA1cCSRs/HEzem+nz8Q/ocNaY1UZ/WJr1JL7h6oVqtkDy1IXPPn/KePl7wJ2fwU FUqqtdO1bEhWSGQy3rCTh1SbERWU5BdhGIj3gFy79v5CZdhiP5dbNYskNpWvRRDMLZ6xILrAC64q 1NoMjrhU9VTwU1xHEIA= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260107154837 20260104144837 46944 dea.gov. IejKShy6BB5eHvwRL4tX3DHfFcoO4UJN0q5p2L6B5x1OddrIjXieWMWjG5BzYzLy26CWn0SohTcI X83hVl2Rd26gFhoRqeqcL4i0ku8QUFzx3EfcePjC1LJOUCX7gu8NTUCTuNjUkPR+aiKKSgBnuOaT Z4gE2Rdr8pDOj/R5CfM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a13-64.akam.net for DEA.GOV/SOA
	Received 558 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 558 octets ;; HEADER SECTION ;; id = 38976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207471 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260107154837 20260104144837 46944 dea.gov. usUaFaDYFeB1eAA1cCSRs/HEzem+nz8Q/ocNaY1UZ/WJr1JL7h6oVqtkDy1IXPPn/KePl7wJ2fwU FUqqtdO1bEhWSGQy3rCTh1SbERWU5BdhGIj3gFy79v5CZdhiP5dbNYskNpWvRRDMLZ6xILrAC64q 1NoMjrhU9VTwU1xHEIA= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260107154837 20260104144837 46944 dea.gov. IejKShy6BB5eHvwRL4tX3DHfFcoO4UJN0q5p2L6B5x1OddrIjXieWMWjG5BzYzLy26CWn0SohTcI X83hVl2Rd26gFhoRqeqcL4i0ku8QUFzx3EfcePjC1LJOUCX7gu8NTUCTuNjUkPR+aiKKSgBnuOaT Z4gE2Rdr8pDOj/R5CfM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-67.akam.net for DEA.GOV/SOA
	Received 558 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 558 octets ;; HEADER SECTION ;; id = 34208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207471 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260107154837 20260104144837 46944 dea.gov. usUaFaDYFeB1eAA1cCSRs/HEzem+nz8Q/ocNaY1UZ/WJr1JL7h6oVqtkDy1IXPPn/KePl7wJ2fwU FUqqtdO1bEhWSGQy3rCTh1SbERWU5BdhGIj3gFy79v5CZdhiP5dbNYskNpWvRRDMLZ6xILrAC64q 1NoMjrhU9VTwU1xHEIA= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260107154837 20260104144837 46944 dea.gov. IejKShy6BB5eHvwRL4tX3DHfFcoO4UJN0q5p2L6B5x1OddrIjXieWMWjG5BzYzLy26CWn0SohTcI X83hVl2Rd26gFhoRqeqcL4i0ku8QUFzx3EfcePjC1LJOUCX7gu8NTUCTuNjUkPR+aiKKSgBnuOaT Z4gE2Rdr8pDOj/R5CfM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-66.akam.net for DEA.GOV/SOA
	Received 558 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 558 octets ;; HEADER SECTION ;; id = 41237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN SOA ;; ANSWER SECTION (2 records) DEA.GOV. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207471 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) DEA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260107154837 20260104144837 46944 dea.gov. usUaFaDYFeB1eAA1cCSRs/HEzem+nz8Q/ocNaY1UZ/WJr1JL7h6oVqtkDy1IXPPn/KePl7wJ2fwU FUqqtdO1bEhWSGQy3rCTh1SbERWU5BdhGIj3gFy79v5CZdhiP5dbNYskNpWvRRDMLZ6xILrAC64q 1NoMjrhU9VTwU1xHEIA= ) ;; AUTHORITY SECTION (7 records) DEA.GOV. 86400 IN NS a10-66.akam.net. DEA.GOV. 86400 IN NS a13-64.akam.net. DEA.GOV. 86400 IN NS a7-65.akam.net. DEA.GOV. 86400 IN NS a12-67.akam.net. DEA.GOV. 86400 IN NS a1-61.akam.net. DEA.GOV. 86400 IN NS a8-66.akam.net. DEA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260107154837 20260104144837 46944 dea.gov. IejKShy6BB5eHvwRL4tX3DHfFcoO4UJN0q5p2L6B5x1OddrIjXieWMWjG5BzYzLy26CWn0SohTcI X83hVl2Rd26gFhoRqeqcL4i0ku8QUFzx3EfcePjC1LJOUCX7gu8NTUCTuNjUkPR+aiKKSgBnuOaT Z4gE2Rdr8pDOj/R5CfM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-65.akam.net for DEA.GOV/A
	Received 219 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 219 octets ;; HEADER SECTION ;; id = 27819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 104.100.61.189
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= )`
	RRSIG=46944 and DNSKEY=46944 verifies the A RRset

DEA.GOV

	Query to a1-61.akam.net for DEA.GOV/A
	Received 219 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 219 octets ;; HEADER SECTION ;; id = 35410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-61.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a1-61.akam.net for DEA.GOV/A
	Received 219 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 219 octets ;; HEADER SECTION ;; id = 6647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 104.100.61.189
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= )`
	RRSIG=46944 and DNSKEY=46944 verifies the A RRset

DEA.GOV

	Query to a12-67.akam.net for DEA.GOV/A
	Received 219 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 219 octets ;; HEADER SECTION ;; id = 46404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 184.24.55.68 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. hWIn4XDhcTTfG9d+dxBhOkvYp4neiTtRVF3JqQd/lS62w0ukHR0Li+vCcyYZj6RkPhP9/Rxnh0uP yIDBybE+774ELgUdDIPeWoSnqRc7HECJaAKNfHL1bgF5KZnSXELXN0w7RCkgbK3uqwVer9bmg6Xd kW9CCHJR2+7RbnPDZCk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-67.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a12-67.akam.net for DEA.GOV/A
	Received 219 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 219 octets ;; HEADER SECTION ;; id = 21467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 184.24.55.68 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. hWIn4XDhcTTfG9d+dxBhOkvYp4neiTtRVF3JqQd/lS62w0ukHR0Li+vCcyYZj6RkPhP9/Rxnh0uP yIDBybE+774ELgUdDIPeWoSnqRc7HECJaAKNfHL1bgF5KZnSXELXN0w7RCkgbK3uqwVer9bmg6Xd kW9CCHJR2+7RbnPDZCk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 184.24.55.68
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. hWIn4XDhcTTfG9d+dxBhOkvYp4neiTtRVF3JqQd/lS62w0ukHR0Li+vCcyYZj6RkPhP9/Rxnh0uP yIDBybE+774ELgUdDIPeWoSnqRc7HECJaAKNfHL1bgF5KZnSXELXN0w7RCkgbK3uqwVer9bmg6Xd kW9CCHJR2+7RbnPDZCk= )`
	RRSIG=46944 and DNSKEY=46944 verifies the A RRset

DEA.GOV

	Query to a8-66.akam.net for DEA.GOV/A
	Received 219 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 219 octets ;; HEADER SECTION ;; id = 64651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 173.222.215.76 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. dBfT+NErTB3BpAeruOHMHine9L34Q4GVPMXQhGCrmOFSIuuhshRMdF8rX3SbTayIk5Cq+5e3dN43 YQZnLfTVwUxAVEa7ejZUKmac9d3tiIEym/ijrqwewiStJiLEwdYMYGYQ8bfRHWvfB+tf/7QsJ8XL WkVOiAi/SYx3sjJhKAQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-66.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a8-66.akam.net for DEA.GOV/A
	Received 219 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 219 octets ;; HEADER SECTION ;; id = 63648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 173.222.215.76 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. dBfT+NErTB3BpAeruOHMHine9L34Q4GVPMXQhGCrmOFSIuuhshRMdF8rX3SbTayIk5Cq+5e3dN43 YQZnLfTVwUxAVEa7ejZUKmac9d3tiIEym/ijrqwewiStJiLEwdYMYGYQ8bfRHWvfB+tf/7QsJ8XL WkVOiAi/SYx3sjJhKAQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 173.222.215.76
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. dBfT+NErTB3BpAeruOHMHine9L34Q4GVPMXQhGCrmOFSIuuhshRMdF8rX3SbTayIk5Cq+5e3dN43 YQZnLfTVwUxAVEa7ejZUKmac9d3tiIEym/ijrqwewiStJiLEwdYMYGYQ8bfRHWvfB+tf/7QsJ8XL WkVOiAi/SYx3sjJhKAQ= )`
	RRSIG=46944 and DNSKEY=46944 verifies the A RRset

DEA.GOV

	Query to a13-64.akam.net for DEA.GOV/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 40070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a13-64.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a13-64.akam.net for DEA.GOV/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 13273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 104.100.61.189 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 104.100.61.189
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. s8DCuxqQz6w9BdgjxHBWv56vBU6hxcxzJil5mGb7uvn8H+0CLjv9sP+6Is/B/tPsZxjzaqGiFfUd CNUKCBzquaUVwUiyrxEw5JpcXONgTLvZUJIVRnQh/im9XYF5eiwwDSRD+bN6bM3GakyYjxs8g/du BS1PeE3iUt4fnh8m+P0= )`
	RRSIG=46944 and DNSKEY=46944 verifies the A RRset

DEA.GOV

	Query to a10-66.akam.net for DEA.GOV/A
	Received 219 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 219 octets ;; HEADER SECTION ;; id = 24275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 23.194.156.132 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. GLhTvH7HujKHWogQ0zXYmYpLu2Ewnp0M1+ztV5pSiEi2z2RSJKLc/pDSBQqvypbJihFCsfi+WQAo vIUsaAn8b47bZU2+8NRI0nuXw37NbypKmZklNRABkWVaTSmAmt0tSyCF1HL4vGZp6GMSL9x0GCGd PnMjSNWDwmRdKiry7D4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-66.akam.net is authoritative for DEA.GOV
	Found RRSIG signed by dea.gov zone
	Query to a10-66.akam.net for DEA.GOV/A
	Received 219 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 219 octets ;; HEADER SECTION ;; id = 32900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEA.GOV. IN A ;; ANSWER SECTION (2 records) DEA.GOV. 20 IN A 23.194.156.132 DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. GLhTvH7HujKHWogQ0zXYmYpLu2Ewnp0M1+ztV5pSiEi2z2RSJKLc/pDSBQqvypbJihFCsfi+WQAo vIUsaAn8b47bZU2+8NRI0nuXw37NbypKmZklNRABkWVaTSmAmt0tSyCF1HL4vGZp6GMSL9x0GCGd PnMjSNWDwmRdKiry7D4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DEA.GOV A RR has value 23.194.156.132
	Found 1 RRSIGs over A RRset
	`DEA.GOV. 20 IN RRSIG ( A 8 2 20 20260107154837 20260104144837 46944 dea.gov. GLhTvH7HujKHWogQ0zXYmYpLu2Ewnp0M1+ztV5pSiEi2z2RSJKLc/pDSBQqvypbJihFCsfi+WQAo vIUsaAn8b47bZU2+8NRI0nuXw37NbypKmZklNRABkWVaTSmAmt0tSyCF1HL4vGZp6GMSL9x0GCGd PnMjSNWDwmRdKiry7D4= )`
	RRSIG=46944 and DNSKEY=46944 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DEA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: