DNSSEC Analyzer - DEFENSE.GOV

Domain Name:

Time: 2021-05-17 22:37:47 UTC, NTP stratum 4

Analyzing DNSSEC problems for DEFENSE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 58952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to a.root-servers.net for DEFENSE.GOV/A
	Received 630 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (630 bytes) ;; HEADER SECTION ;; id = 43517 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (622 bytes) ;; HEADER SECTION ;; id = 15706 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 367 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (367 bytes) ;; HEADER SECTION ;; id = 45575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 59652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for DEFENSE.GOV/A
	Received 486 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (486 bytes) ;; HEADER SECTION ;; id = 33901 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) DEFENSE.GOV. 86400 IN NS ns1-95.akam.net. DEFENSE.GOV. 86400 IN NS asia2.akam.net. DEFENSE.GOV. 86400 IN NS use2.akam.net. DEFENSE.GOV. 86400 IN NS eur6.akam.net. DEFENSE.GOV. 86400 IN NS ns1-116.akam.net. DEFENSE.GOV. 86400 IN NS asia3.akam.net. DEFENSE.GOV. 86400 IN NS use9.akam.net. DEFENSE.GOV. 86400 IN NS usc5.akam.net. DEFENSE.GOV. 3600 IN DS 46209 7 1 94b47edfa15fdd3682fe5b5bf16d368782a16cd8 DEFENSE.GOV. 3600 IN DS ( 46209 7 2 c550e4dc04b006abe25ab48b9becd53b2360ed4c82d51e921632fc94cf5cc4a3 ) DEFENSE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SUJM2ZdjbUZM2/mrlqILGYU7DPrcgTXEP2GOJsL7mvq7JP5btXHEJ/i2z4wtgim3vcFW6MCAGfE3 wtcSbtNMbsFezZWwMcTuz6EGN3BDmkl6CIY09bF7UcUSrr81XVL+GnaS83pgJk7DgM/3I2pCTXqA 8KHWYCyE4HECRDu64qYWSd24UQoSQHy9F6XA9g0aeIi/8QPGeZgbLT5QN2cQKA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for DEFENSE.GOV/DNSKEY
	Received 486 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (486 bytes) ;; HEADER SECTION ;; id = 12130 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) DEFENSE.GOV. 86400 IN NS ns1-95.akam.net. DEFENSE.GOV. 86400 IN NS asia2.akam.net. DEFENSE.GOV. 86400 IN NS use2.akam.net. DEFENSE.GOV. 86400 IN NS eur6.akam.net. DEFENSE.GOV. 86400 IN NS ns1-116.akam.net. DEFENSE.GOV. 86400 IN NS asia3.akam.net. DEFENSE.GOV. 86400 IN NS use9.akam.net. DEFENSE.GOV. 86400 IN NS usc5.akam.net. DEFENSE.GOV. 3600 IN DS 46209 7 1 94b47edfa15fdd3682fe5b5bf16d368782a16cd8 DEFENSE.GOV. 3600 IN DS ( 46209 7 2 c550e4dc04b006abe25ab48b9becd53b2360ed4c82d51e921632fc94cf5cc4a3 ) DEFENSE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SUJM2ZdjbUZM2/mrlqILGYU7DPrcgTXEP2GOJsL7mvq7JP5btXHEJ/i2z4wtgim3vcFW6MCAGfE3 wtcSbtNMbsFezZWwMcTuz6EGN3BDmkl6CIY09bF7UcUSrr81XVL+GnaS83pgJk7DgM/3I2pCTXqA 8KHWYCyE4HECRDu64qYWSd24UQoSQHy9F6XA9g0aeIi/8QPGeZgbLT5QN2cQKA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone DEFENSE.GOV

DEFENSE.GOV

	Checking DS between GOV and DEFENSE.GOV
	Query to a.gov-servers.net for DEFENSE.GOV/DS
	Received 319 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (319 bytes) ;; HEADER SECTION ;; id = 25146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN DS ;; ANSWER SECTION (3 records) DEFENSE.GOV. 3600 IN DS 46209 7 1 94b47edfa15fdd3682fe5b5bf16d368782a16cd8 DEFENSE.GOV. 3600 IN DS ( 46209 7 2 c550e4dc04b006abe25ab48b9becd53b2360ed4c82d51e921632fc94cf5cc4a3 ) DEFENSE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SUJM2ZdjbUZM2/mrlqILGYU7DPrcgTXEP2GOJsL7mvq7JP5btXHEJ/i2z4wtgim3vcFW6MCAGfE3 wtcSbtNMbsFezZWwMcTuz6EGN3BDmkl6CIY09bF7UcUSrr81XVL+GnaS83pgJk7DgM/3I2pCTXqA 8KHWYCyE4HECRDu64qYWSd24UQoSQHy9F6XA9g0aeIi/8QPGeZgbLT5QN2cQKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for DEFENSE.GOV in the GOV zone
	DS=46209/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=46209/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`DEFENSE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SUJM2ZdjbUZM2/mrlqILGYU7DPrcgTXEP2GOJsL7mvq7JP5btXHEJ/i2z4wtgim3vcFW6MCAGfE3 wtcSbtNMbsFezZWwMcTuz6EGN3BDmkl6CIY09bF7UcUSrr81XVL+GnaS83pgJk7DgM/3I2pCTXqA 8KHWYCyE4HECRDu64qYWSd24UQoSQHy9F6XA9g0aeIi/8QPGeZgbLT5QN2cQKA== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=46209/SHA-1 is now in the chain-of-trust
	`DEFENSE.GOV. 3600 IN DS 46209 7 1 94b47edfa15fdd3682fe5b5bf16d368782a16cd8`
	`DEFENSE.GOV. 3600 IN DS ( 46209 7 2 c550e4dc04b006abe25ab48b9becd53b2360ed4c82d51e921632fc94cf5cc4a3 )`
	Query to asia3.akam.net for DEFENSE.GOV/DNSKEY
	Received 911 bytes from 23.211.61.64
	;; Answer received from 23.211.61.64 (911 bytes) ;; HEADER SECTION ;; id = 58599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) DEFENSE.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAd8wYCE6u1ck9WFcNgJiGL4sJbRm53Wkw2NgAQvlwZ2M1hf7q3Dn0Z/MMAdrqX4F8I9KiZeQ WYeTlRrI37HNNuE03HBnaAFXM3XOl/K/QPXRmB47dDN7dswUmOETblqzEPWldrThwuCsZsaTBVlf dmaVUU0SrOBLqtVizZ+r01MR ) ; Key ID = 55728 DEFENSE.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAdcGPOj0YNKVfNE2sdzCuL0WX213n4gq4niyVk/1D1GkDWfMXLzWQLbl9XW6QvDPdTwWj9rO PQR9lZUjeqT84HvUWpIqiBZOSrDyUmV7vy5CQf1Pu1ChY7rQzq9RUEkw3oS1hdyU3kUOR9+Vy+Qo yg2BjMz7MigKcxHLJJdTB9rv ) ; Key ID = 17150 DEFENSE.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAce+V7Ci+paqRwPCm+tv/16TfdJU6UDcWJChJg+BZGdHdrOT23b1T51zgtKSDBXU9y47Vpil DI2iffBOZY5KjhNEFmCect86GGFPjfXaQdw5NczurChNa8/IFeDa/GnNmftu/8jeA3dtFInEjvUK bxDtnhBFAK1CO9vH9S4eEhZLvyGt72gDJL1nK0VavQ9bU83B9ZdcRJawgstY6Xv1Mn0URM9cRDRK sxycorJu9+qW5XniN+RKGMIW210e3y8Mj73O5PWwyPkG57mcm2s3QkPxPWTZu9oGsPkYLDBfvEq0 5B10/kU6TIqwlh/GK+cBMQsyEJiaXvWrJqgXOinj8/8= ) ; Key ID = 46209 DEFENSE.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20210520032907 20210517022907 46209 defense.gov. vWcJkygcai5D/TyJbFZj6JKUJ/XWcAiZIGOpy8KUdcOUKCZ3Lhub9TSRS3jWQmjm0dgrSCpvGs2E MSmuo0O0W3iZvN593y0SCHcwGJkz1bblf0sY3asEx16+FPO5gd+1tmnrJaQ/odhbVDQ8ujy1/nxR E60BrFCrgND+sfCQ+pQFbNButdjp0PbqCbrFWYvTWVma5l9hsv4RLF8ZkzHfR46XW58jDb3i0820 Yg3Xs2aaW/Q+OagiGHFOig3ZSK4P1kHJgElFhanZ4kaEo5/3i/lXF/1w4C+Nc+USIwcD7NnsRTZm onOy2PC9nDebJNVp61AiQY3UFKobDhVXSpq1GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for DEFENSE.GOV
	`DEFENSE.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAd8wYCE6u1ck9WFcNgJiGL4sJbRm53Wkw2NgAQvlwZ2M1hf7q3Dn0Z/MMAdrqX4F8I9KiZeQ WYeTlRrI37HNNuE03HBnaAFXM3XOl/K/QPXRmB47dDN7dswUmOETblqzEPWldrThwuCsZsaTBVlf dmaVUU0SrOBLqtVizZ+r01MR ) ; Key ID = 55728`
	`DEFENSE.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAdcGPOj0YNKVfNE2sdzCuL0WX213n4gq4niyVk/1D1GkDWfMXLzWQLbl9XW6QvDPdTwWj9rO PQR9lZUjeqT84HvUWpIqiBZOSrDyUmV7vy5CQf1Pu1ChY7rQzq9RUEkw3oS1hdyU3kUOR9+Vy+Qo yg2BjMz7MigKcxHLJJdTB9rv ) ; Key ID = 17150`
	`DEFENSE.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAce+V7Ci+paqRwPCm+tv/16TfdJU6UDcWJChJg+BZGdHdrOT23b1T51zgtKSDBXU9y47Vpil DI2iffBOZY5KjhNEFmCect86GGFPjfXaQdw5NczurChNa8/IFeDa/GnNmftu/8jeA3dtFInEjvUK bxDtnhBFAK1CO9vH9S4eEhZLvyGt72gDJL1nK0VavQ9bU83B9ZdcRJawgstY6Xv1Mn0URM9cRDRK sxycorJu9+qW5XniN+RKGMIW210e3y8Mj73O5PWwyPkG57mcm2s3QkPxPWTZu9oGsPkYLDBfvEq0 5B10/kU6TIqwlh/GK+cBMQsyEJiaXvWrJqgXOinj8/8= ) ; Key ID = 46209`
	DNSKEY=46209/SEP is now in the chain-of-trust
	DS=46209/SHA-1 verifies DNSKEY=46209/SEP
	DS=46209/SHA-256 verifies DNSKEY=46209/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`DEFENSE.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20210520032907 20210517022907 46209 defense.gov. vWcJkygcai5D/TyJbFZj6JKUJ/XWcAiZIGOpy8KUdcOUKCZ3Lhub9TSRS3jWQmjm0dgrSCpvGs2E MSmuo0O0W3iZvN593y0SCHcwGJkz1bblf0sY3asEx16+FPO5gd+1tmnrJaQ/odhbVDQ8ujy1/nxR E60BrFCrgND+sfCQ+pQFbNButdjp0PbqCbrFWYvTWVma5l9hsv4RLF8ZkzHfR46XW58jDb3i0820 Yg3Xs2aaW/Q+OagiGHFOig3ZSK4P1kHJgElFhanZ4kaEo5/3i/lXF/1w4C+Nc+USIwcD7NnsRTZm onOy2PC9nDebJNVp61AiQY3UFKobDhVXSpq1GQ== )`
	RRSIG=46209 and DNSKEY=46209/SEP verifies the DNSKEY RRset
	DNSKEY=55728 is now in the chain-of-trust
	DNSKEY=17150 is now in the chain-of-trust
	Query to ns1-95.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 193.108.91.95
	;; Answer received from 193.108.91.95 (227 bytes) ;; HEADER SECTION ;; id = 27977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.109.60.81 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. KjPR5xsQ9vJg7ihFEbT3mIpiEYqXFC47J7oH5M4fYzXF9ubDXTrCkkRIlM9dvefLdMiAa4sYiEQ/ Xrk9lZWwvDVXHJX/QXLO+iAGSgodLWB8KJFuiKGMBencOabZiR7lMCQ/urZbzv895qExeVVDwPvK DUOQS8Q3tGWC+iGtnPY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1-95.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to usc5.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 96.7.50.65
	;; Answer received from 96.7.50.65 (602 bytes) ;; HEADER SECTION ;; id = 15856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to asia3.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 23.211.61.64
	;; Answer received from 23.211.61.64 (602 bytes) ;; HEADER SECTION ;; id = 64085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-116.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 193.108.91.116
	;; Answer received from 193.108.91.116 (602 bytes) ;; HEADER SECTION ;; id = 58842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to asia2.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 95.101.36.64
	;; Answer received from 95.101.36.64 (602 bytes) ;; HEADER SECTION ;; id = 45970 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur6.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 2.22.230.64
	;; Answer received from 2.22.230.64 (602 bytes) ;; HEADER SECTION ;; id = 22966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to use2.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 96.7.49.64
	;; Answer received from 96.7.49.64 (602 bytes) ;; HEADER SECTION ;; id = 50632 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to use9.akam.net for DEFENSE.GOV/SOA
	Received 602 bytes from 72.246.46.65
	;; Answer received from 72.246.46.65 (602 bytes) ;; HEADER SECTION ;; id = 35237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN SOA ;; ANSWER SECTION (2 records) DEFENSE.GOV. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726325 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) DEFENSE.GOV. 300 IN RRSIG ( SOA 7 2 300 20210520032907 20210517022907 17150 defense.gov. Q4D4uxN0Wt6DKze41iQUoOQtVOTv7ByuM6BUK+4dgA5a5sNHDkz4LW0V237AHNzNa8W6Hv65kWeh w8tAVm4Irlmf0H63keKhSqCVISefil17gKTQcSSaxzgvXGvWMaaygbnPu9MLXcurpBdyfOcw3mJI Ib3QgO1G9OAoPQ34X+0= ) ;; AUTHORITY SECTION (9 records) DEFENSE.GOV. 300 IN NS usc5.akam.net. DEFENSE.GOV. 300 IN NS use2.akam.net. DEFENSE.GOV. 300 IN NS eur6.akam.net. DEFENSE.GOV. 300 IN NS asia3.akam.net. DEFENSE.GOV. 300 IN NS asia2.akam.net. DEFENSE.GOV. 300 IN NS ns1-116.akam.net. DEFENSE.GOV. 300 IN NS ns1-95.akam.net. DEFENSE.GOV. 300 IN NS use9.akam.net. DEFENSE.GOV. 300 IN RRSIG ( NS 7 2 300 20210520032907 20210517022907 17150 defense.gov. eGFOenpf03dowSy0MtY0JtxIm5CW3Szwo0NNf8TzGBTLWisW6zzM/yYXeP5fFjmGUNl1D+Ra6qRa OfEecG9SVZlbEve8HWBQaBpt2PLXNHb82Fg8IKKtfLV1tIiGWlJrdYJhhj6HSyNJsOct9Vjg5jeE +yyWiQdBjwPrRBn9/Bw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-95.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 193.108.91.95
	;; Answer received from 193.108.91.95 (227 bytes) ;; HEADER SECTION ;; id = 12515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.109.60.81 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. KjPR5xsQ9vJg7ihFEbT3mIpiEYqXFC47J7oH5M4fYzXF9ubDXTrCkkRIlM9dvefLdMiAa4sYiEQ/ Xrk9lZWwvDVXHJX/QXLO+iAGSgodLWB8KJFuiKGMBencOabZiR7lMCQ/urZbzv895qExeVVDwPvK DUOQS8Q3tGWC+iGtnPY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 104.109.60.81
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. KjPR5xsQ9vJg7ihFEbT3mIpiEYqXFC47J7oH5M4fYzXF9ubDXTrCkkRIlM9dvefLdMiAa4sYiEQ/ Xrk9lZWwvDVXHJX/QXLO+iAGSgodLWB8KJFuiKGMBencOabZiR7lMCQ/urZbzv895qExeVVDwPvK DUOQS8Q3tGWC+iGtnPY= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to asia2.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 95.101.36.64
	;; Answer received from 95.101.36.64 (227 bytes) ;; HEADER SECTION ;; id = 12245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.73.255.120 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. T35pxgSuMI8exqhYvlh6ZUIyznW6cSPdpeEK2+0zEqhUhzRwJOB0Cy+z907yGBwBfu8CZUF/Fldt q423TxV3r1wZPX6S76/a5yzYNXlH4klruB+0V1KRX7MpTEorE8tm444GQ4dp7rzZi/y6UkhtEup6 oty/cR4VrKLyLS/T2ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	asia2.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to asia2.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 95.101.36.64
	;; Answer received from 95.101.36.64 (227 bytes) ;; HEADER SECTION ;; id = 54197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.73.255.120 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. T35pxgSuMI8exqhYvlh6ZUIyznW6cSPdpeEK2+0zEqhUhzRwJOB0Cy+z907yGBwBfu8CZUF/Fldt q423TxV3r1wZPX6S76/a5yzYNXlH4klruB+0V1KRX7MpTEorE8tm444GQ4dp7rzZi/y6UkhtEup6 oty/cR4VrKLyLS/T2ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 23.73.255.120
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. T35pxgSuMI8exqhYvlh6ZUIyznW6cSPdpeEK2+0zEqhUhzRwJOB0Cy+z907yGBwBfu8CZUF/Fldt q423TxV3r1wZPX6S76/a5yzYNXlH4klruB+0V1KRX7MpTEorE8tm444GQ4dp7rzZi/y6UkhtEup6 oty/cR4VrKLyLS/T2ds= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to use2.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 96.7.49.64
	;; Answer received from 96.7.49.64 (227 bytes) ;; HEADER SECTION ;; id = 8440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.208.46.128 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. Y6l3ow1m1hA4nOe1QZLpNozalgt706Df8ZzG6ZaZH70OzAs+AWL6E6GX+iQ4fGVrdri/6kqFzGCx A8h2gmSUAMAHkJb67qhvgKEYgstKE7mhhyeldcIzSJPiV9w9c8saRefPfVUoL1z1H/0Wr2dlMwSx BXkFsAd6z0bXpOo4t8I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	use2.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to use2.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 96.7.49.64
	;; Answer received from 96.7.49.64 (227 bytes) ;; HEADER SECTION ;; id = 31623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.208.46.128 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. Y6l3ow1m1hA4nOe1QZLpNozalgt706Df8ZzG6ZaZH70OzAs+AWL6E6GX+iQ4fGVrdri/6kqFzGCx A8h2gmSUAMAHkJb67qhvgKEYgstKE7mhhyeldcIzSJPiV9w9c8saRefPfVUoL1z1H/0Wr2dlMwSx BXkFsAd6z0bXpOo4t8I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 23.208.46.128
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. Y6l3ow1m1hA4nOe1QZLpNozalgt706Df8ZzG6ZaZH70OzAs+AWL6E6GX+iQ4fGVrdri/6kqFzGCx A8h2gmSUAMAHkJb67qhvgKEYgstKE7mhhyeldcIzSJPiV9w9c8saRefPfVUoL1z1H/0Wr2dlMwSx BXkFsAd6z0bXpOo4t8I= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to usc5.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 96.7.50.65
	;; Answer received from 96.7.50.65 (227 bytes) ;; HEADER SECTION ;; id = 58461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.66.80.154 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. JXARDWZdBXb7cmT9E6ComEBhB1HLo6G05jGcaLoNFAIkatA+Ih7Pk/dOkI2eFSCpxUS+oNziZpna C2YhsyO/KJWve0CYY3DGNxCxHAkTloamMQ8uFGhhQEyEYzby3tz2SUlQ2aUX0PAWV0+AB1D4aRXJ i0NotDusALyRUx78vy8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	usc5.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to usc5.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 96.7.50.65
	;; Answer received from 96.7.50.65 (227 bytes) ;; HEADER SECTION ;; id = 22466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.66.80.154 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. JXARDWZdBXb7cmT9E6ComEBhB1HLo6G05jGcaLoNFAIkatA+Ih7Pk/dOkI2eFSCpxUS+oNziZpna C2YhsyO/KJWve0CYY3DGNxCxHAkTloamMQ8uFGhhQEyEYzby3tz2SUlQ2aUX0PAWV0+AB1D4aRXJ i0NotDusALyRUx78vy8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 23.66.80.154
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. JXARDWZdBXb7cmT9E6ComEBhB1HLo6G05jGcaLoNFAIkatA+Ih7Pk/dOkI2eFSCpxUS+oNziZpna C2YhsyO/KJWve0CYY3DGNxCxHAkTloamMQ8uFGhhQEyEYzby3tz2SUlQ2aUX0PAWV0+AB1D4aRXJ i0NotDusALyRUx78vy8= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to eur6.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 2.22.230.64
	;; Answer received from 2.22.230.64 (227 bytes) ;; HEADER SECTION ;; id = 16722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.104.126.61 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. G21pooBYaYbcOzkv/rRcLHwtbrQr852PYn65K5jkyqCZHv8eJUckQGX4ABLsnM6il98gc/qR1w4b KupVAa8mhkkjlf/hhb7kU62a6O8ElyfTVoJQEJebJce8GqF5RJZo3UUpnk4UYTp2udjtysMSfIzG rjeruuIJ6nQoNYxn8WM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	eur6.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to eur6.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 2.22.230.64
	;; Answer received from 2.22.230.64 (227 bytes) ;; HEADER SECTION ;; id = 11029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.104.126.61 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. G21pooBYaYbcOzkv/rRcLHwtbrQr852PYn65K5jkyqCZHv8eJUckQGX4ABLsnM6il98gc/qR1w4b KupVAa8mhkkjlf/hhb7kU62a6O8ElyfTVoJQEJebJce8GqF5RJZo3UUpnk4UYTp2udjtysMSfIzG rjeruuIJ6nQoNYxn8WM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 104.104.126.61
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. G21pooBYaYbcOzkv/rRcLHwtbrQr852PYn65K5jkyqCZHv8eJUckQGX4ABLsnM6il98gc/qR1w4b KupVAa8mhkkjlf/hhb7kU62a6O8ElyfTVoJQEJebJce8GqF5RJZo3UUpnk4UYTp2udjtysMSfIzG rjeruuIJ6nQoNYxn8WM= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to use9.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 72.246.46.65
	;; Answer received from 72.246.46.65 (227 bytes) ;; HEADER SECTION ;; id = 8499 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 23.73.255.120 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. T35pxgSuMI8exqhYvlh6ZUIyznW6cSPdpeEK2+0zEqhUhzRwJOB0Cy+z907yGBwBfu8CZUF/Fldt q423TxV3r1wZPX6S76/a5yzYNXlH4klruB+0V1KRX7MpTEorE8tm444GQ4dp7rzZi/y6UkhtEup6 oty/cR4VrKLyLS/T2ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	use9.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 72.246.46.65
	;; Answer received from 72.246.46.65 (227 bytes) ;; HEADER SECTION ;; id = 51335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.110.134.76 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. 0lgNkYKfIkhcEtSq0iZNCYe3Laa4/5wS9qsHCAzsiuJ5whw2yELT/SHmK4GJVLqjVgUgyWumkWd7 U5IV2Cf1juJ5Am9gStTRJ+wuRHCDTUWXaa8ss3mbK8oqVrzxoGZFInKi+FbBwqDa8onT9PnFIkWs lMHYMnsO4kNPkx+oLzY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 104.110.134.76
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. 0lgNkYKfIkhcEtSq0iZNCYe3Laa4/5wS9qsHCAzsiuJ5whw2yELT/SHmK4GJVLqjVgUgyWumkWd7 U5IV2Cf1juJ5Am9gStTRJ+wuRHCDTUWXaa8ss3mbK8oqVrzxoGZFInKi+FbBwqDa8onT9PnFIkWs lMHYMnsO4kNPkx+oLzY= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to ns1-116.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 193.108.91.116
	;; Answer received from 193.108.91.116 (227 bytes) ;; HEADER SECTION ;; id = 16313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.109.60.81 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. KjPR5xsQ9vJg7ihFEbT3mIpiEYqXFC47J7oH5M4fYzXF9ubDXTrCkkRIlM9dvefLdMiAa4sYiEQ/ Xrk9lZWwvDVXHJX/QXLO+iAGSgodLWB8KJFuiKGMBencOabZiR7lMCQ/urZbzv895qExeVVDwPvK DUOQS8Q3tGWC+iGtnPY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1-116.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to ns1-116.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 193.108.91.116
	;; Answer received from 193.108.91.116 (227 bytes) ;; HEADER SECTION ;; id = 13495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 104.109.60.81 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. KjPR5xsQ9vJg7ihFEbT3mIpiEYqXFC47J7oH5M4fYzXF9ubDXTrCkkRIlM9dvefLdMiAa4sYiEQ/ Xrk9lZWwvDVXHJX/QXLO+iAGSgodLWB8KJFuiKGMBencOabZiR7lMCQ/urZbzv895qExeVVDwPvK DUOQS8Q3tGWC+iGtnPY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 104.109.60.81
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. KjPR5xsQ9vJg7ihFEbT3mIpiEYqXFC47J7oH5M4fYzXF9ubDXTrCkkRIlM9dvefLdMiAa4sYiEQ/ Xrk9lZWwvDVXHJX/QXLO+iAGSgodLWB8KJFuiKGMBencOabZiR7lMCQ/urZbzv895qExeVVDwPvK DUOQS8Q3tGWC+iGtnPY= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

DEFENSE.GOV

	Query to asia3.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 23.211.61.64
	;; Answer received from 23.211.61.64 (227 bytes) ;; HEADER SECTION ;; id = 33923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 69.192.206.125 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. vKjsivALNGWk7Ww+o8SWwvt0uMQjwSJ3cp8ct0Lds6Mhgio/ravOzbuszlBg+DorT2hRSRRRCDj7 G1YHj/HQSYFW7PD4jdcZ1xREy8Da8W4AIP2APRjSykPFZ/8aitm++XHTNGXdDEWGOujdXiIRRrk3 O6wgQcAmoUBxLsLCmy8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	asia3.akam.net is authoritative for DEFENSE.GOV
	Found RRSIG signed by defense.gov zone
	Query to asia3.akam.net for DEFENSE.GOV/A
	Received 227 bytes from 23.211.61.64
	;; Answer received from 23.211.61.64 (227 bytes) ;; HEADER SECTION ;; id = 35779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DEFENSE.GOV. IN A ;; ANSWER SECTION (2 records) DEFENSE.GOV. 20 IN A 69.192.206.125 DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. vKjsivALNGWk7Ww+o8SWwvt0uMQjwSJ3cp8ct0Lds6Mhgio/ravOzbuszlBg+DorT2hRSRRRCDj7 G1YHj/HQSYFW7PD4jdcZ1xREy8Da8W4AIP2APRjSykPFZ/8aitm++XHTNGXdDEWGOujdXiIRRrk3 O6wgQcAmoUBxLsLCmy8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DEFENSE.GOV A RR has value 69.192.206.125
	Found 1 RRSIGs over A RRset
	`DEFENSE.GOV. 20 IN RRSIG ( A 7 2 20 20210520032907 20210517022907 17150 defense.gov. vKjsivALNGWk7Ww+o8SWwvt0uMQjwSJ3cp8ct0Lds6Mhgio/ravOzbuszlBg+DorT2hRSRRRCDj7 G1YHj/HQSYFW7PD4jdcZ1xREy8Da8W4AIP2APRjSykPFZ/8aitm++XHTNGXdDEWGOujdXiIRRrk3 O6wgQcAmoUBxLsLCmy8= )`
	RRSIG=17150 and DNSKEY=17150 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DEFENSE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: