DNSSEC Debugger - DEMS.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:27:57 UTC

Analyzing DNSSEC problems for DEMS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 25172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for DEMS.GOV/A
	Received 621 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 621 octets ;; HEADER SECTION ;; id = 41284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 45777 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 61859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 56279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for DEMS.GOV/A
	Received 449 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 449 octets ;; HEADER SECTION ;; id = 7873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DEMS.GOV. 10800 IN NS oxygen.house.GOV. DEMS.GOV. 10800 IN NS oxygen2.house.GOV. DEMS.GOV. 10800 IN NS pdns109.ultradns.biz. DEMS.GOV. 10800 IN NS pdns109.ultradns.com. DEMS.GOV. 10800 IN NS pdns109.ultradns.net. DEMS.GOV. 10800 IN NS pdns109.ultradns.org. DEMS.GOV. 3600 IN DS ( 45497 8 2 b9a6b7912f2845eaaa725c8a7d9bbdc19293dfb49c753145b05cb8473f0b46e1 ) DEMS.GOV. 3600 IN DS ( 51334 8 2 0a8b1cee1efb84ea95214378ec89d9656fc88287bf26e037d9eaf2db0eded8ce ) DEMS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142757 20260420122757 35496 gov. rz8VYwe+LyYzjEaB9xAetjeb6Na0IE98dsJ8P2tYz9vjyu3zsXEdLCd8TEf1wtC2k60YFQmeBB68 iV9xi4aR/w== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.GOV. 3600 IN A 216.218.141.197 oxygen2.house.GOV. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for DEMS.GOV/DNSKEY
	Received 449 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 449 octets ;; HEADER SECTION ;; id = 49747 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DEMS.GOV. 10800 IN NS oxygen.house.GOV. DEMS.GOV. 10800 IN NS oxygen2.house.GOV. DEMS.GOV. 10800 IN NS pdns109.ultradns.biz. DEMS.GOV. 10800 IN NS pdns109.ultradns.com. DEMS.GOV. 10800 IN NS pdns109.ultradns.net. DEMS.GOV. 10800 IN NS pdns109.ultradns.org. DEMS.GOV. 3600 IN DS ( 45497 8 2 b9a6b7912f2845eaaa725c8a7d9bbdc19293dfb49c753145b05cb8473f0b46e1 ) DEMS.GOV. 3600 IN DS ( 51334 8 2 0a8b1cee1efb84ea95214378ec89d9656fc88287bf26e037d9eaf2db0eded8ce ) DEMS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142757 20260420122757 35496 gov. 3z1rqQ6folZhKiwkzATX5CDyLoSAJ0MCGzxE5aNXUrgiyDy76yEoAl4nnq6ZGg52GOLMHnD0mizg LYNzfzPpCA== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.GOV. 3600 IN A 216.218.141.197 oxygen2.house.GOV. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Found child zone DEMS.GOV

DEMS.GOV

	Checking DS between GOV and DEMS.GOV
	Query to b.ns.GOV for DEMS.GOV/DS
	Received 232 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 232 octets ;; HEADER SECTION ;; id = 51166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN DS ;; ANSWER SECTION (3 records) DEMS.GOV. 3600 IN DS ( 45497 8 2 b9a6b7912f2845eaaa725c8a7d9bbdc19293dfb49c753145b05cb8473f0b46e1 ) DEMS.GOV. 3600 IN DS ( 51334 8 2 0a8b1cee1efb84ea95214378ec89d9656fc88287bf26e037d9eaf2db0eded8ce ) DEMS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142757 20260420122757 35496 gov. 9QWaE9mSfHHVSHMJ+vI/cM5ic/CYH/FEe+8v0xvUmOXTyTtlWc4ZIbXWFs4nYmHUWlfnpqjwAoh9 lTWJ88vDFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for DEMS.GOV in the GOV zone
	DS=45497/SHA-256 has algorithm RSASHA256
	DS=51334/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DEMS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142757 20260420122757 35496 gov. 9QWaE9mSfHHVSHMJ+vI/cM5ic/CYH/FEe+8v0xvUmOXTyTtlWc4ZIbXWFs4nYmHUWlfnpqjwAoh9 lTWJ88vDFQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=45497/SHA-256 is now in the chain-of-trust
	DS=51334/SHA-256 is now in the chain-of-trust
	`DEMS.GOV. 3600 IN DS ( 45497 8 2 b9a6b7912f2845eaaa725c8a7d9bbdc19293dfb49c753145b05cb8473f0b46e1 )`
	`DEMS.GOV. 3600 IN DS ( 51334 8 2 0a8b1cee1efb84ea95214378ec89d9656fc88287bf26e037d9eaf2db0eded8ce )`
	Query to oxygen2.house.GOV for DEMS.GOV/DNSKEY
	Received 1793 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 1793 octets ;; HEADER SECTION ;; id = 24241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) DEMS.GOV. 259200 IN DNSKEY ( 256 3 8 AwEAAb3FDzf3IY2Q2YX/QL6PAuNMyi5IwRERKZxlYbxVXiI73rfWv7Hr96okNds4x2y0jSQYdJmO pVJdvNN8sNY7gA9no2pPvzHCFtLXTluvjC1MpFvbPx3IEEKBBAqJ2CS84neoEh+eQ7GXxFo8Y1jK jvdmbCiQdt7IQxUfdyhrrNbD ) ; keytag 6258 DEMS.GOV. 259200 IN DNSKEY ( 257 3 8 AwEAAbh9+2prV9wSsQLPdIz9PjHThgWcbRO567kcQ3A6fhoFDjtw3uxAm4n2Nv31T7bADjiKmyGL eJlQjt9QXTZllVWSYo9vfdVt/p3VvS6T6Z7RuGd6t9kAym7jYByqU0ewxTpXRLAczgLxUt7QS8Dw 6xwvt8v7F1MaeevZ316oGBY/CDhLEo1WaiWD33gy7x25rU4IYm+r3DndIBY42MytrllkERp7hawG 6zrPxfB0Bs5EUcNRTVZ26i7LeO3MkbZZFmrUlDsdxAMfuZgxj9SEDxa55+GCDXlRkOmzfs9HzPdD dqDubthqxJehngQac/+9qfbCmeRQvq6clvyHgLsW3Gc= ) ; keytag 51334 DEMS.GOV. 259200 IN DNSKEY ( 256 3 8 AwEAAcP0GD5qiGWW0+pqvW/i5RfX6++CnsWpneNs3g4WAf94OOOsBnFRGksnW6DTnrXwqdwwBHFn FO++sDiihBBxBf2U/LNSxuOtSF+pRt3AnW1/MPHqiI+hc2W93He1RSYavH6VxRf40lChdQDmRnWL ujLBKzEHxu/mx3cgBGuhyWl1 ) ; keytag 6765 DEMS.GOV. 259200 IN DNSKEY ( 256 3 8 AwEAAalqbDw1va8dkZSDBmB5irJV5iHaTbBT56TW15y0yKQZQsJtSAs9O/Ih8v1AseJxdDi85RJQ +H57Ky0FVOFL63B9TbnwqcmWpJuGCgbqAHiB+DrZTciNAngIizu4g1LIsY7mGPlSGWW1tt2nDHC3 gjRQH9PXesnprIE/4yAfuEXD ) ; keytag 50085 DEMS.GOV. 259200 IN DNSKEY ( 257 3 8 AwEAAekKampeEgIJCx9Tc0lUYCKup5AvsnAUEG2O0X/6gbVcSLNl0tTzQC+xdg86vh+kz9RPPd7P GenY6KTwLwM2uKI9JfXHy5SpAbmKni6LfXoXjRqxZ0N/zUxElpi5lBcGufhg32r0IxuZ7OTX6UVt iQ6I1Z8W6ONsG1zWXqDI8/axxgrXXcD7G7FpiiqMHkeDkCMxer8hpkuk17+T7WCYjp70FG9TUnyD fjS4h0GE1pvNZhPxYcqJBlLJOFwJ5H9rAjH215Ee4/QG9KSCP/CA45LL2/g9ca7s+kczxJhksCXD CmX7tUN9RJ0ojX7Qq47nx9slO7EI9JmD0ecfV3mUnek= ) ; keytag 45497 DEMS.GOV. 259200 IN RRSIG ( DNSKEY 8 2 259200 20260426065709 20260420060023 45497 dems.gov. pTtG/v3KEHulAXq0L2UTigOZNDMOLseFwZBz8Noy2rlIRWzmEhQ32YI5sKyN5J9YiucVIqC3U1ue CxQTt7cgxJ+PN3QgHdjU+4PAko/aW8tlUUnRQa83OoymiRYoCjK9U0Vaodtdx2XeB4XU4uG/ondI 2jpj4+AkomDu/AhDl0VaQDlKLKGZwl6QxLwEGY0koDxLS76iIrMr2yjjlu5k5atMmEOiJjTW6578 BFu9uskdAjAtlsVpocz46dg+82Fi2EP1N8oTqthX7XZlQ94tBDR95fHs1iPuKCwSF71Efq7wfvyE 7RIkyuD6QMkSQTU1i5oc2Anxp50wdqeyDzK9BA== ) DEMS.GOV. 259200 IN RRSIG ( DNSKEY 8 2 259200 20260426065709 20260420060023 50085 dems.gov. We+1kqP6SBmUWR/KHA8Tt+0LVciK6yOPQcAnENnhL4QRrsrlFscwMAwF5wEMc/+AUJS5iwZwGwyV DlfEOrPGkY2ceVZasj/Pnz76XiwUgVxA2R/KHKXrjOJ9dfFKtDC310ajNGs8ZtzMfw45SXsCuBgh NNU+c/IPNorved4Ts6A= ) DEMS.GOV. 259200 IN RRSIG ( DNSKEY 8 2 259200 20260426065709 20260420060023 51334 dems.gov. IzTrtDuNeCx9P7cr+Ik9LmBro9VlIliG12mEoUlB346BNwbGPYd/I67x0I2zxMGDVfSU3kElD6bY RKGu+d0osdMWZeEy5xiac802gVK5tFAvpYvsrgJaG93O5RLLJZSGfYCsudkTvEDqtj1qNpy/vV1i qIX+N2TJQv/KmLewsRLp/GwOvsvV8WmALTtd5p/iE5e0e19TebHm9aqY3pkND7S8T20frJ2cbHwy ulL3n3EJmN55BWKu9fKIcerHA4yPu07+mhcV2aEdDa4870fq3AsLcFCE7tOozJPMyMvmXohtN5sk YcWYO5zo4k4MsUliwZ+5VPtRB8opLEFkMCmVgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for DEMS.GOV
	`DEMS.GOV. 259200 IN DNSKEY ( 256 3 8 AwEAAb3FDzf3IY2Q2YX/QL6PAuNMyi5IwRERKZxlYbxVXiI73rfWv7Hr96okNds4x2y0jSQYdJmO pVJdvNN8sNY7gA9no2pPvzHCFtLXTluvjC1MpFvbPx3IEEKBBAqJ2CS84neoEh+eQ7GXxFo8Y1jK jvdmbCiQdt7IQxUfdyhrrNbD ) ; keytag 6258`
	`DEMS.GOV. 259200 IN DNSKEY ( 257 3 8 AwEAAbh9+2prV9wSsQLPdIz9PjHThgWcbRO567kcQ3A6fhoFDjtw3uxAm4n2Nv31T7bADjiKmyGL eJlQjt9QXTZllVWSYo9vfdVt/p3VvS6T6Z7RuGd6t9kAym7jYByqU0ewxTpXRLAczgLxUt7QS8Dw 6xwvt8v7F1MaeevZ316oGBY/CDhLEo1WaiWD33gy7x25rU4IYm+r3DndIBY42MytrllkERp7hawG 6zrPxfB0Bs5EUcNRTVZ26i7LeO3MkbZZFmrUlDsdxAMfuZgxj9SEDxa55+GCDXlRkOmzfs9HzPdD dqDubthqxJehngQac/+9qfbCmeRQvq6clvyHgLsW3Gc= ) ; keytag 51334`
	`DEMS.GOV. 259200 IN DNSKEY ( 256 3 8 AwEAAcP0GD5qiGWW0+pqvW/i5RfX6++CnsWpneNs3g4WAf94OOOsBnFRGksnW6DTnrXwqdwwBHFn FO++sDiihBBxBf2U/LNSxuOtSF+pRt3AnW1/MPHqiI+hc2W93He1RSYavH6VxRf40lChdQDmRnWL ujLBKzEHxu/mx3cgBGuhyWl1 ) ; keytag 6765`
	`DEMS.GOV. 259200 IN DNSKEY ( 256 3 8 AwEAAalqbDw1va8dkZSDBmB5irJV5iHaTbBT56TW15y0yKQZQsJtSAs9O/Ih8v1AseJxdDi85RJQ +H57Ky0FVOFL63B9TbnwqcmWpJuGCgbqAHiB+DrZTciNAngIizu4g1LIsY7mGPlSGWW1tt2nDHC3 gjRQH9PXesnprIE/4yAfuEXD ) ; keytag 50085`
	`DEMS.GOV. 259200 IN DNSKEY ( 257 3 8 AwEAAekKampeEgIJCx9Tc0lUYCKup5AvsnAUEG2O0X/6gbVcSLNl0tTzQC+xdg86vh+kz9RPPd7P GenY6KTwLwM2uKI9JfXHy5SpAbmKni6LfXoXjRqxZ0N/zUxElpi5lBcGufhg32r0IxuZ7OTX6UVt iQ6I1Z8W6ONsG1zWXqDI8/axxgrXXcD7G7FpiiqMHkeDkCMxer8hpkuk17+T7WCYjp70FG9TUnyD fjS4h0GE1pvNZhPxYcqJBlLJOFwJ5H9rAjH215Ee4/QG9KSCP/CA45LL2/g9ca7s+kczxJhksCXD CmX7tUN9RJ0ojX7Qq47nx9slO7EI9JmD0ecfV3mUnek= ) ; keytag 45497`
	DNSKEY=51334/SEP is now in the chain-of-trust
	DS=51334/SHA-256 verifies DNSKEY=51334/SEP
	DNSKEY=45497/SEP is now in the chain-of-trust
	DS=45497/SHA-256 verifies DNSKEY=45497/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`DEMS.GOV. 259200 IN RRSIG ( DNSKEY 8 2 259200 20260426065709 20260420060023 45497 dems.gov. pTtG/v3KEHulAXq0L2UTigOZNDMOLseFwZBz8Noy2rlIRWzmEhQ32YI5sKyN5J9YiucVIqC3U1ue CxQTt7cgxJ+PN3QgHdjU+4PAko/aW8tlUUnRQa83OoymiRYoCjK9U0Vaodtdx2XeB4XU4uG/ondI 2jpj4+AkomDu/AhDl0VaQDlKLKGZwl6QxLwEGY0koDxLS76iIrMr2yjjlu5k5atMmEOiJjTW6578 BFu9uskdAjAtlsVpocz46dg+82Fi2EP1N8oTqthX7XZlQ94tBDR95fHs1iPuKCwSF71Efq7wfvyE 7RIkyuD6QMkSQTU1i5oc2Anxp50wdqeyDzK9BA== )`
	`DEMS.GOV. 259200 IN RRSIG ( DNSKEY 8 2 259200 20260426065709 20260420060023 50085 dems.gov. We+1kqP6SBmUWR/KHA8Tt+0LVciK6yOPQcAnENnhL4QRrsrlFscwMAwF5wEMc/+AUJS5iwZwGwyV DlfEOrPGkY2ceVZasj/Pnz76XiwUgVxA2R/KHKXrjOJ9dfFKtDC310ajNGs8ZtzMfw45SXsCuBgh NNU+c/IPNorved4Ts6A= )`
	`DEMS.GOV. 259200 IN RRSIG ( DNSKEY 8 2 259200 20260426065709 20260420060023 51334 dems.gov. IzTrtDuNeCx9P7cr+Ik9LmBro9VlIliG12mEoUlB346BNwbGPYd/I67x0I2zxMGDVfSU3kElD6bY RKGu+d0osdMWZeEy5xiac802gVK5tFAvpYvsrgJaG93O5RLLJZSGfYCsudkTvEDqtj1qNpy/vV1i qIX+N2TJQv/KmLewsRLp/GwOvsvV8WmALTtd5p/iE5e0e19TebHm9aqY3pkND7S8T20frJ2cbHwy ulL3n3EJmN55BWKu9fKIcerHA4yPu07+mhcV2aEdDa4870fq3AsLcFCE7tOozJPMyMvmXohtN5sk YcWYO5zo4k4MsUliwZ+5VPtRB8opLEFkMCmVgg== )`
	RRSIG=45497 and DNSKEY=45497/SEP verifies the DNSKEY RRset
	RRSIG=50085 and DNSKEY=50085 verifies the DNSKEY RRset
	RRSIG=51334 and DNSKEY=51334/SEP verifies the DNSKEY RRset
	DNSKEY=6258 is now in the chain-of-trust
	DNSKEY=6765 is now in the chain-of-trust
	DNSKEY=50085 is now in the chain-of-trust
	Query to pdns109.ultradns.org for DEMS.GOV/A
	Received 598 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 598 octets ;; HEADER SECTION ;; id = 31661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.org is authoritative for DEMS.GOV
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.net for DEMS.GOV/SOA
	Received 611 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 611 octets ;; HEADER SECTION ;; id = 3544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8005687 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20260426070023 20260420060023 50085 dems.gov. dnYv56+iWyy2XvhR+LAIlkXOd9wqeCyo3GnRTsVSTNjsCCAoZp7CAE1NNbcx+gSNyubJtVHD2l6L ZzizFYN2og/wqd/pqhEFOe4DpqqKjFyCGWbjFso5i7I4pIVmfpj8OdMfiAFFPGNAS0HUVS42+UWd 0OA/PnS3zV/evKr0rIQ= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.com for DEMS.GOV/SOA
	Received 611 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 611 octets ;; HEADER SECTION ;; id = 55391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8005687 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20260426070023 20260420060023 50085 dems.gov. dnYv56+iWyy2XvhR+LAIlkXOd9wqeCyo3GnRTsVSTNjsCCAoZp7CAE1NNbcx+gSNyubJtVHD2l6L ZzizFYN2og/wqd/pqhEFOe4DpqqKjFyCGWbjFso5i7I4pIVmfpj8OdMfiAFFPGNAS0HUVS42+UWd 0OA/PnS3zV/evKr0rIQ= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.biz for DEMS.GOV/SOA
	Received 611 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 611 octets ;; HEADER SECTION ;; id = 6336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN SOA ;; ANSWER SECTION (2 records) dems.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8005687 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) dems.gov. 28800 IN RRSIG ( SOA 8 2 28800 20260426070023 20260420060023 50085 dems.gov. dnYv56+iWyy2XvhR+LAIlkXOd9wqeCyo3GnRTsVSTNjsCCAoZp7CAE1NNbcx+gSNyubJtVHD2l6L ZzizFYN2og/wqd/pqhEFOe4DpqqKjFyCGWbjFso5i7I4pIVmfpj8OdMfiAFFPGNAS0HUVS42+UWd 0OA/PnS3zV/evKr0rIQ= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to oxygen2.house.gov for DEMS.GOV/SOA
	Received 275 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 275 octets ;; HEADER SECTION ;; id = 65091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN SOA ;; ANSWER SECTION (2 records) DEMS.GOV. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8005687 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) DEMS.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20260426070023 20260420060023 50085 dems.gov. dnYv56+iWyy2XvhR+LAIlkXOd9wqeCyo3GnRTsVSTNjsCCAoZp7CAE1NNbcx+gSNyubJtVHD2l6L ZzizFYN2og/wqd/pqhEFOe4DpqqKjFyCGWbjFso5i7I4pIVmfpj8OdMfiAFFPGNAS0HUVS42+UWd 0OA/PnS3zV/evKr0rIQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to oxygen.house.gov for DEMS.GOV/SOA
	Received 275 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 275 octets ;; HEADER SECTION ;; id = 52680 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN SOA ;; ANSWER SECTION (2 records) DEMS.GOV. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 8005687 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) DEMS.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20260426070023 20260420060023 50085 dems.gov. dnYv56+iWyy2XvhR+LAIlkXOd9wqeCyo3GnRTsVSTNjsCCAoZp7CAE1NNbcx+gSNyubJtVHD2l6L ZzizFYN2og/wqd/pqhEFOe4DpqqKjFyCGWbjFso5i7I4pIVmfpj8OdMfiAFFPGNAS0HUVS42+UWd 0OA/PnS3zV/evKr0rIQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.org for DEMS.GOV/A
	DEMS.GOV A RR has value 3.33.159.71
	DEMS.GOV A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= )`
	RRSIG=50085 and DNSKEY=50085 verifies the A RRset

DEMS.GOV

	Query to oxygen.house.gov for DEMS.GOV/A
	Received 237 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 237 octets ;; HEADER SECTION ;; id = 37248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (3 records) DEMS.GOV. 28800 IN A 3.33.159.71 DEMS.GOV. 28800 IN A 15.197.146.213 DEMS.GOV. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen.house.gov is authoritative for DEMS.GOV
	Found RRSIG signed by dems.gov zone
	Query to oxygen.house.gov for DEMS.GOV/A
	DEMS.GOV A RR has value 3.33.159.71
	DEMS.GOV A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`DEMS.GOV. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= )`
	RRSIG=50085 and DNSKEY=50085 verifies the A RRset

DEMS.GOV

	Query to pdns109.ultradns.biz for DEMS.GOV/A
	Received 598 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 598 octets ;; HEADER SECTION ;; id = 49689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.biz is authoritative for DEMS.GOV
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.biz for DEMS.GOV/A
	DEMS.GOV A RR has value 15.197.146.213
	DEMS.GOV A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= )`
	RRSIG=50085 and DNSKEY=50085 verifies the A RRset

DEMS.GOV

	Query to pdns109.ultradns.net for DEMS.GOV/A
	Received 598 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 598 octets ;; HEADER SECTION ;; id = 2093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.net is authoritative for DEMS.GOV
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.net for DEMS.GOV/A
	DEMS.GOV A RR has value 3.33.159.71
	DEMS.GOV A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= )`
	RRSIG=50085 and DNSKEY=50085 verifies the A RRset

DEMS.GOV

	Query to pdns109.ultradns.com for DEMS.GOV/A
	Received 598 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 598 octets ;; HEADER SECTION ;; id = 14246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (3 records) dems.gov. 28800 IN A 3.33.159.71 dems.gov. 28800 IN A 15.197.146.213 dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= ) ;; AUTHORITY SECTION (7 records) dems.gov. 28800 IN NS oxygen.house.gov. dems.gov. 28800 IN NS oxygen2.house.gov. dems.gov. 28800 IN NS pdns109.ultradns.biz. dems.gov. 28800 IN NS pdns109.ultradns.com. dems.gov. 28800 IN NS pdns109.ultradns.net. dems.gov. 28800 IN NS pdns109.ultradns.org. dems.gov. 28800 IN RRSIG ( NS 8 2 28800 20260426065709 20260420060023 50085 dems.gov. AmRhoAyt3ioZRJTCPCHpoExbWTQLr4BtIM5OnUlH3FpJv2eMLoS857M8F3MZ7l3Qk4BVyCL4FBiv 3AWNJtf4jiG/AIPeKncI9fU9WHZK2Civ0HHcgqsClgmrAWixIzQwgDJEbOW8qlEMSKZAseC4yDaf LkZhpOQr19+IZiz14mU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.com is authoritative for DEMS.GOV
	Found RRSIG signed by dems.gov zone
	Query to pdns109.ultradns.com for DEMS.GOV/A
	DEMS.GOV A RR has value 3.33.159.71
	DEMS.GOV A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`dems.gov. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= )`
	RRSIG=50085 and DNSKEY=50085 verifies the A RRset

DEMS.GOV

	Query to oxygen2.house.gov for DEMS.GOV/A
	Received 237 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 237 octets ;; HEADER SECTION ;; id = 56920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DEMS.GOV. IN A ;; ANSWER SECTION (3 records) DEMS.GOV. 28800 IN A 3.33.159.71 DEMS.GOV. 28800 IN A 15.197.146.213 DEMS.GOV. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen2.house.gov is authoritative for DEMS.GOV
	Found RRSIG signed by dems.gov zone
	Query to oxygen2.house.gov for DEMS.GOV/A
	DEMS.GOV A RR has value 3.33.159.71
	DEMS.GOV A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`DEMS.GOV. 28800 IN RRSIG ( A 8 2 28800 20260426065709 20260420060023 50085 dems.gov. mY6Ars2fb9mYdbfGXPF/V6t2z44dRWpZwu/W8jicDPYT6Zm2oDXSffe2/N2+2Kb2X8b/hElgja/U fjF0GfgU0ECZvkk2hdsgWHRp+4fkRQIHuC245ahv5pazKF7AYL3qYX8hM6jMZZmdTXJpQo98aS67 dWCGHqfX4Olb8IUhakU= )`
	RRSIG=50085 and DNSKEY=50085 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DEMS.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: