DNSSEC Analyzer - GSAIG.GOV

Domain Name:

Time: 2021-04-20 04:26:50 UTC, NTP stratum 4

Analyzing DNSSEC problems for GSAIG.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 50125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to l.root-servers.net for GSAIG.GOV/A
	Received 628 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (628 bytes) ;; HEADER SECTION ;; id = 6796 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (622 bytes) ;; HEADER SECTION ;; id = 41920 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 367 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (367 bytes) ;; HEADER SECTION ;; id = 19721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (957 bytes) ;; HEADER SECTION ;; id = 10207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. O3Vkv1GxULxEFZlk2sKzqasNvLJbTDyQ9ytSfizjFDulm1IOZ7et3SHgQgoYKJKrG7Y6Q9OaNmRJ mV0halAep4T8RPc/SuKFF9xP0TxXbSZgbfgBgqwj3MfttDt7f8lpumS+UJxeaJDHnJApqPlClRmR /fPRoQxY7aWQmQUIhGL6lYNeMHrHfsPyWyZEpLzVaYffUC/XHLNIancKYopgSk9g3/mLUy8Eki5c SWFw8jJt5WJUs1Y87iZ+SRdiDbzMy6B1epxpQvqdNQAbaJmI5o8JXMKjb6mLweqBNlUMNnr/k5Oo 2sJC3u3SxCEd8dT1FHzvp4Ufr/ZXi1xv70uBOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. O3Vkv1GxULxEFZlk2sKzqasNvLJbTDyQ9ytSfizjFDulm1IOZ7et3SHgQgoYKJKrG7Y6Q9OaNmRJ mV0halAep4T8RPc/SuKFF9xP0TxXbSZgbfgBgqwj3MfttDt7f8lpumS+UJxeaJDHnJApqPlClRmR /fPRoQxY7aWQmQUIhGL6lYNeMHrHfsPyWyZEpLzVaYffUC/XHLNIancKYopgSk9g3/mLUy8Eki5c SWFw8jJt5WJUs1Y87iZ+SRdiDbzMy6B1epxpQvqdNQAbaJmI5o8JXMKjb6mLweqBNlUMNnr/k5Oo 2sJC3u3SxCEd8dT1FHzvp4Ufr/ZXi1xv70uBOg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for GSAIG.GOV/A
	Received 635 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (635 bytes) ;; HEADER SECTION ;; id = 22271 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) GSAIG.GOV. 86400 IN NS dns4.gsa.GOV. GSAIG.GOV. 86400 IN NS dns2.gsa.GOV. GSAIG.GOV. 86400 IN NS dns5.gsa.GOV. GSAIG.GOV. 86400 IN NS dns.gsa.GOV. GSAIG.GOV. 86400 IN NS dns3.gsa.GOV. GSAIG.GOV. 3600 IN DS 17411 8 1 b87d310d85e9cb1585a7f952bb37ce8451eb7a7e GSAIG.GOV. 3600 IN DS ( 49600 8 2 9177ad932de42b21b18dca79709328386e9db6f0441142ba684b7030c78082ca ) GSAIG.GOV. 3600 IN DS ( 17411 8 2 1adc6bd1e3f31ebedf08d847ef961ab34fc07abedbec1e9cf3592c80db7600b0 ) GSAIG.GOV. 3600 IN DS 49600 8 1 620652dbb0ff8661dc6d9855dea57713426f58cc GSAIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427031007 20210420031007 48498 gov. qOQNsD8LiM2TVsOhIDWwQZsGpvvGokP6VpkjOmB/GHZczz/2ugSZ0D3K4PH9un/IgZEGT06ffYN1 H8xL9XX8zVZhOlfymCZIAh9lOdVnKg/2uTR1JSS64/quoFozxl69ZSKYBD6bY8FyQ2sU+YT6IB0f j3GvD0UcWxri/LGgEHrtuhKFsSJLVOflwFUeiGhlz7LDsPGsGby+GlfacFlgvQ== ) ;; ADDITIONAL SECTION (8 records) dns4.gsa.GOV. 86400 IN A 13.248.149.147 dns4.gsa.GOV. 86400 IN AAAA 2600:1f14:653:bb00:1:: dns2.gsa.GOV. 86400 IN A 159.142.150.68 dns5.gsa.GOV. 86400 IN A 76.223.9.162 dns.gsa.GOV. 86400 IN A 13.248.142.184 dns.gsa.GOV. 86400 IN AAAA 2600:1f16:8f2:d500:1:: dns3.gsa.GOV. 86400 IN A 13.248.144.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for GSAIG.GOV/DNSKEY
	Received 635 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (635 bytes) ;; HEADER SECTION ;; id = 8896 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) GSAIG.GOV. 86400 IN NS dns4.gsa.GOV. GSAIG.GOV. 86400 IN NS dns2.gsa.GOV. GSAIG.GOV. 86400 IN NS dns5.gsa.GOV. GSAIG.GOV. 86400 IN NS dns.gsa.GOV. GSAIG.GOV. 86400 IN NS dns3.gsa.GOV. GSAIG.GOV. 3600 IN DS 17411 8 1 b87d310d85e9cb1585a7f952bb37ce8451eb7a7e GSAIG.GOV. 3600 IN DS ( 49600 8 2 9177ad932de42b21b18dca79709328386e9db6f0441142ba684b7030c78082ca ) GSAIG.GOV. 3600 IN DS ( 17411 8 2 1adc6bd1e3f31ebedf08d847ef961ab34fc07abedbec1e9cf3592c80db7600b0 ) GSAIG.GOV. 3600 IN DS 49600 8 1 620652dbb0ff8661dc6d9855dea57713426f58cc GSAIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427031007 20210420031007 48498 gov. qOQNsD8LiM2TVsOhIDWwQZsGpvvGokP6VpkjOmB/GHZczz/2ugSZ0D3K4PH9un/IgZEGT06ffYN1 H8xL9XX8zVZhOlfymCZIAh9lOdVnKg/2uTR1JSS64/quoFozxl69ZSKYBD6bY8FyQ2sU+YT6IB0f j3GvD0UcWxri/LGgEHrtuhKFsSJLVOflwFUeiGhlz7LDsPGsGby+GlfacFlgvQ== ) ;; ADDITIONAL SECTION (8 records) dns4.gsa.GOV. 86400 IN A 13.248.149.147 dns4.gsa.GOV. 86400 IN AAAA 2600:1f14:653:bb00:1:: dns2.gsa.GOV. 86400 IN A 159.142.150.68 dns5.gsa.GOV. 86400 IN A 76.223.9.162 dns.gsa.GOV. 86400 IN A 13.248.142.184 dns.gsa.GOV. 86400 IN AAAA 2600:1f16:8f2:d500:1:: dns3.gsa.GOV. 86400 IN A 13.248.144.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GSAIG.GOV

GSAIG.GOV

	Checking DS between GOV and GSAIG.GOV
	Query to d.gov-servers.net for GSAIG.GOV/DS
	Received 401 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (401 bytes) ;; HEADER SECTION ;; id = 11869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN DS ;; ANSWER SECTION (5 records) GSAIG.GOV. 3600 IN DS 17411 8 1 b87d310d85e9cb1585a7f952bb37ce8451eb7a7e GSAIG.GOV. 3600 IN DS ( 49600 8 2 9177ad932de42b21b18dca79709328386e9db6f0441142ba684b7030c78082ca ) GSAIG.GOV. 3600 IN DS ( 17411 8 2 1adc6bd1e3f31ebedf08d847ef961ab34fc07abedbec1e9cf3592c80db7600b0 ) GSAIG.GOV. 3600 IN DS 49600 8 1 620652dbb0ff8661dc6d9855dea57713426f58cc GSAIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427031007 20210420031007 48498 gov. qOQNsD8LiM2TVsOhIDWwQZsGpvvGokP6VpkjOmB/GHZczz/2ugSZ0D3K4PH9un/IgZEGT06ffYN1 H8xL9XX8zVZhOlfymCZIAh9lOdVnKg/2uTR1JSS64/quoFozxl69ZSKYBD6bY8FyQ2sU+YT6IB0f j3GvD0UcWxri/LGgEHrtuhKFsSJLVOflwFUeiGhlz7LDsPGsGby+GlfacFlgvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for GSAIG.GOV in the GOV zone
	DS=17411/SHA-1 has algorithm RSASHA256
	DS=49600/SHA-256 has algorithm RSASHA256
	DS=17411/SHA-256 has algorithm RSASHA256
	DS=49600/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GSAIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427031007 20210420031007 48498 gov. qOQNsD8LiM2TVsOhIDWwQZsGpvvGokP6VpkjOmB/GHZczz/2ugSZ0D3K4PH9un/IgZEGT06ffYN1 H8xL9XX8zVZhOlfymCZIAh9lOdVnKg/2uTR1JSS64/quoFozxl69ZSKYBD6bY8FyQ2sU+YT6IB0f j3GvD0UcWxri/LGgEHrtuhKFsSJLVOflwFUeiGhlz7LDsPGsGby+GlfacFlgvQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=17411/SHA-1 is now in the chain-of-trust
	DS=49600/SHA-256 is now in the chain-of-trust
	`GSAIG.GOV. 3600 IN DS 17411 8 1 b87d310d85e9cb1585a7f952bb37ce8451eb7a7e`
	`GSAIG.GOV. 3600 IN DS ( 49600 8 2 9177ad932de42b21b18dca79709328386e9db6f0441142ba684b7030c78082ca )`
	`GSAIG.GOV. 3600 IN DS ( 17411 8 2 1adc6bd1e3f31ebedf08d847ef961ab34fc07abedbec1e9cf3592c80db7600b0 )`
	`GSAIG.GOV. 3600 IN DS 49600 8 1 620652dbb0ff8661dc6d9855dea57713426f58cc`
	Query to dns4.gsa.GOV for GSAIG.GOV/DNSKEY
	Received 1146 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (1146 bytes) ;; HEADER SECTION ;; id = 20836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) gsaig.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAa6MDEP5XKCAfMO4iZFOsVIv7/bL2+u67Xp2xvneuJEql4KVYcNRWM6yOopRP5yCRhtfZzEP gplFDs6wRU0Z4hIxDd1SR3nd+sjNmuHNUdzybG5IPvynb3vlvpqY8Z7jIcsRp5kTta1dZ3qrfSAu o4x9N45O2bllzpeELmLH9YMZ ) ; Key ID = 49600 gsaig.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAdpsArwByIwshQ3+mWc+Fh+qqJXld3ScdyX9kPAVO40qNuy/dWsASVufvasj+YNArI79V7PA +Isijq8b8muE7kOc5kRHAVDCM2mNAPDK64t6uhceik9tZRChGUuB1PQkHexhZYtep/Wrl+j0nQTe hv+VHHG9wDczU3IVVOYELl9t ) ; Key ID = 17411 gsaig.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAcrq2KapsFwZBwQ4682kTIAYtODfPeshulQgGygl+Yi9QSwRvH7qwbEyUxNTTNOMmBpm6FWX /hXpVmDuvZQqAXn5ZlBK3iGAV6Hl8/BEkODhzxkG7KyS7wz3B+8IWsvDB0neWNZvscHEvpIi/pQ0 mmiRmo0HQ541VzHwLVsDFrE3 ) ; Key ID = 10293 gsaig.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAY4xM6JJ2X05JhywOLNVaQkNDz6f9/TFLJVUPt+9M1jBvAtGcJV5zU9M6syYsj5tI8QJXo6U 2EQChwXyZj4U6wT/UBZnZadC98s3WoCFz4BetbjUs8tziBQpBGVXjg7N7ye4A+EYrC9s7qPWbC4/ cHhR7qlKRm7+LEQNdeLhs0Br ) ; Key ID = 22441 gsaig.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20210503095030 20210415192925 10293 gsaig.gov. VZYHJSIyfUUIbATgvoPzxps94hjPWSOu1EgzpG/hGWuOtkRrFfd0I89zl0FuUfHYzBo0pRYgkO2N OkS56BjyyHNu2r+SJF1vpmwoMG+i7Ee41j3o7z42iSKieeoQm/ztGODOeNknjIiOPtdwiWouS7fn ua1iKEdu8jiCgqaC1BA= ) gsaig.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20210503095030 20210415192925 17411 gsaig.gov. zfq7r9/mbcs0njHvl4Ss9XuxP0hQ/7a5w/cCrGFdXFgz8hPt8mFmd28xypjGF8EttTDhePpfEW3J 0XSysdRCgAwk+X6v1vfPBomB1oSQaqb/SjihSmeWk6wQCQGZf9f357Qq4BooC0WdJknJ5QYC4pUh paSVzCdBlLSEb+GW7OU= ) gsaig.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20210503095030 20210415192925 22441 gsaig.gov. D4eaXOliyEAwDxnEqzyo88aEkNf2TWUUDelq1h5A7SF6QfuZirIedlVeoLz3U5pM1CllilEGikCs /shnN4uMbISS4rFLYybRztZnFLnywQ5ChIvVTAfeisGXoz2B67DIIdBgE1qT7RDa8KBwSbMJkyIs uz9Iqy0LdH703M1QhLo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for GSAIG.GOV
	`gsaig.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAa6MDEP5XKCAfMO4iZFOsVIv7/bL2+u67Xp2xvneuJEql4KVYcNRWM6yOopRP5yCRhtfZzEP gplFDs6wRU0Z4hIxDd1SR3nd+sjNmuHNUdzybG5IPvynb3vlvpqY8Z7jIcsRp5kTta1dZ3qrfSAu o4x9N45O2bllzpeELmLH9YMZ ) ; Key ID = 49600`
	`gsaig.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAdpsArwByIwshQ3+mWc+Fh+qqJXld3ScdyX9kPAVO40qNuy/dWsASVufvasj+YNArI79V7PA +Isijq8b8muE7kOc5kRHAVDCM2mNAPDK64t6uhceik9tZRChGUuB1PQkHexhZYtep/Wrl+j0nQTe hv+VHHG9wDczU3IVVOYELl9t ) ; Key ID = 17411`
	`gsaig.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAcrq2KapsFwZBwQ4682kTIAYtODfPeshulQgGygl+Yi9QSwRvH7qwbEyUxNTTNOMmBpm6FWX /hXpVmDuvZQqAXn5ZlBK3iGAV6Hl8/BEkODhzxkG7KyS7wz3B+8IWsvDB0neWNZvscHEvpIi/pQ0 mmiRmo0HQ541VzHwLVsDFrE3 ) ; Key ID = 10293`
	`gsaig.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAY4xM6JJ2X05JhywOLNVaQkNDz6f9/TFLJVUPt+9M1jBvAtGcJV5zU9M6syYsj5tI8QJXo6U 2EQChwXyZj4U6wT/UBZnZadC98s3WoCFz4BetbjUs8tziBQpBGVXjg7N7ye4A+EYrC9s7qPWbC4/ cHhR7qlKRm7+LEQNdeLhs0Br ) ; Key ID = 22441`
	DNSKEY=49600/SEP is now in the chain-of-trust
	DS=49600/SHA-256 verifies DNSKEY=49600/SEP
	DS=49600/SHA-1 verifies DNSKEY=49600/SEP
	DNSKEY=17411/SEP is now in the chain-of-trust
	DS=17411/SHA-1 verifies DNSKEY=17411/SEP
	DS=17411/SHA-256 verifies DNSKEY=17411/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`gsaig.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20210503095030 20210415192925 10293 gsaig.gov. VZYHJSIyfUUIbATgvoPzxps94hjPWSOu1EgzpG/hGWuOtkRrFfd0I89zl0FuUfHYzBo0pRYgkO2N OkS56BjyyHNu2r+SJF1vpmwoMG+i7Ee41j3o7z42iSKieeoQm/ztGODOeNknjIiOPtdwiWouS7fn ua1iKEdu8jiCgqaC1BA= )`
	`gsaig.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20210503095030 20210415192925 17411 gsaig.gov. zfq7r9/mbcs0njHvl4Ss9XuxP0hQ/7a5w/cCrGFdXFgz8hPt8mFmd28xypjGF8EttTDhePpfEW3J 0XSysdRCgAwk+X6v1vfPBomB1oSQaqb/SjihSmeWk6wQCQGZf9f357Qq4BooC0WdJknJ5QYC4pUh paSVzCdBlLSEb+GW7OU= )`
	`gsaig.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20210503095030 20210415192925 22441 gsaig.gov. D4eaXOliyEAwDxnEqzyo88aEkNf2TWUUDelq1h5A7SF6QfuZirIedlVeoLz3U5pM1CllilEGikCs /shnN4uMbISS4rFLYybRztZnFLnywQ5ChIvVTAfeisGXoz2B67DIIdBgE1qT7RDa8KBwSbMJkyIs uz9Iqy0LdH703M1QhLo= )`
	RRSIG=10293 and DNSKEY=10293 verifies the DNSKEY RRset
	RRSIG=17411 and DNSKEY=17411/SEP verifies the DNSKEY RRset
	RRSIG=22441 and DNSKEY=22441 verifies the DNSKEY RRset
	DNSKEY=10293 is now in the chain-of-trust
	DNSKEY=22441 is now in the chain-of-trust
	Query to dns3.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 13.248.144.182
	;; Answer received from 13.248.144.182 (401 bytes) ;; HEADER SECTION ;; id = 50398 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.gsa.GOV is authoritative for GSAIG.GOV
	Found RRSIG signed by gsaig.gov zone
	Query to dns4.gsa.GOV for GSAIG.GOV/SOA
	Received 440 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (440 bytes) ;; HEADER SECTION ;; id = 43497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN SOA ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 637426818 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 10293 gsaig.gov. Y+x8x63PopWNb2St/9pRqqavbokL7U6f7f9sdHA7KcEEqpvN9K9+W7oV2heUUEKRMfjaKzI62Kaz Mb/y0Gk24048P45OkN9XDNBXwRthyyHSXJCacLvgbU5X3YRIhvZiT/IJHMrhNm7PdVcq6K0nW83v 9lbtBYuMIGGXadlxsAE= ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 22441 gsaig.gov. KJ6iYarwo4KuShsnCRVtp7ykO0jkPyk6t1DwVX96eM2/lP4qaV3emgYWY4pZxyn8NL8826u2qskm FPht5gnJJfIPcKdeqYldd+18tGRgAeI16mT5sgMVgHiE9maZqwlSasax46AgNkaM7dMNHrNEP6fE 1HuoEN+FqVASiljtmLo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.gsa.GOV for GSAIG.GOV/SOA
	Received 440 bytes from 13.248.142.184
	;; Answer received from 13.248.142.184 (440 bytes) ;; HEADER SECTION ;; id = 14415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN SOA ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 637426818 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 10293 gsaig.gov. Y+x8x63PopWNb2St/9pRqqavbokL7U6f7f9sdHA7KcEEqpvN9K9+W7oV2heUUEKRMfjaKzI62Kaz Mb/y0Gk24048P45OkN9XDNBXwRthyyHSXJCacLvgbU5X3YRIhvZiT/IJHMrhNm7PdVcq6K0nW83v 9lbtBYuMIGGXadlxsAE= ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 22441 gsaig.gov. KJ6iYarwo4KuShsnCRVtp7ykO0jkPyk6t1DwVX96eM2/lP4qaV3emgYWY4pZxyn8NL8826u2qskm FPht5gnJJfIPcKdeqYldd+18tGRgAeI16mT5sgMVgHiE9maZqwlSasax46AgNkaM7dMNHrNEP6fE 1HuoEN+FqVASiljtmLo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns5.gsa.GOV for GSAIG.GOV/SOA
	Received 440 bytes from 76.223.9.162
	;; Answer received from 76.223.9.162 (440 bytes) ;; HEADER SECTION ;; id = 41818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN SOA ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 637426818 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 10293 gsaig.gov. Y+x8x63PopWNb2St/9pRqqavbokL7U6f7f9sdHA7KcEEqpvN9K9+W7oV2heUUEKRMfjaKzI62Kaz Mb/y0Gk24048P45OkN9XDNBXwRthyyHSXJCacLvgbU5X3YRIhvZiT/IJHMrhNm7PdVcq6K0nW83v 9lbtBYuMIGGXadlxsAE= ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 22441 gsaig.gov. KJ6iYarwo4KuShsnCRVtp7ykO0jkPyk6t1DwVX96eM2/lP4qaV3emgYWY4pZxyn8NL8826u2qskm FPht5gnJJfIPcKdeqYldd+18tGRgAeI16mT5sgMVgHiE9maZqwlSasax46AgNkaM7dMNHrNEP6fE 1HuoEN+FqVASiljtmLo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.gsa.GOV for GSAIG.GOV/SOA
	Received 440 bytes from 159.142.150.68
	;; Answer received from 159.142.150.68 (440 bytes) ;; HEADER SECTION ;; id = 54083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN SOA ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 637426818 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 10293 gsaig.gov. Y+x8x63PopWNb2St/9pRqqavbokL7U6f7f9sdHA7KcEEqpvN9K9+W7oV2heUUEKRMfjaKzI62Kaz Mb/y0Gk24048P45OkN9XDNBXwRthyyHSXJCacLvgbU5X3YRIhvZiT/IJHMrhNm7PdVcq6K0nW83v 9lbtBYuMIGGXadlxsAE= ) gsaig.gov. 10800 IN RRSIG ( SOA 8 2 10800 20210515202925 20210415192925 22441 gsaig.gov. KJ6iYarwo4KuShsnCRVtp7ykO0jkPyk6t1DwVX96eM2/lP4qaV3emgYWY4pZxyn8NL8826u2qskm FPht5gnJJfIPcKdeqYldd+18tGRgAeI16mT5sgMVgHiE9maZqwlSasax46AgNkaM7dMNHrNEP6fE 1HuoEN+FqVASiljtmLo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 13.248.144.182
	;; Answer received from 13.248.144.182 (401 bytes) ;; HEADER SECTION ;; id = 50739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSAIG.GOV A RR has value 159.142.178.7
	Found 2 RRSIGs over A RRset
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= )`
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= )`
	RRSIG=10293 and DNSKEY=10293 verifies the A RRset
	RRSIG=22441 and DNSKEY=22441 verifies the A RRset

GSAIG.GOV

	Query to dns5.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 76.223.9.162
	;; Answer received from 76.223.9.162 (401 bytes) ;; HEADER SECTION ;; id = 22322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns5.gsa.GOV is authoritative for GSAIG.GOV
	Found RRSIG signed by gsaig.gov zone
	Query to dns5.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 76.223.9.162
	;; Answer received from 76.223.9.162 (401 bytes) ;; HEADER SECTION ;; id = 44638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSAIG.GOV A RR has value 159.142.178.7
	Found 2 RRSIGs over A RRset
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= )`
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= )`
	RRSIG=10293 and DNSKEY=10293 verifies the A RRset
	RRSIG=22441 and DNSKEY=22441 verifies the A RRset

GSAIG.GOV

	Query to dns2.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 159.142.150.68
	;; Answer received from 159.142.150.68 (401 bytes) ;; HEADER SECTION ;; id = 2453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.gsa.GOV is authoritative for GSAIG.GOV
	Found RRSIG signed by gsaig.gov zone
	Query to dns2.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 159.142.150.68
	;; Answer received from 159.142.150.68 (401 bytes) ;; HEADER SECTION ;; id = 26236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSAIG.GOV A RR has value 159.142.178.7
	Found 2 RRSIGs over A RRset
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= )`
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= )`
	RRSIG=10293 and DNSKEY=10293 verifies the A RRset
	RRSIG=22441 and DNSKEY=22441 verifies the A RRset

GSAIG.GOV

	Query to dns.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 13.248.142.184
	;; Answer received from 13.248.142.184 (401 bytes) ;; HEADER SECTION ;; id = 18184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns.gsa.GOV is authoritative for GSAIG.GOV
	Found RRSIG signed by gsaig.gov zone
	Query to dns.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 13.248.142.184
	;; Answer received from 13.248.142.184 (401 bytes) ;; HEADER SECTION ;; id = 53708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSAIG.GOV A RR has value 159.142.178.7
	Found 2 RRSIGs over A RRset
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= )`
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= )`
	RRSIG=10293 and DNSKEY=10293 verifies the A RRset
	RRSIG=22441 and DNSKEY=22441 verifies the A RRset

GSAIG.GOV

	Query to dns4.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (401 bytes) ;; HEADER SECTION ;; id = 871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns4.gsa.GOV is authoritative for GSAIG.GOV
	Found RRSIG signed by gsaig.gov zone
	Query to dns4.gsa.GOV for GSAIG.GOV/A
	Received 401 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (401 bytes) ;; HEADER SECTION ;; id = 58006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSAIG.GOV. IN A ;; ANSWER SECTION (3 records) gsaig.gov. 10800 IN A 159.142.178.7 gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= ) gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSAIG.GOV A RR has value 159.142.178.7
	Found 2 RRSIGs over A RRset
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 10293 gsaig.gov. TOm6xsf7U2MLI4TyrzNCEmlIvHZtkREXfoO7xVAjeLUNNzBjkMnHyq6+y6G0mgPINuBAInKfpNX0 kEQfpGI3D0XjJ/sDGFj8aj+F2qSpcHCK8njmsiuNDKms5TQpd/xeJg0NViTzXHwJA6mzEveMT421 XaWHXbx4jp5Xwjo6Psc= )`
	`gsaig.gov. 10800 IN RRSIG ( A 8 2 10800 20210514150015 20210414145515 22441 gsaig.gov. STrS2W+bzaiKcdwmAmwQ0J68983wpV66GWZEkLKu6mPasU65fFzE9cZy2m66rRQsIG399JdtP911 Kpt0j/ebLZVMB5oXuIk1U8PO03fCb3uVxAgkP0QkGtPJRoWM7yoO7rIfdSt/OzNL8vgnte0bRRul nppglQ3snB27JV9pu2k= )`
	RRSIG=10293 and DNSKEY=10293 verifies the A RRset
	RRSIG=22441 and DNSKEY=22441 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test GSAIG.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: