DNSSEC Analyzer

Domain Name:

Time: 2021-05-17 23:30:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for NGA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 29961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to j.root-servers.net for NGA.GOV/A
	Received 626 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (626 bytes) ;; HEADER SECTION ;; id = 19060 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (625 bytes) ;; HEADER SECTION ;; id = 59068 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 367 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (367 bytes) ;; HEADER SECTION ;; id = 35445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 20727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to a.gov-servers.net for NGA.GOV/A
	Received 490 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (490 bytes) ;; HEADER SECTION ;; id = 25209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) NGA.GOV. 86400 IN NS auth1.dns.rcn.net. NGA.GOV. 86400 IN NS auth3.dns.rcn.net. NGA.GOV. 86400 IN NS auth4.dns.rcn.net. NGA.GOV. 86400 IN NS auth2.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS 2749 5 1 6aa19cd4b4a6ff0a125619b643eff19b180b957d NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 2749 5 2 77303df346dd855b05918b8ced57a17a1411fa14958b99b9c2f3ad1038a92313 ) NGA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SwpDjljLJ8io9tVmQDAnMwhSfsfZ47LUjJpP2DXH4Lp6cgZliAakaBeEXOovK+x/hToy8a3X3fdI DoHAO/K68xMF3cfP2Eni0GWUcA1JD4DB+S7hStczUUKsGgY/4mqbQszA6Bd3soxEUVGJI0Rm8q0i kK1dFSAmfdvSyaZ5s2RueUkk5Ri1+x2RzHBCREXApKSzNREDy3JjVOQsXwLKXQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for NGA.GOV/DNSKEY
	Received 490 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (490 bytes) ;; HEADER SECTION ;; id = 37147 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) NGA.GOV. 86400 IN NS auth1.dns.rcn.net. NGA.GOV. 86400 IN NS auth3.dns.rcn.net. NGA.GOV. 86400 IN NS auth4.dns.rcn.net. NGA.GOV. 86400 IN NS auth2.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS 2749 5 1 6aa19cd4b4a6ff0a125619b643eff19b180b957d NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 2749 5 2 77303df346dd855b05918b8ced57a17a1411fa14958b99b9c2f3ad1038a92313 ) NGA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SwpDjljLJ8io9tVmQDAnMwhSfsfZ47LUjJpP2DXH4Lp6cgZliAakaBeEXOovK+x/hToy8a3X3fdI DoHAO/K68xMF3cfP2Eni0GWUcA1JD4DB+S7hStczUUKsGgY/4mqbQszA6Bd3soxEUVGJI0Rm8q0i kK1dFSAmfdvSyaZ5s2RueUkk5Ri1+x2RzHBCREXApKSzNREDy3JjVOQsXwLKXQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NGA.GOV

NGA.GOV

	Checking DS between GOV and NGA.GOV
	Query to d.gov-servers.net for NGA.GOV/DS
	Received 399 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (399 bytes) ;; HEADER SECTION ;; id = 13590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DS ;; ANSWER SECTION (5 records) NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS 2749 5 1 6aa19cd4b4a6ff0a125619b643eff19b180b957d NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 2749 5 2 77303df346dd855b05918b8ced57a17a1411fa14958b99b9c2f3ad1038a92313 ) NGA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SwpDjljLJ8io9tVmQDAnMwhSfsfZ47LUjJpP2DXH4Lp6cgZliAakaBeEXOovK+x/hToy8a3X3fdI DoHAO/K68xMF3cfP2Eni0GWUcA1JD4DB+S7hStczUUKsGgY/4mqbQszA6Bd3soxEUVGJI0Rm8q0i kK1dFSAmfdvSyaZ5s2RueUkk5Ri1+x2RzHBCREXApKSzNREDy3JjVOQsXwLKXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for NGA.GOV in the GOV zone
	DS=56044/SHA-1 has algorithm RSASHA1
	DS=2749/SHA-1 has algorithm RSASHA1
	DS=56044/SHA-256 has algorithm RSASHA1
	DS=2749/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`NGA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. SwpDjljLJ8io9tVmQDAnMwhSfsfZ47LUjJpP2DXH4Lp6cgZliAakaBeEXOovK+x/hToy8a3X3fdI DoHAO/K68xMF3cfP2Eni0GWUcA1JD4DB+S7hStczUUKsGgY/4mqbQszA6Bd3soxEUVGJI0Rm8q0i kK1dFSAmfdvSyaZ5s2RueUkk5Ri1+x2RzHBCREXApKSzNREDy3JjVOQsXwLKXQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=56044/SHA-1 is now in the chain-of-trust
	DS=2749/SHA-1 is now in the chain-of-trust
	`NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb`
	`NGA.GOV. 3600 IN DS 2749 5 1 6aa19cd4b4a6ff0a125619b643eff19b180b957d`
	`NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b )`
	`NGA.GOV. 3600 IN DS ( 2749 5 2 77303df346dd855b05918b8ced57a17a1411fa14958b99b9c2f3ad1038a92313 )`
	Query to auth1.dns.rcn.net for NGA.GOV/DNSKEY
	Received 1815 bytes from 207.172.3.20
	;; Answer received from 207.172.3.20 (1815 bytes) ;; HEADER SECTION ;; id = 10436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) nga.gov. 300 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; Key ID = 65355 nga.gov. 300 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; Key ID = 21537 nga.gov. 300 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; Key ID = 56044 nga.gov. 300 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; Key ID = 42536 nga.gov. 300 IN RRSIG ( DNSKEY 5 2 300 20210616040348 20210517040348 21537 nga.gov. AIs7hrjYXcTSzimvEnLAgjkCVrwgxrrXR1mTGhBlhGlmW2Aj5I814sRmlgZ6jE8uokekBXBoYHie 5DoFwdJlR/6YQTILpIVW0jjb29VxFqMO2rNKTZfNA2//vwk7tod4Q1WhtI26rczl3nsFgpymTnns 6Tuz+xIp00GD92jr8kU= ) nga.gov. 300 IN RRSIG ( DNSKEY 5 2 300 20210616040348 20210517040348 56044 nga.gov. LdfZP4EM5XoWM/bNIajF2gG5oeXckSrNLH+EQPTtYW84aE03Q5vHotwBjL+OSoKUjDhyn48QH46A vN0inrR/kAljkg4w4PGJqik074l8uqOTDYs/oLwJJWeueYXTAXw6Hl00XkOp6C5mUNBp2azpvKBP WT8jSiH0uWgphvDl1lw= ) nga.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20210616040348 20210517040348 42536 nga.gov. MtHo3nwOW/X5yw7obi4ih1ko2Nnb9K1bTUROlcGNfx/3vk8uAVWDK9Y5pbqO1PuQx4Vc/d2JhBrF aFFTIkVMFggyoQXi31KHJ885OmblKntq0FoZYLFhG5C31N5ZW4IP2GHEcEslxDHrRrHHyE57ZA0P ADLhRxU963X+6KATkulFabZQfCm5PgBe7KUty/lt3/DV3bNxcYU78Rk94fgcan+8O0twLtZK85dl eNb8DtCJFiDA1xRmohWo9r1/aT2ecjm/FHmXr6FuonTvfxJqiHmK8a5WmBdv+RJjdddvo2rj6CbZ sRtoeAbflDM0l9n8aqPG1LQeffMsqWrZCIyj6g== ) nga.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20210616040348 20210517040348 65355 nga.gov. aHoykjV+AxmaZmFwQ4sFDwtL082da5RhvvAAl6L1vqFJDUcPWf0GRZ2XKQ4FV8xDwppufCSxO2/K fJhaVgG38LfQDO50rsRZQKRX/xFNKv5S6n1Bnpz9SZwmIq3yN92MldxZpDhF9YiEx6I7vS4WGp7L n4nGVcQY/okJ/ZlzFaQiqO7sZoCreondfTUZnKzQl6t3rHwxeY/3SdLghCqyKyhCBHlmP73AiZ5g L1qrXfZxPjpWEIMZX0oG0vx/rH+Ht2UzGM7KSRf5Ut4H1uBHS+Hwoyul0sbzZdfdh59aGyCcxsM/ 10wl0IwvTbWIyd8ZYr8/SOhVIprBygX/iZ8kzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for NGA.GOV
	`nga.gov. 300 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; Key ID = 65355`
	`nga.gov. 300 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; Key ID = 21537`
	`nga.gov. 300 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; Key ID = 56044`
	`nga.gov. 300 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; Key ID = 42536`
	DNSKEY=56044/SEP is now in the chain-of-trust
	DS=56044/SHA-1 verifies DNSKEY=56044/SEP
	DS=56044/SHA-256 verifies DNSKEY=56044/SEP
	DS=2749/SHA-1 is published, but a corresponding DNSKEY is not
	Found 4 RRSIGs over DNSKEY RRset
	`nga.gov. 300 IN RRSIG ( DNSKEY 5 2 300 20210616040348 20210517040348 21537 nga.gov. AIs7hrjYXcTSzimvEnLAgjkCVrwgxrrXR1mTGhBlhGlmW2Aj5I814sRmlgZ6jE8uokekBXBoYHie 5DoFwdJlR/6YQTILpIVW0jjb29VxFqMO2rNKTZfNA2//vwk7tod4Q1WhtI26rczl3nsFgpymTnns 6Tuz+xIp00GD92jr8kU= )`
	`nga.gov. 300 IN RRSIG ( DNSKEY 5 2 300 20210616040348 20210517040348 56044 nga.gov. LdfZP4EM5XoWM/bNIajF2gG5oeXckSrNLH+EQPTtYW84aE03Q5vHotwBjL+OSoKUjDhyn48QH46A vN0inrR/kAljkg4w4PGJqik074l8uqOTDYs/oLwJJWeueYXTAXw6Hl00XkOp6C5mUNBp2azpvKBP WT8jSiH0uWgphvDl1lw= )`
	`nga.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20210616040348 20210517040348 42536 nga.gov. MtHo3nwOW/X5yw7obi4ih1ko2Nnb9K1bTUROlcGNfx/3vk8uAVWDK9Y5pbqO1PuQx4Vc/d2JhBrF aFFTIkVMFggyoQXi31KHJ885OmblKntq0FoZYLFhG5C31N5ZW4IP2GHEcEslxDHrRrHHyE57ZA0P ADLhRxU963X+6KATkulFabZQfCm5PgBe7KUty/lt3/DV3bNxcYU78Rk94fgcan+8O0twLtZK85dl eNb8DtCJFiDA1xRmohWo9r1/aT2ecjm/FHmXr6FuonTvfxJqiHmK8a5WmBdv+RJjdddvo2rj6CbZ sRtoeAbflDM0l9n8aqPG1LQeffMsqWrZCIyj6g== )`
	`nga.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20210616040348 20210517040348 65355 nga.gov. aHoykjV+AxmaZmFwQ4sFDwtL082da5RhvvAAl6L1vqFJDUcPWf0GRZ2XKQ4FV8xDwppufCSxO2/K fJhaVgG38LfQDO50rsRZQKRX/xFNKv5S6n1Bnpz9SZwmIq3yN92MldxZpDhF9YiEx6I7vS4WGp7L n4nGVcQY/okJ/ZlzFaQiqO7sZoCreondfTUZnKzQl6t3rHwxeY/3SdLghCqyKyhCBHlmP73AiZ5g L1qrXfZxPjpWEIMZX0oG0vx/rH+Ht2UzGM7KSRf5Ut4H1uBHS+Hwoyul0sbzZdfdh59aGyCcxsM/ 10wl0IwvTbWIyd8ZYr8/SOhVIprBygX/iZ8kzg== )`
	RRSIG=21537 and DNSKEY=21537 verifies the DNSKEY RRset
	RRSIG=56044 and DNSKEY=56044/SEP verifies the DNSKEY RRset
	RRSIG=42536 and DNSKEY=42536/SEP verifies the DNSKEY RRset
	RRSIG=65355 and DNSKEY=65355 verifies the DNSKEY RRset
	DNSKEY=65355 is now in the chain-of-trust
	DNSKEY=21537 is now in the chain-of-trust
	DNSKEY=42536/SEP is now in the chain-of-trust
	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1222 bytes from 207.172.11.14
	;; Answer received from 207.172.11.14 (1222 bytes) ;; HEADER SECTION ;; id = 4368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) nga.gov. 60 IN A 199.16.64.41 nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (8 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 auth2.dns.rcn.net. 86400 IN AAAA 2610:80:0:100::17 auth3.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	auth2.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth3.dns.rcn.net for NGA.GOV/SOA
	Received 1112 bytes from 207.172.3.21
	;; Answer received from 207.172.3.21 (1112 bytes) ;; HEADER SECTION ;; id = 33317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (3 records) NGA.GOV. 300 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2021051701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) NGA.GOV. 300 IN RRSIG ( SOA 5 2 300 20210616040348 20210517040348 21537 nga.gov. s3yYtKOl76LICEDKamdp3lyGXLnqXPZUNVteEmI2IEXYHIw3EjuLg/3vD/KzSA7MNT2q4HK3kfNy tQLBmyag9yxvevejH3kdLYIqrKaWmc94m/iG4cAAxHCEA23wGhnAs2LvSZ2J4yVXGQZC6wgwxMUJ 8+4emHs393M8VB9qxtM= ) NGA.GOV. 300 IN RRSIG ( SOA 8 2 300 20210616040348 20210517040348 65355 nga.gov. dFBewv7CWbyJTrggu1IHiSECZn6YZTqVyR4iAlGuvXobv/THI2iZOhngTJYaaRzwSkZrIIhv8CTd fuuc/m5DIMsO7XivYgN4jJ34TpfQQZyGnqVq6X+1Pki+370pPsPAqAGgQQtlCA2tY5lG7raySvpR KY4Q+rdbk3mwcnMGGzrKlVwsVTNR6nK+sBqE4oRRXJcJh3S+UGtvFzqSXu4fJfD4zFGFm19Tgw04 v23ZXy6q/rdoblXB0RC9a8nADdGHct8U+nes7HOgIBpZfO6VYHS13ZgJOemumXn6mFADUsayWn2c OSfZ+TgowAu/73C7Cd0l0FaVZc2nCm883EkHgw== ) ;; AUTHORITY SECTION (6 records) NGA.GOV. 86400 IN NS auth1.dns.rcn.net. NGA.GOV. 86400 IN NS auth2.dns.rcn.net. NGA.GOV. 86400 IN NS auth3.dns.rcn.net. NGA.GOV. 86400 IN NS auth4.dns.rcn.net. NGA.GOV. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) NGA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to auth4.dns.rcn.net for NGA.GOV/SOA
	Received 1211 bytes from 207.172.3.22
	;; Answer received from 207.172.3.22 (1211 bytes) ;; HEADER SECTION ;; id = 9365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (3 records) nga.gov. 300 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2021051701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 300 IN RRSIG ( SOA 5 2 300 20210616040348 20210517040348 21537 nga.gov. s3yYtKOl76LICEDKamdp3lyGXLnqXPZUNVteEmI2IEXYHIw3EjuLg/3vD/KzSA7MNT2q4HK3kfNy tQLBmyag9yxvevejH3kdLYIqrKaWmc94m/iG4cAAxHCEA23wGhnAs2LvSZ2J4yVXGQZC6wgwxMUJ 8+4emHs393M8VB9qxtM= ) nga.gov. 300 IN RRSIG ( SOA 8 2 300 20210616040348 20210517040348 65355 nga.gov. dFBewv7CWbyJTrggu1IHiSECZn6YZTqVyR4iAlGuvXobv/THI2iZOhngTJYaaRzwSkZrIIhv8CTd fuuc/m5DIMsO7XivYgN4jJ34TpfQQZyGnqVq6X+1Pki+370pPsPAqAGgQQtlCA2tY5lG7raySvpR KY4Q+rdbk3mwcnMGGzrKlVwsVTNR6nK+sBqE4oRRXJcJh3S+UGtvFzqSXu4fJfD4zFGFm19Tgw04 v23ZXy6q/rdoblXB0RC9a8nADdGHct8U+nes7HOgIBpZfO6VYHS13ZgJOemumXn6mFADUsayWn2c OSfZ+TgowAu/73C7Cd0l0FaVZc2nCm883EkHgw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (6 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to auth1.dns.rcn.net for NGA.GOV/SOA
	Received 1211 bytes from 207.172.3.20
	;; Answer received from 207.172.3.20 (1211 bytes) ;; HEADER SECTION ;; id = 2368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (3 records) nga.gov. 300 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2021051701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 300 IN RRSIG ( SOA 5 2 300 20210616040348 20210517040348 21537 nga.gov. s3yYtKOl76LICEDKamdp3lyGXLnqXPZUNVteEmI2IEXYHIw3EjuLg/3vD/KzSA7MNT2q4HK3kfNy tQLBmyag9yxvevejH3kdLYIqrKaWmc94m/iG4cAAxHCEA23wGhnAs2LvSZ2J4yVXGQZC6wgwxMUJ 8+4emHs393M8VB9qxtM= ) nga.gov. 300 IN RRSIG ( SOA 8 2 300 20210616040348 20210517040348 65355 nga.gov. dFBewv7CWbyJTrggu1IHiSECZn6YZTqVyR4iAlGuvXobv/THI2iZOhngTJYaaRzwSkZrIIhv8CTd fuuc/m5DIMsO7XivYgN4jJ34TpfQQZyGnqVq6X+1Pki+370pPsPAqAGgQQtlCA2tY5lG7raySvpR KY4Q+rdbk3mwcnMGGzrKlVwsVTNR6nK+sBqE4oRRXJcJh3S+UGtvFzqSXu4fJfD4zFGFm19Tgw04 v23ZXy6q/rdoblXB0RC9a8nADdGHct8U+nes7HOgIBpZfO6VYHS13ZgJOemumXn6mFADUsayWn2c OSfZ+TgowAu/73C7Cd0l0FaVZc2nCm883EkHgw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (6 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1222 bytes from 207.172.11.14
	;; Answer received from 207.172.11.14 (1222 bytes) ;; HEADER SECTION ;; id = 42568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) nga.gov. 60 IN A 199.16.64.41 nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (8 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 auth2.dns.rcn.net. 86400 IN AAAA 2610:80:0:100::17 auth3.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NGA.GOV A RR has value 199.16.64.41
	Found 2 RRSIGs over A RRset
	`nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= )`
	`nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1222 bytes from 207.172.3.20
	;; Answer received from 207.172.3.20 (1222 bytes) ;; HEADER SECTION ;; id = 64440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) nga.gov. 60 IN A 199.16.64.41 nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (8 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 auth2.dns.rcn.net. 86400 IN AAAA 2610:80:0:100::17 auth3.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	auth1.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1222 bytes from 207.172.3.20
	;; Answer received from 207.172.3.20 (1222 bytes) ;; HEADER SECTION ;; id = 1251 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) nga.gov. 60 IN A 199.16.64.41 nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (8 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 auth2.dns.rcn.net. 86400 IN AAAA 2610:80:0:100::17 auth3.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NGA.GOV A RR has value 199.16.64.41
	Found 2 RRSIGs over A RRset
	`nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= )`
	`nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 1067 bytes from 207.172.3.21
	;; Answer received from 207.172.3.21 (1067 bytes) ;; HEADER SECTION ;; id = 31183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) NGA.GOV. 60 IN A 199.16.64.41 NGA.GOV. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) NGA.GOV. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) NGA.GOV. 86400 IN NS auth1.dns.rcn.net. NGA.GOV. 86400 IN NS auth2.dns.rcn.net. NGA.GOV. 86400 IN NS auth3.dns.rcn.net. NGA.GOV. 86400 IN NS auth4.dns.rcn.net. NGA.GOV. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) NGA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	auth3.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 1067 bytes from 207.172.3.21
	;; Answer received from 207.172.3.21 (1067 bytes) ;; HEADER SECTION ;; id = 57684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) NGA.GOV. 60 IN A 199.16.64.41 NGA.GOV. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) NGA.GOV. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) NGA.GOV. 86400 IN NS auth1.dns.rcn.net. NGA.GOV. 86400 IN NS auth2.dns.rcn.net. NGA.GOV. 86400 IN NS auth3.dns.rcn.net. NGA.GOV. 86400 IN NS auth4.dns.rcn.net. NGA.GOV. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) NGA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NGA.GOV A RR has value 199.16.64.41
	Found 2 RRSIGs over A RRset
	`NGA.GOV. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= )`
	`NGA.GOV. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1222 bytes from 207.172.3.22
	;; Answer received from 207.172.3.22 (1222 bytes) ;; HEADER SECTION ;; id = 44826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) nga.gov. 60 IN A 199.16.64.41 nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (8 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 auth2.dns.rcn.net. 86400 IN AAAA 2610:80:0:100::17 auth3.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	auth4.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1222 bytes from 207.172.3.22
	;; Answer received from 207.172.3.22 (1222 bytes) ;; HEADER SECTION ;; id = 49375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (3 records) nga.gov. 60 IN A 199.16.64.41 nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= ) nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== ) ;; AUTHORITY SECTION (6 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20210616040348 20210517040348 21537 nga.gov. wEZLjE42bzOGJy1yNk32rBRcltlZ390AxfMFUiGrrPvL5ffGzhquOkYiqxL2EUjDPJ5k4Bb2ICR7 xbz/VyDPY9oG4TYQzVdNHNGPz9lKMNUMXE0CFhjsVFlrwpePwiH97rVhDaYlWtcDxXFg7VJsQYt4 3uYFQMGInGeQz1mOXsg= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20210616040348 20210517040348 65355 nga.gov. y/+g7nIc117rxQ7rmuftXO2UBFVCWhGnCR72UZymwvil0V+jkiU7LhBTsn8EOC2Z83BQuXxsRbi7 ZhnZiW2TUpfxVHhNUE/OnbEXzaGa3C7uS7lBKKQW2ulTh4sHNHOe7UkFYUmkLiLWzPyH/zFdeePe spLYKncy5eM84W2CzJpMFw/OieJCrADZ9ZYgQyBJnSHBl7bt9Ear/hoM234LAb+LELsW9OYYydp4 yY7wRBsebeOJYdqrMt8K1kQInpIhOPN+XqMos4FtvMURryF2KXSxPb58qsp2HwwIMLLJ6RmBq5kD uLxNAJOsbsThsbMDwRbKZBt1Ms95YPi79ibEEw== ) ;; ADDITIONAL SECTION (8 records) auth1.dns.rcn.net. 86400 IN A 207.172.3.20 auth2.dns.rcn.net. 86400 IN A 207.172.11.14 auth3.dns.rcn.net. 86400 IN A 207.172.3.21 auth4.dns.rcn.net. 86400 IN A 207.172.3.22 auth1.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::20 auth2.dns.rcn.net. 86400 IN AAAA 2610:80:0:100::17 auth3.dns.rcn.net. 86400 IN AAAA 2610:80:0:10e::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NGA.GOV A RR has value 199.16.64.41
	Found 2 RRSIGs over A RRset
	`nga.gov. 60 IN RRSIG ( A 5 2 60 20210616040348 20210517040348 21537 nga.gov. E0gVrLHOgE8VTYKm0mQw+8VInv88uGPu4nOvOiXi+elA+n1rCdCOGM/nbbfZGZ6NvpprUZft5/QH 34J2rNSicDv0WLp9EmQ6IY1WoNwxG1EYvUE81UC23Q0nLqGoM+f+UzuvSpJT22X54jtA/grPMFoo sirjvE4S6JKA3AMWPGk= )`
	`nga.gov. 60 IN RRSIG ( A 8 2 60 20210616040348 20210517040348 65355 nga.gov. enwmP3mrRc+zy0ucPmI9M+o0uaTqiCQZ8KNuDoEZ7UZvq1JSVkbtVWUQz/xGkH4scfAVIPomhvig CxME4ciX6e7O9yboGthEg8eGyW4oI6MfZrR5lanxZUinMMeVr/NWTYketsWSzfKCcV3ytu7ybZKI n3/SVVM47tC7Mdl7YFiIzx5sn1Y9R7zFl00sa1ePJO941zX49vV7QuDhffkjXUzKHx1qAPUD4K/V I+TeG2xBjUzCtCBdukfM1zV1V+SwzcW4Z0drB5rcGdcq5s8Q7UdYA0NHJ82wyCJ/RTs/XwlW/6AH Agw13EJl6rMKadmpVftaaBvWZ9cjVpclC2VmJw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NGA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: