DNSSEC Debugger

Domain Name:

Time: 2026-02-23 03:24:27 UTC

Analyzing DNSSEC problems for NGA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 63895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for NGA.GOV/A
	Received 614 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 614 octets ;; HEADER SECTION ;; id = 61893 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 40764 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 370 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 370 octets ;; HEADER SECTION ;; id = 31631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 56706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.GOV for NGA.GOV/A
	Received 358 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 358 octets ;; HEADER SECTION ;; id = 6895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NGA.GOV. 10800 IN NS auth1.dns.rcn.net. NGA.GOV. 10800 IN NS auth2.dns.rcn.net. NGA.GOV. 10800 IN NS auth3.dns.rcn.net. NGA.GOV. 10800 IN NS auth4.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224042427 20260222022427 35496 gov. ffVw4GEdlGzqL+w9Pk/uQRSy5P8zAVzCkR5SkeFaRG8OYZradQO3hcz77JhrSfk0ezdtm/ejLp24 UJFBAfTI1g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for NGA.GOV/DNSKEY
	Received 358 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 358 octets ;; HEADER SECTION ;; id = 4497 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NGA.GOV. 10800 IN NS auth1.dns.rcn.net. NGA.GOV. 10800 IN NS auth2.dns.rcn.net. NGA.GOV. 10800 IN NS auth3.dns.rcn.net. NGA.GOV. 10800 IN NS auth4.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224042427 20260222022427 35496 gov. ozhTjaI6H3yWSpgSVWIFLeeWKgr7PNQmX475MZv0IObrJHG1AYZaSqAnnws6HTOISNxCWime/4Nm mafWdrFS1g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone NGA.GOV

NGA.GOV

	Checking DS between GOV and NGA.GOV
	Query to b.ns.GOV for NGA.GOV/DS
	Received 267 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 267 octets ;; HEADER SECTION ;; id = 62894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DS ;; ANSWER SECTION (4 records) NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224042427 20260222022427 35496 gov. RtNm/5uu/eT5ZHBXMWTlS0Sb7UqGw11WyKVnUc4lwqWVoRVjtro0PB7L8G6Uo7SPlnl9s1kmVljv zkZ8k++x1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for NGA.GOV in the GOV zone
	DS=56044/SHA-1 uses a deprecated digest algorithm
	DS=56044/SHA-1 has algorithm RSASHA1
	DS=56044/SHA-256 has algorithm RSASHA1
	DS=57335/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224042427 20260222022427 35496 gov. RtNm/5uu/eT5ZHBXMWTlS0Sb7UqGw11WyKVnUc4lwqWVoRVjtro0PB7L8G6Uo7SPlnl9s1kmVljv zkZ8k++x1w== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=56044/SHA-1 is now in the chain-of-trust
	DS=57335/SHA-256 is now in the chain-of-trust
	`NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb`
	`NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b )`
	`NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 )`
	Query to auth2.dns.rcn.net for NGA.GOV/DNSKEY
	Received 2957 bytes from 207.237.14.120
	;; Response received from [207.237.14.120] 2957 octets ;; HEADER SECTION ;; id = 23522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 12 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (12 records) nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; keytag 42536 nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; keytag 65355 nga.gov. 3600 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; keytag 21537 nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL8MS2Cn7lZczaKay60Tvw WSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8+oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7 cZQBnyDKBJORV5xcH3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0TalTpm YYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo8eKOh8aQc/AUFOCclAWduSun rgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ876iShSovEjW0= ) ; keytag 10338 nga.gov. 3600 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; keytag 56044 nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1Hs3AV3r6f+INA+sxbqZbd NCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7 T3RWZjz+n/+f9yBtvdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5La61B 9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVeyyNmN/bXr9t0ynmnme6ptaWU GVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg4kBfpvxT8VM= ) ; keytag 57335 nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260324050401 20260222050401 21537 nga.gov. CI07KWj3zM4+8vgiMMUiC4szmgy6TNo04Drqb1BF1sOHPp6fO283cjPQiSJ3D1ADnfv0eCjhgaeM 0uQLDdqmlN4sg6azbS746h5fIo1HkE4gOp36TbtbiRaTTD9uJpkIxZVHfLqEnNeO9CuxofjOp+3+ w0VG4pR2Xao2S1kJccI= ) nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260324050401 20260222050401 56044 nga.gov. ziCSCVogWcPzeBZnG3g8XMqLzCGIHnafaxI9anfPveIJ+2nqYX+xFjOMP7Bo4s5zh5bZQvH0eZYQ 3GuEx0CDBIYhzTd5fprjCfQ/Zht/4MwTi64jfXEpFAqBEsKD+bcrOEUIDWgia0Imc9Y68OS01q+o uDXuwPeLsd+fGwLSdsI= ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 10338 nga.gov. AcWnUaod++57020ucIhswLnXwq0imXcwYbhAt4E+bNI3p6GF6TxUWhlT6VjKApIUf6Natsw7nbVe ylxCVo4n4nSQmCfSNtJd8gqiv5ePDOrQ4gz13SvSjHXlw3FYhSU6vY8Fy4VfOgJ69si3lDf997kp B9zeg34Fdt3dkAJP7Ki8roNytpgTj/UyDgGbqh3bs084E39z72DLSI6dZnsJDkPWyfu818eTNCRn uVN0LKMUqDm4HaPjjM74cMSYL05ooXKZdylPnWg9ZfFul4BEQerLMoA7Bcl6wV3nklnsrgsmq17k c0sNHIkkh0TpBt2coewQZS+joTknzY4R8Fv/Zg== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 42536 nga.gov. GN6g+Tt3p4OX+r0TSMWhWxEPptfwAFvijbqFEPCYNgwKd5be2dARSWLJFRKDws1beDUytzl6sDUH l8ffOAvOyfdlqd0yYObxz24TDv1bVQyr+8ObffAIsJegU5dSjY3A+YVCySSXhwBL36uq8sWsNTKw zCicC3AbdryuP7lLxMi9RrwIAgHdrQaL/QdP4brvGA7Mrq023zRdLDechKPAiLNjUYjBFO5FrwtC YnTjPiMmi6ayFXDmGmDrXzpU8qLqT21xg1VqU8+vO0dI97CePIVUKsRavEKdyeBgYZ5D4rv/sdm6 zZuZV5y0XVVTnIaZdHRvjwCm7semFYn9mNT20w== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 57335 nga.gov. cXYPnK/MdcQWg8H4cVv2PIKuLHxeLKD2wj7VUDT7qXt7RtdFUn9ijc5vlpfTY977XeKMt1rO6sbg mDFn9waLoJF/359SF+jZfiuMi+z/CjrrrSRvPSGqDVh4DHH+fB8rldyYrguFAFxBFpf6dx/CjiI0 bIsXfEc1E6pmC2L6mcndpnljTYQupv2s05K9OYU3TqbUxx4LLnjCugvYWDt8KRaW5w+U2/10RiHf Vt76Wy7lPkCRSNhzPGgrfU7oj5DuWO2XUq47NYV/wc41JPYPLtaOXzlByxA1RcoPtrQQZqcezRMa xEHht4r4vZmoBC83Svu5mzPwbP1mAB4o3cu3Dw== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 65355 nga.gov. BuslMHEZ1Wa+KuTL60cPRasSq2dtltK6R/bR7rfqGzynk1qjEML2c71gSE0zGYC7Ss5Nss4BZugg zM1OrqDkK3jnN1027i84Bf9MtUD6+r4ICn+f06940PghXv+NmIG8XIAUC/9QIHpbgRa6qfgQVTaT /OL8lijp683+CEsa+iTy2CoFydZHY0PsqKwszX2eG+vi9+OsWNJofuHIX3WzmvENFI8OjvpVf9ha CxuA0SHoE371mexKU07N2l+j+KvRyGgJwqxJEDgp12Wa5QgpYebSqdQk7SqnNRTnWz6pk1nZlD1C WUgIOC4dxXx18sdlvYCFAAe6Og0Dzo4YtvMa6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 6 DNSKEY records for NGA.GOV
	`nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; keytag 42536`
	`nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; keytag 65355`
	`nga.gov. 3600 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; keytag 21537`
	`nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL8MS2Cn7lZczaKay60Tvw WSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8+oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7 cZQBnyDKBJORV5xcH3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0TalTpm YYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo8eKOh8aQc/AUFOCclAWduSun rgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ876iShSovEjW0= ) ; keytag 10338`
	`nga.gov. 3600 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; keytag 56044`
	`nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1Hs3AV3r6f+INA+sxbqZbd NCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7 T3RWZjz+n/+f9yBtvdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5La61B 9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVeyyNmN/bXr9t0ynmnme6ptaWU GVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg4kBfpvxT8VM= ) ; keytag 57335`
	DNSKEY=56044/SEP is now in the chain-of-trust
	DS=56044/SHA-1 verifies DNSKEY=56044/SEP
	DS=56044/SHA-256 verifies DNSKEY=56044/SEP
	DNSKEY=57335/SEP is now in the chain-of-trust
	DS=57335/SHA-256 verifies DNSKEY=57335/SEP
	Found 6 RRSIGs over DNSKEY RRset
	`nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260324050401 20260222050401 21537 nga.gov. CI07KWj3zM4+8vgiMMUiC4szmgy6TNo04Drqb1BF1sOHPp6fO283cjPQiSJ3D1ADnfv0eCjhgaeM 0uQLDdqmlN4sg6azbS746h5fIo1HkE4gOp36TbtbiRaTTD9uJpkIxZVHfLqEnNeO9CuxofjOp+3+ w0VG4pR2Xao2S1kJccI= )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260324050401 20260222050401 56044 nga.gov. ziCSCVogWcPzeBZnG3g8XMqLzCGIHnafaxI9anfPveIJ+2nqYX+xFjOMP7Bo4s5zh5bZQvH0eZYQ 3GuEx0CDBIYhzTd5fprjCfQ/Zht/4MwTi64jfXEpFAqBEsKD+bcrOEUIDWgia0Imc9Y68OS01q+o uDXuwPeLsd+fGwLSdsI= )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 10338 nga.gov. AcWnUaod++57020ucIhswLnXwq0imXcwYbhAt4E+bNI3p6GF6TxUWhlT6VjKApIUf6Natsw7nbVe ylxCVo4n4nSQmCfSNtJd8gqiv5ePDOrQ4gz13SvSjHXlw3FYhSU6vY8Fy4VfOgJ69si3lDf997kp B9zeg34Fdt3dkAJP7Ki8roNytpgTj/UyDgGbqh3bs084E39z72DLSI6dZnsJDkPWyfu818eTNCRn uVN0LKMUqDm4HaPjjM74cMSYL05ooXKZdylPnWg9ZfFul4BEQerLMoA7Bcl6wV3nklnsrgsmq17k c0sNHIkkh0TpBt2coewQZS+joTknzY4R8Fv/Zg== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 42536 nga.gov. GN6g+Tt3p4OX+r0TSMWhWxEPptfwAFvijbqFEPCYNgwKd5be2dARSWLJFRKDws1beDUytzl6sDUH l8ffOAvOyfdlqd0yYObxz24TDv1bVQyr+8ObffAIsJegU5dSjY3A+YVCySSXhwBL36uq8sWsNTKw zCicC3AbdryuP7lLxMi9RrwIAgHdrQaL/QdP4brvGA7Mrq023zRdLDechKPAiLNjUYjBFO5FrwtC YnTjPiMmi6ayFXDmGmDrXzpU8qLqT21xg1VqU8+vO0dI97CePIVUKsRavEKdyeBgYZ5D4rv/sdm6 zZuZV5y0XVVTnIaZdHRvjwCm7semFYn9mNT20w== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 57335 nga.gov. cXYPnK/MdcQWg8H4cVv2PIKuLHxeLKD2wj7VUDT7qXt7RtdFUn9ijc5vlpfTY977XeKMt1rO6sbg mDFn9waLoJF/359SF+jZfiuMi+z/CjrrrSRvPSGqDVh4DHH+fB8rldyYrguFAFxBFpf6dx/CjiI0 bIsXfEc1E6pmC2L6mcndpnljTYQupv2s05K9OYU3TqbUxx4LLnjCugvYWDt8KRaW5w+U2/10RiHf Vt76Wy7lPkCRSNhzPGgrfU7oj5DuWO2XUq47NYV/wc41JPYPLtaOXzlByxA1RcoPtrQQZqcezRMa xEHht4r4vZmoBC83Svu5mzPwbP1mAB4o3cu3Dw== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260324050401 20260222050401 65355 nga.gov. BuslMHEZ1Wa+KuTL60cPRasSq2dtltK6R/bR7rfqGzynk1qjEML2c71gSE0zGYC7Ss5Nss4BZugg zM1OrqDkK3jnN1027i84Bf9MtUD6+r4ICn+f06940PghXv+NmIG8XIAUC/9QIHpbgRa6qfgQVTaT /OL8lijp683+CEsa+iTy2CoFydZHY0PsqKwszX2eG+vi9+OsWNJofuHIX3WzmvENFI8OjvpVf9ha CxuA0SHoE371mexKU07N2l+j+KvRyGgJwqxJEDgp12Wa5QgpYebSqdQk7SqnNRTnWz6pk1nZlD1C WUgIOC4dxXx18sdlvYCFAAe6Og0Dzo4YtvMa6Q== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=56044 and DNSKEY=56044/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the DNSKEY RRset
	RRSIG=42536 and DNSKEY=42536/SEP verifies the DNSKEY RRset
	RRSIG=57335 and DNSKEY=57335/SEP verifies the DNSKEY RRset
	RRSIG=65355 and DNSKEY=65355 verifies the DNSKEY RRset
	DNSKEY=42536/SEP is now in the chain-of-trust
	DNSKEY=65355 is now in the chain-of-trust
	DNSKEY=21537 is now in the chain-of-trust
	DNSKEY=10338 is now in the chain-of-trust
	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 66.44.1.44
	;; Response received from [66.44.1.44] 1664 octets ;; HEADER SECTION ;; id = 21252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth1.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth4.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.172.3.22
	;; Response received from [207.172.3.22] 1709 octets ;; HEADER SECTION ;; id = 63877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2026022201 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20260324050401 20260222050401 21537 nga.gov. F5uIbUDc0DcI5EQ/pekM1cRosAMbOhoQY9azdREY3SjdTVtYhIjdDq8gaysVuN4hs/tOPVQ5rSGy 1EAZzvyjC3HAeekbCH/hEryE/Mrtz/ya3hM897S1wR4U6WUsFY4Un0HVyBNmG2Fpl2++XIsB/NNw UBuv3Wrijo3djP3dHVo= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260324050401 20260222050401 10338 nga.gov. o5rrcy4JXzNC1FNT2HqbYh+VmkqtNr8EkssqkjyXSRlr2/d9U9J4eHGktnQp34dRf+2Dc2s3/vDH ZDbco43KM9b530IUh0U5CQUQXseIGdP3oN48B4PQZ6puJUoD+Y2N/ypXk5yOy9JyIG8NPa0wGiT/ 78J3sD7wXvHK4ACW3qqtaZ0MIdsLgyGPbnbEBObNibgKsDieiMboVvb9ggi+qmhEOnt2XHOKWAlK 5w+DFhs0L7Xx/INhD6lIOy2AIjEexwBV3dxTJwsE7glblfSu1aMAXIJqOMRX5+noMmWqa9ug8dQw gBfSZIl70yiuPcr9QD44QT3AIwLK0ZgbEzlOFg== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260324050401 20260222050401 65355 nga.gov. WCQDlX8DZmI8EotV0JaPZXx3eceFLFWVWsWGuICdQLkKvb6gb6vbcvp3fqMnJdicNT1X6IHdhix0 tCuvjy6SWwYhrqIliXcH6TcaUSbrDesdZ7/r3paJ06LwJWGOqKfk6kNyYiabuemYTs7pOk+m/Jx0 8dmZAW+AproCy/YP+V9rSl1OUZF2f2V+f1e3cvrmpdwUKFzPBM2BEfgNno5mWZKBjrcWDx9+Zc0M w+zAgRcb5UQdKcECpCX+DP+flLoE/NWPxF4WCdcFHoPWy5/MLJ6+nmiFPhSoh8xwrK20l5ke8isP k3jEH9bonDgQqx7GneTUTYk4PSVxPhlg0er5yA== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth3.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.96.3.153
	;; Response received from [207.96.3.153] 1709 octets ;; HEADER SECTION ;; id = 58583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2026022201 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20260324050401 20260222050401 21537 nga.gov. F5uIbUDc0DcI5EQ/pekM1cRosAMbOhoQY9azdREY3SjdTVtYhIjdDq8gaysVuN4hs/tOPVQ5rSGy 1EAZzvyjC3HAeekbCH/hEryE/Mrtz/ya3hM897S1wR4U6WUsFY4Un0HVyBNmG2Fpl2++XIsB/NNw UBuv3Wrijo3djP3dHVo= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260324050401 20260222050401 10338 nga.gov. o5rrcy4JXzNC1FNT2HqbYh+VmkqtNr8EkssqkjyXSRlr2/d9U9J4eHGktnQp34dRf+2Dc2s3/vDH ZDbco43KM9b530IUh0U5CQUQXseIGdP3oN48B4PQZ6puJUoD+Y2N/ypXk5yOy9JyIG8NPa0wGiT/ 78J3sD7wXvHK4ACW3qqtaZ0MIdsLgyGPbnbEBObNibgKsDieiMboVvb9ggi+qmhEOnt2XHOKWAlK 5w+DFhs0L7Xx/INhD6lIOy2AIjEexwBV3dxTJwsE7glblfSu1aMAXIJqOMRX5+noMmWqa9ug8dQw gBfSZIl70yiuPcr9QD44QT3AIwLK0ZgbEzlOFg== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260324050401 20260222050401 65355 nga.gov. WCQDlX8DZmI8EotV0JaPZXx3eceFLFWVWsWGuICdQLkKvb6gb6vbcvp3fqMnJdicNT1X6IHdhix0 tCuvjy6SWwYhrqIliXcH6TcaUSbrDesdZ7/r3paJ06LwJWGOqKfk6kNyYiabuemYTs7pOk+m/Jx0 8dmZAW+AproCy/YP+V9rSl1OUZF2f2V+f1e3cvrmpdwUKFzPBM2BEfgNno5mWZKBjrcWDx9+Zc0M w+zAgRcb5UQdKcECpCX+DP+flLoE/NWPxF4WCdcFHoPWy5/MLJ6+nmiFPhSoh8xwrK20l5ke8isP k3jEH9bonDgQqx7GneTUTYk4PSVxPhlg0er5yA== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth2.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.237.14.120
	;; Response received from [207.237.14.120] 1709 octets ;; HEADER SECTION ;; id = 65493 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2026022201 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20260324050401 20260222050401 21537 nga.gov. F5uIbUDc0DcI5EQ/pekM1cRosAMbOhoQY9azdREY3SjdTVtYhIjdDq8gaysVuN4hs/tOPVQ5rSGy 1EAZzvyjC3HAeekbCH/hEryE/Mrtz/ya3hM897S1wR4U6WUsFY4Un0HVyBNmG2Fpl2++XIsB/NNw UBuv3Wrijo3djP3dHVo= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260324050401 20260222050401 10338 nga.gov. o5rrcy4JXzNC1FNT2HqbYh+VmkqtNr8EkssqkjyXSRlr2/d9U9J4eHGktnQp34dRf+2Dc2s3/vDH ZDbco43KM9b530IUh0U5CQUQXseIGdP3oN48B4PQZ6puJUoD+Y2N/ypXk5yOy9JyIG8NPa0wGiT/ 78J3sD7wXvHK4ACW3qqtaZ0MIdsLgyGPbnbEBObNibgKsDieiMboVvb9ggi+qmhEOnt2XHOKWAlK 5w+DFhs0L7Xx/INhD6lIOy2AIjEexwBV3dxTJwsE7glblfSu1aMAXIJqOMRX5+noMmWqa9ug8dQw gBfSZIl70yiuPcr9QD44QT3AIwLK0ZgbEzlOFg== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260324050401 20260222050401 65355 nga.gov. WCQDlX8DZmI8EotV0JaPZXx3eceFLFWVWsWGuICdQLkKvb6gb6vbcvp3fqMnJdicNT1X6IHdhix0 tCuvjy6SWwYhrqIliXcH6TcaUSbrDesdZ7/r3paJ06LwJWGOqKfk6kNyYiabuemYTs7pOk+m/Jx0 8dmZAW+AproCy/YP+V9rSl1OUZF2f2V+f1e3cvrmpdwUKFzPBM2BEfgNno5mWZKBjrcWDx9+Zc0M w+zAgRcb5UQdKcECpCX+DP+flLoE/NWPxF4WCdcFHoPWy5/MLJ6+nmiFPhSoh8xwrK20l5ke8isP k3jEH9bonDgQqx7GneTUTYk4PSVxPhlg0er5yA== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 66.44.1.44
	;; Response received from [66.44.1.44] 1664 octets ;; HEADER SECTION ;; id = 18758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 208.59.89.9
	;; Response received from [208.59.89.9] 1664 octets ;; HEADER SECTION ;; id = 29048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth4.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 208.59.89.9
	;; Response received from [208.59.89.9] 1664 octets ;; HEADER SECTION ;; id = 40343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.237.14.120
	;; Response received from [207.237.14.120] 1664 octets ;; HEADER SECTION ;; id = 33689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth2.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.11.14
	;; Response received from [207.172.11.14] 1664 octets ;; HEADER SECTION ;; id = 43566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.96.3.153
	;; Response received from [207.96.3.153] 1664 octets ;; HEADER SECTION ;; id = 5833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.96.3.153
	;; Response received from [207.96.3.153] 1664 octets ;; HEADER SECTION ;; id = 6464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260324050401 20260222050401 21537 nga.gov. w1/+vZwm+m46s4wxcU7MfByjqq3vvIBxjEaIxXq+QKrMie6vXlsa+pa0Y3NR/vbxWSv/S7aNQcVY WalgqpPo8TWN17i4F7+Bj8I8pMPVboBxZgpI/A9UnwCC+8d+Y9edOlFHJx8gR084iofE3yixl4UY jXMwgPDKVkaaFUp1sro= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 10338 nga.gov. HWu79F3EVGFgI7pd6JeEszOElgQ6rI2D99cZmZuumAUzSMjPBixptYfpTKmWDnRtwlK3GYpPSt+k xNZk7Lsbg03Vpl9slussyxDKprj0ofuzfe1EYAc8AK/ZGcLxtMrVi2BXN3Glv2PibW5fUWo2uYTN cCQJeY7OzhdjWyPPzmGQLiDwJoARIYFH2tn1Gke7Kuiu0lXqZC3MGL8GwfTO2kbvoN/bOjSFSbGx 12wRNKDWd+ZrpuXumFxNqVZ092gPdVPm7/Mo7r+4Ow4gPCi7uK2RgpbDT9RRD1I9MegSYuqqwo4o 8STMaqhtHBRouLZqkOTGQY2OOZdam3oRjbNDTQ== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260324050401 20260222050401 65355 nga.gov. mAGSOY63oOu65BXChmaDEbKZJM7VpZSZ5fZuRvPZqDMvbjmKr8g0Jt26L3bw8+1tlz8GV0xSxhuI ilqixG9E+7KVuQvlpEHaYleOr1EBldKzhJLgbX6utumAOpZj/evMXKdfSs/93pERXF6JvK/E76n4 ebfXfNPv6wsU0j3zBM/9fjkQNaixxDChiAZLZCyOzK0yU/QhrEol3dhkRz47zdm+XBm8UZU2Gdeg YfqOAKNSrkygRV/GnWXWQIny3WnK2kYV5EaM+ai9iUPHdGsfVaCKCYMShTEj25u3mXln7YVnMzU0 l7a7PkRZH29P0JA9ZQ+x5eFHtafy+jRYBmwCBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260324050401 20260222050401 21537 nga.gov. bX+UiWEivkBHFqERjy87ksa72hf5hcUZ+Q7m68ClW3Oy3IbrBDSA6/6HEudP1XPGDILQVo9sn0sc jdHbpOYsWaQQODYxtkjw4mklnpNGsWPZgaQqqxHCFgAhSXTNlTTc/eRcAyVPMmNOtYnWsWKNMOmy C5t6YlhXVD2xj4965VE= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 10338 nga.gov. dvvr0wCSTSBjqcQMOtPNZvwTMMSm51RmXE7dEHxCicmij7fdLaGNfso2cjOvZXesZay/yxqZZdy6 ECMxe6X69JIRWgx9pJnHQD9K/UrZBIveU8wyAUlrMYmBqW/Q0jnooeS5xST/xAnrgkRGKvhZWjoR +/jRJrNqGw9KM/T+eAnZNhti9Um3knhHvPYitAP7RzpNZtVDm7A1Wj10HDrqUVhqsLMEVPQcoquw /cMychGdYi2kNx9x/0Oc0txHq/FFYUciALdkVHV3aRgEv1RUWRhQPkP8VV2ai3qrhDhTk9S9QVMO upcLs2plOibpxy5mVBfoZtxlsU6f6G4Bkn2tQw== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260324050401 20260222050401 65355 nga.gov. wXTGHabVI367qwt65aXdr8LGlo57GXP7WotzqVeW8Yw/QWP33eNStfKuIH7qVXhZoCh5K9gibB8n MPQH7vo1DEMHWg4Odbb66VLSfabhEe2Y+WtjLz8lzbvXp+D7wN2uVFnE9Ywky5WpeAu90ld/vPLv j4h9vFENFNn9X8+xnJY0OdDnBUhbIPd8Do02TFkrvM9+cQcp7tweuCOmNcpPrkndUCMtngdNDY+r jkkaQZuXGOXmrcU1DL8M8ij56z9VucRwZPy3M2ZGa55U3zPyr5xudqGzMG30SgM9rGbBUH/Dc6iP Pgi6rkHJ7IkWiv//K7x1ArYmqj26oqeoD9VPmg== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NGA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: