DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-24 10:52:57 UTC, NTP stratum 4

Analyzing DNSSEC problems for PAY.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 8991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to i.root-servers.net for PAY.GOV/A
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for PAY.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (665 bytes) ;; HEADER SECTION ;; id = 58462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (658 bytes) ;; HEADER SECTION ;; id = 14100 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 19956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 27689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for PAY.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for PAY.GOV/A: 'IPv6 transport disabled'
	Received 384 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (384 bytes) ;; HEADER SECTION ;; id = 4992 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) PAY.GOV. 86400 IN NS ns2.twai.GOV. PAY.GOV. 86400 IN NS ns1.twai.GOV. PAY.GOV. 3600 IN DS ( 61299 7 2 839153a49954ae588c85c542eed5df901c734d773d4d72364c9a2eb7a3e81106 ) PAY.GOV. 3600 IN DS 61299 7 1 406d3c4271c6c0c54982e00dbf679069bcab69f6 PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. w/7m4yIrZ/waI8x4dKvPVUq+eS5K32Ii9xMnrHpkIQEDI/pKTBYk+Skn3QLYweembjftMwd6KRDO 00Z8ehisaEtQK2sauLktGhbDsuKhu0tF10b+Yzo0/120Pp+qg4Afd84q4plm/CQbrUygRYmh+kMV bN77cdsS8MwnpYOZoAY= ) ;; ADDITIONAL SECTION (4 records) ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ns1.twai.GOV. 86400 IN A 199.169.194.28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for PAY.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for PAY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 384 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (384 bytes) ;; HEADER SECTION ;; id = 65507 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) PAY.GOV. 86400 IN NS ns2.twai.GOV. PAY.GOV. 86400 IN NS ns1.twai.GOV. PAY.GOV. 3600 IN DS ( 61299 7 2 839153a49954ae588c85c542eed5df901c734d773d4d72364c9a2eb7a3e81106 ) PAY.GOV. 3600 IN DS 61299 7 1 406d3c4271c6c0c54982e00dbf679069bcab69f6 PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. w/7m4yIrZ/waI8x4dKvPVUq+eS5K32Ii9xMnrHpkIQEDI/pKTBYk+Skn3QLYweembjftMwd6KRDO 00Z8ehisaEtQK2sauLktGhbDsuKhu0tF10b+Yzo0/120Pp+qg4Afd84q4plm/CQbrUygRYmh+kMV bN77cdsS8MwnpYOZoAY= ) ;; ADDITIONAL SECTION (4 records) ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ns1.twai.GOV. 86400 IN A 199.169.194.28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PAY.GOV

PAY.GOV

	Checking DS between GOV and PAY.GOV
	Query to d.gov-servers.net for PAY.GOV/DS
	Received 283 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (283 bytes) ;; HEADER SECTION ;; id = 19237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN DS ;; ANSWER SECTION (3 records) PAY.GOV. 3600 IN DS 61299 7 1 406d3c4271c6c0c54982e00dbf679069bcab69f6 PAY.GOV. 3600 IN DS ( 61299 7 2 839153a49954ae588c85c542eed5df901c734d773d4d72364c9a2eb7a3e81106 ) PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. w/7m4yIrZ/waI8x4dKvPVUq+eS5K32Ii9xMnrHpkIQEDI/pKTBYk+Skn3QLYweembjftMwd6KRDO 00Z8ehisaEtQK2sauLktGhbDsuKhu0tF10b+Yzo0/120Pp+qg4Afd84q4plm/CQbrUygRYmh+kMV bN77cdsS8MwnpYOZoAY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for PAY.GOV in the GOV zone
	DS=61299/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=61299/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. w/7m4yIrZ/waI8x4dKvPVUq+eS5K32Ii9xMnrHpkIQEDI/pKTBYk+Skn3QLYweembjftMwd6KRDO 00Z8ehisaEtQK2sauLktGhbDsuKhu0tF10b+Yzo0/120Pp+qg4Afd84q4plm/CQbrUygRYmh+kMV bN77cdsS8MwnpYOZoAY= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=61299/SHA-1 is now in the chain-of-trust
	`PAY.GOV. 3600 IN DS 61299 7 1 406d3c4271c6c0c54982e00dbf679069bcab69f6`
	`PAY.GOV. 3600 IN DS ( 61299 7 2 839153a49954ae588c85c542eed5df901c734d773d4d72364c9a2eb7a3e81106 )`
	Query to ns1.twai.GOV for PAY.GOV/DNSKEY
	Error querying ns1.twai.GOV/2605:3100:fffc:100:0:0:0:7 for PAY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1237 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1237 bytes) ;; HEADER SECTION ;; id = 39367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbRNV8KzYqeIYIQZh/+2jespuYI0EPKdLSQmvZvkT43pl6m0av+VVYeE5GurDAE0bAcnP/e4 avJe4xKFWYTAEoC2MiES20JfSo0c6uAtOVJ8HiwiWCszHmg1VFX7CNdyuWxKYXpksRmlBTNemXWo ojj8CSqWGnv7wTeFOwSyJrkZ ) ; Key ID = 25715 PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAeXVSOcjOrghF6wORWvM2R4ntNA2Mrm64mJ3+8peCxttC307PI6XVoMq/2y/r3Tg6ospRztT PLPJHK5cJS8bnWKTZFZQY0OnQ3IMjJlB2adQbLjndMzIAwjmBpF4oY5GH7q2DinnU1kGtw4/ocwN TW8MLQu/RW/wTAjr6fmSFXSx ) ; Key ID = 27617 PAY.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbLbPp9Fb1F3HKbwzfTkJzLELZAzefARPO0oiMBL2QK5Qu2i4CtVyV+OHvaY/kF2uR2sAZPI B9iDmRK5UrTF18xijEKQ2hXwCmR99NOlObilf4jO/nQOrvWYhnc7M6Imtpyl/Y9sVq5I5LpwOX5a ngX/cKCxnNoffHk8Y3szPnckqYBCZC3TD22sV1H2XVBnu6dhw01aniyPTwMls44so6Hf+FvxOxSm iBQ8buXx64ME5aN5QC5KFLCMjNTyxkqZyFAQPlyhtSXV2pWlIufw7/GbjrPVSiWyICZQcbz7owzY Nantq1noTDkQH0iUAYZBMe2AsGUz7jcWx8MX/C4gAE0= ) ; Key ID = 61299 PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501055034 20190424055034 25715 pay.gov. SabjPIQlg/m1Tx6Zd4nYENgnlCSdfnS5Z0wBwpd0TnWHtgVNNyZ0crE8WqnaHCABrV7gAe/nP/ge BOKBpepuOHi+GFWE09aoBej55nT1wm5KqFkRoAzPulIyyQM3BBm6D3W2LsAjxL3pf9aPwDB0cweW ze9eKz/qaal9moUqvYw= ) PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501055034 20190424055034 27617 pay.gov. EmaV6H0GNVgvPUn/sdpcwwi0DlzkZNUDE6s2Cl3/kI+VkneuQv7GccdKo4GRWD+WYIRipVphfynV YlRhaDSs7FBdhvjpmacHU5esKJtczpJtJ5HC4mj0yfksSeaR5ZL/ZakN/9Y+1hzTSk1rqPYVfD1Q mfFb8DirRTUaN49xzgI= ) PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501055034 20190424055034 61299 pay.gov. lNTZBP3GEtjvgaC19anVQJ10WrgvHxYVwB0cVqu+icn+otXgTMJGXjS2ItyoEXTICUAFblZkr/6+ Ye+JCjFAAeCff2ycgiGWw4zRkb5XxYDoXc3sjNUjW8cP9WugjoSeTT/tmiV2664fLCyigBTWFcnK ldfYPk3ezu+9uaMgrMRmi8c29I5zWJoUdyHIxrOu7VRKG7zcJ+ojFJj8KDktsZMv8jMKgMOtRnyj 4b/xMo300m/bPyMEBIt3kWU9XoXrijc5SY6kVvK8OQ2Zx7rk6iZIpcgPcKhfJAUY0AAFLUje5hv9 6LDzUoHgr+wFqfKQF5Gp2su3swZQ+gerqpT9cA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for PAY.GOV
	`PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbRNV8KzYqeIYIQZh/+2jespuYI0EPKdLSQmvZvkT43pl6m0av+VVYeE5GurDAE0bAcnP/e4 avJe4xKFWYTAEoC2MiES20JfSo0c6uAtOVJ8HiwiWCszHmg1VFX7CNdyuWxKYXpksRmlBTNemXWo ojj8CSqWGnv7wTeFOwSyJrkZ ) ; Key ID = 25715`
	`PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAeXVSOcjOrghF6wORWvM2R4ntNA2Mrm64mJ3+8peCxttC307PI6XVoMq/2y/r3Tg6ospRztT PLPJHK5cJS8bnWKTZFZQY0OnQ3IMjJlB2adQbLjndMzIAwjmBpF4oY5GH7q2DinnU1kGtw4/ocwN TW8MLQu/RW/wTAjr6fmSFXSx ) ; Key ID = 27617`
	`PAY.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbLbPp9Fb1F3HKbwzfTkJzLELZAzefARPO0oiMBL2QK5Qu2i4CtVyV+OHvaY/kF2uR2sAZPI B9iDmRK5UrTF18xijEKQ2hXwCmR99NOlObilf4jO/nQOrvWYhnc7M6Imtpyl/Y9sVq5I5LpwOX5a ngX/cKCxnNoffHk8Y3szPnckqYBCZC3TD22sV1H2XVBnu6dhw01aniyPTwMls44so6Hf+FvxOxSm iBQ8buXx64ME5aN5QC5KFLCMjNTyxkqZyFAQPlyhtSXV2pWlIufw7/GbjrPVSiWyICZQcbz7owzY Nantq1noTDkQH0iUAYZBMe2AsGUz7jcWx8MX/C4gAE0= ) ; Key ID = 61299`
	DNSKEY=61299/SEP is now in the chain-of-trust
	DS=61299/SHA-1 verifies DNSKEY=61299/SEP
	DS=61299/SHA-256 verifies DNSKEY=61299/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501055034 20190424055034 25715 pay.gov. SabjPIQlg/m1Tx6Zd4nYENgnlCSdfnS5Z0wBwpd0TnWHtgVNNyZ0crE8WqnaHCABrV7gAe/nP/ge BOKBpepuOHi+GFWE09aoBej55nT1wm5KqFkRoAzPulIyyQM3BBm6D3W2LsAjxL3pf9aPwDB0cweW ze9eKz/qaal9moUqvYw= )`
	`PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501055034 20190424055034 27617 pay.gov. EmaV6H0GNVgvPUn/sdpcwwi0DlzkZNUDE6s2Cl3/kI+VkneuQv7GccdKo4GRWD+WYIRipVphfynV YlRhaDSs7FBdhvjpmacHU5esKJtczpJtJ5HC4mj0yfksSeaR5ZL/ZakN/9Y+1hzTSk1rqPYVfD1Q mfFb8DirRTUaN49xzgI= )`
	`PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501055034 20190424055034 61299 pay.gov. lNTZBP3GEtjvgaC19anVQJ10WrgvHxYVwB0cVqu+icn+otXgTMJGXjS2ItyoEXTICUAFblZkr/6+ Ye+JCjFAAeCff2ycgiGWw4zRkb5XxYDoXc3sjNUjW8cP9WugjoSeTT/tmiV2664fLCyigBTWFcnK ldfYPk3ezu+9uaMgrMRmi8c29I5zWJoUdyHIxrOu7VRKG7zcJ+ojFJj8KDktsZMv8jMKgMOtRnyj 4b/xMo300m/bPyMEBIt3kWU9XoXrijc5SY6kVvK8OQ2Zx7rk6iZIpcgPcKhfJAUY0AAFLUje5hv9 6LDzUoHgr+wFqfKQF5Gp2su3swZQ+gerqpT9cA== )`
	RRSIG=25715 and DNSKEY=25715 verifies the DNSKEY RRset
	RRSIG=27617 and DNSKEY=27617 verifies the DNSKEY RRset
	RRSIG=61299 and DNSKEY=61299/SEP verifies the DNSKEY RRset
	DNSKEY=25715 is now in the chain-of-trust
	DNSKEY=27617 is now in the chain-of-trust
	Query to ns2.twai.GOV for PAY.GOV/A
	Received 386 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (386 bytes) ;; HEADER SECTION ;; id = 3317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (3 records) PAY.GOV. 5 IN A 199.169.192.21 PAY.GOV. 5 IN RRSIG ( A 7 2 5 20190428215021 20190421215021 25715 pay.gov. feiUzk8VKNS4sz9Ww9vT8eW0oLiR234nr1jMople1bPicnmGe3SBLo3QIGA/wzlgqOO+VdtNAirM nuzqFibSvnkziMWOI+K5/M+YLv/6drhJgMLofFYDmcRwFW5dkUQNxC1jsanAAVFYFLiQNJhImEuf +T6cV0DYcBJIB/BgXoY= ) PAY.GOV. 5 IN RRSIG ( A 7 2 5 20190501055016 20190424055016 27617 pay.gov. dXR9wb5Sc6wJiFQAdNJJY9/dyjWUNOMNBqtD9sb4HpvbMkeioTY9w+j/9t9AY9NzlQ31fwiiqi3q IwpRas4VR5p6NX5U6G5VhIMGJ9DbvHztmpiWkRDcsi+a4V4Tlq3bLoi/akVjopwx/GRjsZ35MB9N ADby6M/n3MsHLil+Ono= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PAY.GOV is authoritative for PAY.GOV
	Found RRSIG signed by pay.gov zone
	Query to ns1.twai.GOV for PAY.GOV/SOA
	Received 2218 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2218 bytes) ;; HEADER SECTION ;; id = 57784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN SOA ;; ANSWER SECTION (3 records) PAY.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2018101601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20190428215027 20190421215027 25715 pay.gov. n7fQ7WGFR70mLT1KiYz1Q1d0Uxz8SWBqnUIERbQGGIYxK64qffoqencVAIeRhA0Va5PGviMFsSPR a5QlyAoC/cW7Xtxzjf3HZG4lFo5STedZZHYQpyHOZDb1pRoWd5Ksm1b6XVXa9i2k3tNtN54+os5Q BlBOf/FW03tTB7KcI0M= ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20190501055019 20190424055019 27617 pay.gov. XhqwpNHFcMbUgttX7WQdYXhcEiji2dFCW1zUC74KvjHzbWw9b2tlSXOdmJCgpbjAVaIxBM/JSYa7 BBKWqOh03pMoZw8FEJ9HYINtdald7fgxwCDA7rJa/zz/iKtdvaAel3kBCZmDMegCC4SxYLCmvyP6 JqmtGptz19aL3tKVwPA= ) ;; AUTHORITY SECTION (4 records) PAY.GOV. 30 IN NS ns2.twai.GOV. PAY.GOV. 30 IN NS ns1.twai.GOV. PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20190428215027 20190421215027 25715 pay.gov. FYTV8nCL+7BZJjLtqTxH/Wjq/o4p2HgYzuNSwv9E2Y2x9biv/L7FFJHwnYbSiDljOTMrV7gzVCKI cjmprFPTVOTNOT6ueReKJ8JuoQyi4o2x8H07DkOPvT5UYK38PW7Mf1PiLhZH95pkRmh4ze0bRVMa F4Fbf7gGEcwDrXsNtrU= ) PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20190501055018 20190424055018 27617 pay.gov. aHpLr0ENfHDUDCihDH9o15143uX1GV1FuJsX9ieLa3Rl6LPPN/9HG8xzp/bJiwwHafwd1cAFcKCw N8Cr61Zhb9J3UlHsz0jhPNB7QDjIBTQibl9XOGvvMlfg9k0baYZ/u7MpcwUOfOVzJnk/9Fn4PryU DphLHNOHmj8N+VWq5/E= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190428215027 20190421215027 22478 twai.gov. W49iiyMdDwrEwFxh2jeJnfUWcKX8YVPBFZ4IGDpoLJFkj2+rWsNoiVzzu8vWtXeQGTQw4tSdNzRx GOt5T1G/LUK0VVMfX8lA1pBCusFMd8U3CQASjd8dHPknWb0ixX2hm12jwF2ErTNF4GdsGNLCmOLd U8RJEfppYOKSa+UVTps= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190501055016 20190424055016 12287 twai.gov. mpfUlvmu1DyCFZUxbZeWOn27ydDaREybEXKC2LL6KTxN89UAACVDoVgJ66tkYSm7obYqZpvQ6w/1 eFxLxrM1M8xUdaPD/ZB4PqCsa3/xPjDvD9l1/l5cIQVD4G2vYCueOGRlGBrwvZVlro2FFk0b1Hhe u4obRi+UUc34YptkhJ0= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190428215027 20190421215027 22478 twai.gov. fjjVihQWGsGGKgHEC/cORF08M7whsEI0raVwFCw0nKSls4q3PaCme1CAyXAd1fQn3SRx1UCobHmO AaHMf+aG7DgdYrvQfbVTABVozLYBhuTsrjDsl9RHXHAVH1YYYRpxJOXRqN75HMWW1Ri0Hof+CgCj IpYyqCsFIdHwbPqC9tA= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190501055016 20190424055016 12287 twai.gov. sfMThOfyycbSuplhomhmUT/pLOpLbJ0PcyQrm2/K9Ho7OgqHdThCH1Lsw7+o67mTaznAMzbDkUFG l4SBW7NNAxy8XZkyoAEbSlFd/yGJK1iASOWYyE8NYdszN0LNSAbFR1Q0ydIXxBpJQDfLz7R/ZhuU bjPxOZmeegHzy6rL1/w= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190428215027 20190421215027 22478 twai.gov. K/wyZJK+zF2gvRdi6kZocpfxV1mQO+92wZtTBUF0P2Hd74DB3h4yMx50rfxjx15EgRRKzi3U8PVt LVB5u5Aj+QTYeXJX3SP7chbAAqln6HtG0X7oOhweuowihljj5fxFyZoKNAOHfDa08D/9lDco6YOt nlG26fFURifMNQPGG7o= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190501055016 20190424055016 12287 twai.gov. C/czKEP0/O+NifUBqkYBM3QgoqAfGhLGBwXezOS6NzjiEg3kVVuVtRgd+0OyZmKnNLMkjbkaqocf 9MfiKXiWrG0ggBkwIkS7imk4dICd6PQhvXJyERrn7U2T8DqExQmrsVkZRaCrG00y5rgJInRz7WYx G2DOz6/01WC6dxV/wKI= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190428215027 20190421215027 22478 twai.gov. Rw4TvSjnBRLw6Wk68f9qG2V8XHqxPqeEtw/gTEdPPWSAW0uofwRUPLky0bzqpzX3+ee6x/SJfV5j fgHAnWsNE+phWr0sxks7xK1reJGBaKOjkETVx71bNuvSrCXQvwE1W5spuK1R/0BM/+FJJqeXTZTq 8rCh/Fj9jLfcwJTJx2U= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190501055016 20190424055016 12287 twai.gov. Xlz1kdn3xBwx6pgJXk4xqZMnyOAWTXN4iIg6L/lVp7Vvvyrr3eOX4/5sIxgvolweXPFnL47lkWJc IwHd1bmG3csjCGqKvCMYIl5w7ikjqrAyxRpEAZ3TmbuG0qAx0f4aAWiWxNB4tjpb3ejyUIGq7daE WhJYIZNvmUC4p0Qy9LE= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for PAY.GOV/SOA
	Received 2218 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (2218 bytes) ;; HEADER SECTION ;; id = 18920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN SOA ;; ANSWER SECTION (3 records) PAY.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2018101601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20190428215025 20190421215025 25715 pay.gov. Vmz7Ky7Fwe5Eu9DHys2pqPoynMTURYkRpQ4mDjFvN9p3s+uCVFoiD+BZoWLTeR7+4JGfCbHyxY2/ 7y0YeGBjUU74foVAFB/d+rEsPh6xcBnroXKuZnhsiPkQbnX7ZFs7AdmXTHb3B3mnO2g0WhxQEBG/ H6pQGs4/OY0BbbrtaI0= ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20190501055018 20190424055018 27617 pay.gov. fF0srvzgm5GGtKDt+FZoaVuL/Wq1YKv2T30/blLLDZLvo/TsXw2jS2oC8rrgy5y2w33dkP2rcqSa gh3Mvk954gDMEi8FA86OdVZ0Fa+nndqsuYv6GFt0K9e8Fu+pyp+iEsFY3Dg77jrcPVaPQl0Y+8sD AnEoS/4Ue4uPIBNvm6k= ) ;; AUTHORITY SECTION (4 records) PAY.GOV. 30 IN NS ns2.twai.GOV. PAY.GOV. 30 IN NS ns1.twai.GOV. PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20190428215025 20190421215025 25715 pay.gov. mtxEMX4x2l6auvkt/tTnj5yfOXnkf8rqbn83+dFnhc7KGEVzfn01AC/fw9jbgw9J/SM4lv1jThls M8OUj4eHlRVU9k0o9U1wsvCnGGzz3e2MJW0VbG9N2lgLp2YsBdn2LVbHq6mKmGDbi+12RQ2B+GfP tPNdMXcFv42huTGP5Ug= ) PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20190501055018 20190424055018 27617 pay.gov. aHpLr0ENfHDUDCihDH9o15143uX1GV1FuJsX9ieLa3Rl6LPPN/9HG8xzp/bJiwwHafwd1cAFcKCw N8Cr61Zhb9J3UlHsz0jhPNB7QDjIBTQibl9XOGvvMlfg9k0baYZ/u7MpcwUOfOVzJnk/9Fn4PryU DphLHNOHmj8N+VWq5/E= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190428215025 20190421215025 22478 twai.gov. gsseY3prd1h4IP3VXXgeB6xQ6fNgG7YdEQkNglph7KBZ5VYOrEX14TTyNNGI433qvzzVISRVSJfa psDmcP3B/SyPquEBczeGXCVfJ5rAH5F7vHyZ3t5jP+0p7SJ+wo7jQlUlkIc340eNGu2WinIc+ZGg oolC5aFfTFbtG0DwCeQ= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190501055018 20190424055018 12287 twai.gov. nQNUWxAfAuPPvNGshQejSXvDVmeUoXT2PFvue9pNyrFJ6/xU8Ms9/SMuEX8rQGJXXOKWm66/eUTr 6Sd4kNRV+9nnFllvigvydKIdTqkthws7UZjz/00oyuYGMbD/oy2UZslkhtQtobAo0kRmZfYO1T6w IcHinIQzlrq1CSHwwYE= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190428215025 20190421215025 22478 twai.gov. A9E42CR71zFE/SBTlBqo26lKS5rguRNPev0upBPeOEUwBuvYlZGetdrEbEhbHwCoeBIB5+6TsGhM lOnjnCKURXdLxbUDV+hAnY7Wjwu96wuqVKnhjlp/EJH4kdmxMQfjIPDlrnDg1eEGnqbdms1h86Dc NBTNbpTyUusxZXYqsEw= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190501055018 20190424055018 12287 twai.gov. AnlsdfPaYPkufxCKg/2c36SYyzoRX5DgJPpTJhHbv+N+JfYB1v0reLWeVIsUGdWC/Y5eCeA8Pg/Q oa4BqB0OQW6DcauV5kHKySwI34fRosESHYyGnemhg23V8IBgay5GNq6LEwZhC76CuwDtK/MCU2g4 PILodn2UPp2rBaTL1Iw= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190428215025 20190421215025 22478 twai.gov. pTp5+5fzucaSqqDKn8jwsFJUvYV2KA+9f1FSvziR750K5G2lCGKpnzUdZC+fuyvP2iRfNNPgSUXo GCOWRBv8Gk5HPs31N5WwsSqHwl59YWfL7s6MzPoNnhzzlDZz5gIfHTaUYXZNvRbr+dWfL5wo7+7E UmZBQKV/HevHKv5O/U4= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190501055018 20190424055018 12287 twai.gov. e2TsVVLh4VEaAhEpKMNr4eBn7cqrTmPM7hLZ/sHo/EfMsHMbFOKTMRVxWEvODXQN0UdiwKbaUwWG tXq7Y7VU6qgy8RT8T7D01H0eItMR1nDX5v1GgpFRlmbNn2zQi9xRIFZ9l+TI4Iziyk4Fp2VG5tpm jDEkU0SLCkMdP0DrTGM= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190428215025 20190421215025 22478 twai.gov. YvyU0CbFwXD9eLrffpVuP2F4KsNoe49BqgDXofoH1sOXQvzD32iorwF4u7viEW7xe3NTbz2XMWR6 s4zffojOIN1e9B5YyPfSYr/u+zR8RVcOIXE+vmu+UZelEYKisqF2/j7k5UxO0HNNbmmh8Z+9dpxi oh0Ey3dpcEjSdi74J7A= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190501055018 20190424055018 12287 twai.gov. uy+JAO21z4tBKNlGdZPS1MRHWkLp0vd6ye+timIhAJIxsG+VJT+9wr/OeqrZK3KRAUsFvuart18h 9ZJRtiLHULxHvbaleWC1pb1bPkceAf5co5yjff0x0/it1a9ARW+V5qke8CA0S/SGJuX+b1uetOTg J2wHIuwub5/g+f8Rzco= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for PAY.GOV/A
	Error querying ns2.twai.GOV/2605:3100:fffd:100:0:0:0:7 for PAY.GOV/A: 'IPv6 transport disabled'
	Received 386 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (386 bytes) ;; HEADER SECTION ;; id = 36216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (3 records) PAY.GOV. 5 IN A 199.169.192.21 PAY.GOV. 5 IN RRSIG ( A 7 2 5 20190428215021 20190421215021 25715 pay.gov. feiUzk8VKNS4sz9Ww9vT8eW0oLiR234nr1jMople1bPicnmGe3SBLo3QIGA/wzlgqOO+VdtNAirM nuzqFibSvnkziMWOI+K5/M+YLv/6drhJgMLofFYDmcRwFW5dkUQNxC1jsanAAVFYFLiQNJhImEuf +T6cV0DYcBJIB/BgXoY= ) PAY.GOV. 5 IN RRSIG ( A 7 2 5 20190501055016 20190424055016 27617 pay.gov. dXR9wb5Sc6wJiFQAdNJJY9/dyjWUNOMNBqtD9sb4HpvbMkeioTY9w+j/9t9AY9NzlQ31fwiiqi3q IwpRas4VR5p6NX5U6G5VhIMGJ9DbvHztmpiWkRDcsi+a4V4Tlq3bLoi/akVjopwx/GRjsZ35MB9N ADby6M/n3MsHLil+Ono= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PAY.GOV A RR has value 199.169.192.21
	Found 2 RRSIGs over A RRset
	`PAY.GOV. 5 IN RRSIG ( A 7 2 5 20190428215021 20190421215021 25715 pay.gov. feiUzk8VKNS4sz9Ww9vT8eW0oLiR234nr1jMople1bPicnmGe3SBLo3QIGA/wzlgqOO+VdtNAirM nuzqFibSvnkziMWOI+K5/M+YLv/6drhJgMLofFYDmcRwFW5dkUQNxC1jsanAAVFYFLiQNJhImEuf +T6cV0DYcBJIB/BgXoY= )`
	`PAY.GOV. 5 IN RRSIG ( A 7 2 5 20190501055016 20190424055016 27617 pay.gov. dXR9wb5Sc6wJiFQAdNJJY9/dyjWUNOMNBqtD9sb4HpvbMkeioTY9w+j/9t9AY9NzlQ31fwiiqi3q IwpRas4VR5p6NX5U6G5VhIMGJ9DbvHztmpiWkRDcsi+a4V4Tlq3bLoi/akVjopwx/GRjsZ35MB9N ADby6M/n3MsHLil+Ono= )`
	RRSIG=25715 and DNSKEY=25715 verifies the A RRset
	RRSIG=27617 and DNSKEY=27617 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PAY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: