DNSSEC Analyzer

Domain Name:

Time: 2020-01-18 13:03:57 UTC, NTP stratum 4

Analyzing DNSSEC problems for PAY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 31256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200201000000 20200111000000 20326 . BWZ/zOwlTZ48dcDdYPH1DhWqARQLeQRQXlBdkjPYgV+A6EIpWvIGjXgaifneRkSg1zxN4hG6SkIO /yUu3aFMcKBlnflIQiXjO64E6sIwbvmFEkeffZGrzdsqTdZI6Fo6oA2wTJrAHoCYBtnuBEb0BmX7 1ZBF/c0d0NghM3mphiXpTBVRiUxQzv+WOa1rqaMXBZuAd1f1hurpnRGhbEB2PhyiyKrmhN1NCrTZ eeV7FVeQeGZq2F76ZusnyRNCm9AgOXa3T9uYQNnnzr5yOcqEE9D4kMWYQrPgV4jpis6imMI8W0jD gEIP8A5Ta3icEP+zsTmeLD5vCQgLNQjSrbhENA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200201000000 20200111000000 20326 . BWZ/zOwlTZ48dcDdYPH1DhWqARQLeQRQXlBdkjPYgV+A6EIpWvIGjXgaifneRkSg1zxN4hG6SkIO /yUu3aFMcKBlnflIQiXjO64E6sIwbvmFEkeffZGrzdsqTdZI6Fo6oA2wTJrAHoCYBtnuBEb0BmX7 1ZBF/c0d0NghM3mphiXpTBVRiUxQzv+WOa1rqaMXBZuAd1f1hurpnRGhbEB2PhyiyKrmhN1NCrTZ eeV7FVeQeGZq2F76ZusnyRNCm9AgOXa3T9uYQNnnzr5yOcqEE9D4kMWYQrPgV4jpis6imMI8W0jD gEIP8A5Ta3icEP+zsTmeLD5vCQgLNQjSrbhENA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to e.root-servers.net for PAY.GOV/A
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for PAY.GOV/A: 'IPv6 transport disabled'
	Received 662 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (662 bytes) ;; HEADER SECTION ;; id = 57691 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 51409 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (406 bytes) ;; HEADER SECTION ;; id = 62186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 957 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (957 bytes) ;; HEADER SECTION ;; id = 15810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200125200254 20200110195754 7698 gov. ovUQVM7cUgmfbmtjJkpEuId1o75aUV6yUr09Jq2fXCgZ4pMxw+DLSbgE5lYQlvATCICIfs8dy8pq yEd2h6T0ak7TTX7kprlnXGhkt8ig91qJPyLfxvMYDDJ4rH2u3iGqAmoc4CZuZFrDyKYwGErW+aYo jh44nCnepZ6bCmLYThR6+Xx2Fn3teoDEdq4RXe1DFukj3+wpMwwsyy6dAuOOcLPBHt+7n1RtEsoC wPbxSq5h38aC0mAXATatsYzlILnslbT+hqhhMwngMHjA4ve4I3jkV02oHBd1gb+dihauB8kz2kHe 4958bVEOLu6jHVfO2io3gfpC8wWJdAquLMiCbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200125200254 20200110195754 7698 gov. ovUQVM7cUgmfbmtjJkpEuId1o75aUV6yUr09Jq2fXCgZ4pMxw+DLSbgE5lYQlvATCICIfs8dy8pq yEd2h6T0ak7TTX7kprlnXGhkt8ig91qJPyLfxvMYDDJ4rH2u3iGqAmoc4CZuZFrDyKYwGErW+aYo jh44nCnepZ6bCmLYThR6+Xx2Fn3teoDEdq4RXe1DFukj3+wpMwwsyy6dAuOOcLPBHt+7n1RtEsoC wPbxSq5h38aC0mAXATatsYzlILnslbT+hqhhMwngMHjA4ve4I3jkV02oHBd1gb+dihauB8kz2kHe 4958bVEOLu6jHVfO2io3gfpC8wWJdAquLMiCbw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	DNSKEY=14320 is now in the chain-of-trust
	Query to d.gov-servers.net for PAY.GOV/A
	Received 368 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (368 bytes) ;; HEADER SECTION ;; id = 5468 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) PAY.GOV. 86400 IN NS ns1.twai.GOV. PAY.GOV. 86400 IN NS ns2.twai.GOV. PAY.GOV. 3600 IN DS 32790 7 1 af59971051860651e04858bb0a113fd14164d652 PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. I1EvzaVSeEBB0pE7ddsi+5hkO3WNZRNjeR7ZAa4Vy7Fc2nBMuDb5INUSLGM0ln1B2/f58HKjkH89 lAUrkr2PgYlxmPNm9vi9jE6Q3red9qSMn0S9xEdOLSgtvYzcnHTybHG2Hcm1oVR4Auyx4GNU4Mlw gY/Vkfsdh8BaAN9BU7zOXak+dE5hZI4nSxVozSBw9pNWn2/4Un3LEAQ8xbhS8Q== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for PAY.GOV/DNSKEY
	Received 368 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (368 bytes) ;; HEADER SECTION ;; id = 62135 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) PAY.GOV. 86400 IN NS ns1.twai.GOV. PAY.GOV. 86400 IN NS ns2.twai.GOV. PAY.GOV. 3600 IN DS 32790 7 1 af59971051860651e04858bb0a113fd14164d652 PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. I1EvzaVSeEBB0pE7ddsi+5hkO3WNZRNjeR7ZAa4Vy7Fc2nBMuDb5INUSLGM0ln1B2/f58HKjkH89 lAUrkr2PgYlxmPNm9vi9jE6Q3red9qSMn0S9xEdOLSgtvYzcnHTybHG2Hcm1oVR4Auyx4GNU4Mlw gY/Vkfsdh8BaAN9BU7zOXak+dE5hZI4nSxVozSBw9pNWn2/4Un3LEAQ8xbhS8Q== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PAY.GOV

PAY.GOV

	Checking DS between GOV and PAY.GOV
	Query to a.gov-servers.net for PAY.GOV/DS
	Received 267 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (267 bytes) ;; HEADER SECTION ;; id = 6629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN DS ;; ANSWER SECTION (2 records) PAY.GOV. 3600 IN DS 32790 7 1 af59971051860651e04858bb0a113fd14164d652 PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. I1EvzaVSeEBB0pE7ddsi+5hkO3WNZRNjeR7ZAa4Vy7Fc2nBMuDb5INUSLGM0ln1B2/f58HKjkH89 lAUrkr2PgYlxmPNm9vi9jE6Q3red9qSMn0S9xEdOLSgtvYzcnHTybHG2Hcm1oVR4Auyx4GNU4Mlw gY/Vkfsdh8BaAN9BU7zOXak+dE5hZI4nSxVozSBw9pNWn2/4Un3LEAQ8xbhS8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for PAY.GOV in the GOV zone
	DS=32790/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`PAY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. I1EvzaVSeEBB0pE7ddsi+5hkO3WNZRNjeR7ZAa4Vy7Fc2nBMuDb5INUSLGM0ln1B2/f58HKjkH89 lAUrkr2PgYlxmPNm9vi9jE6Q3red9qSMn0S9xEdOLSgtvYzcnHTybHG2Hcm1oVR4Auyx4GNU4Mlw gY/Vkfsdh8BaAN9BU7zOXak+dE5hZI4nSxVozSBw9pNWn2/4Un3LEAQ8xbhS8Q== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=32790/SHA-1 is now in the chain-of-trust
	`PAY.GOV. 3600 IN DS 32790 7 1 af59971051860651e04858bb0a113fd14164d652`
	Query to ns1.twai.GOV for PAY.GOV/DNSKEY
	Error querying ns1.twai.GOV/2605:3100:fffc:100:0:0:0:7 for PAY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1237 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1237 bytes) ;; HEADER SECTION ;; id = 19621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAai2hD+O2CH3N2ZTJEBKqagwyTpHB9wqghXoK2g2Z+FnvUA/HYL0IYdaNlUj3fk7bntu+UTM +paJTbIIU1dfNu74r5aY3N6oT7z6++lVuh80Yd8Q8bUO48abCxjdflYnXS2/oxqchFOmITI7md87 c9xNg1NclMR4NYe7+mkkx2P9 ) ; Key ID = 18233 PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbS+BLKpm1jfI9mnNbzWyXsrveyRjZV/gSE4O0Aacm0Z7N5R+GfzGGXokHBRiXvbXjRtEags yjmf60ozpaqfEIYRNEZMOuZZBG/Xx7kNZvh3X8LmNYzaNHQX0yQ9WaAIvlb0zVONdlkCSMj2iF2I SoClOE7vxoNsbXC4r5toZ/VB ) ; Key ID = 34562 PAY.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAa2TmmulICIaNgSTpufxiec7re2io6RnxDWy5hBFPXgThu0TGTPfhELjZuAylZ5WsQ6eUhuJ zxHbKTk6vs42EHeYrDCs/wavxVze7IczgG34W65WA5K4cjfrR6Nrop2had5tKZG9XmfKuRhv+EPs welxN+Q9eEfHuSVQW1pZYIwWL6Rq4sMjtrKEJ+6NJm+oP36JzcVwGeS5hHXm4/OGL7/pGiVrrgUj AefFoiCm7cy/aCLQNdUNvaCNoilUKkAeNWpnFFrRcjdUtMcdIP/3dkaHbzpr0p2d5PmBgXVAAT+t DrpJtiVjVMeXKdL6gqmc9Qw19DMW7rZgOuxE7T4DiaE= ) ; Key ID = 32790 PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200124135036 20200117135036 18233 pay.gov. fK4Z5EwvOQuXexM2F0H9e+d2KjtXui3R/kblHcnOgvQRJ3dyJbdYQYjgd1JRsmV8XKHe4rtuPO93 VlXk8AMf1GYXc+UChDlsXBjno2mLotjvHAwm4RluNqUiRpbjol0EJsWCxFB+m+8pxekelYIzhHeD nEhHS7dVTijY4mopK1c= ) PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200124135036 20200117135036 34562 pay.gov. ItxNTZsXn3A69wniuGfFmLcXIg6LhLXtcX6rLMvvh2fLysFbbwAjnusLfJ6kukdhoquTEaE/e/r8 7A0DUGMsBhvMEGACjprEaUl9oLyGGbo0wEJNq8wxxWSOK/AB/XPwW4Y0/yxXX9pD/wIRuxc6Curz oyF+wb7qcaj+FFHDZg0= ) PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200124135036 20200117135036 32790 pay.gov. boqFpwAMwT+OiKecMBW9nqCN/G3c7Dv0txvLaeuV3Okahgt98noqUTrrR61M+il+FppKMPzLBAtG DAMd7EDXlHebMtT0d0DbzPWvUXz8eUAzNn1kYcbmGbDL3UvYFratjT1zmtkGy92NbJ7x82W7qUdN 5VSdfq2TlMR9shaq2vB6ZWVCM+VaUBRqI/WTDDRRAOQkEetun5yoU3iYr8KwKQZEKxPBi8AJhiPN xXWR6qz8g4EYGIKITEDFgNcjBFbRFoVgTmfSigsO1dKi0KMsEWSDNUpCSunYRE+znCMoEGCLbKsR dcJcKlkQ6e4x5HwDVSrjpcuEsYI60wIFUcOBxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for PAY.GOV
	`PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAai2hD+O2CH3N2ZTJEBKqagwyTpHB9wqghXoK2g2Z+FnvUA/HYL0IYdaNlUj3fk7bntu+UTM +paJTbIIU1dfNu74r5aY3N6oT7z6++lVuh80Yd8Q8bUO48abCxjdflYnXS2/oxqchFOmITI7md87 c9xNg1NclMR4NYe7+mkkx2P9 ) ; Key ID = 18233`
	`PAY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbS+BLKpm1jfI9mnNbzWyXsrveyRjZV/gSE4O0Aacm0Z7N5R+GfzGGXokHBRiXvbXjRtEags yjmf60ozpaqfEIYRNEZMOuZZBG/Xx7kNZvh3X8LmNYzaNHQX0yQ9WaAIvlb0zVONdlkCSMj2iF2I SoClOE7vxoNsbXC4r5toZ/VB ) ; Key ID = 34562`
	`PAY.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAa2TmmulICIaNgSTpufxiec7re2io6RnxDWy5hBFPXgThu0TGTPfhELjZuAylZ5WsQ6eUhuJ zxHbKTk6vs42EHeYrDCs/wavxVze7IczgG34W65WA5K4cjfrR6Nrop2had5tKZG9XmfKuRhv+EPs welxN+Q9eEfHuSVQW1pZYIwWL6Rq4sMjtrKEJ+6NJm+oP36JzcVwGeS5hHXm4/OGL7/pGiVrrgUj AefFoiCm7cy/aCLQNdUNvaCNoilUKkAeNWpnFFrRcjdUtMcdIP/3dkaHbzpr0p2d5PmBgXVAAT+t DrpJtiVjVMeXKdL6gqmc9Qw19DMW7rZgOuxE7T4DiaE= ) ; Key ID = 32790`
	DNSKEY=32790/SEP is now in the chain-of-trust
	DS=32790/SHA-1 verifies DNSKEY=32790/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200124135036 20200117135036 18233 pay.gov. fK4Z5EwvOQuXexM2F0H9e+d2KjtXui3R/kblHcnOgvQRJ3dyJbdYQYjgd1JRsmV8XKHe4rtuPO93 VlXk8AMf1GYXc+UChDlsXBjno2mLotjvHAwm4RluNqUiRpbjol0EJsWCxFB+m+8pxekelYIzhHeD nEhHS7dVTijY4mopK1c= )`
	`PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200124135036 20200117135036 34562 pay.gov. ItxNTZsXn3A69wniuGfFmLcXIg6LhLXtcX6rLMvvh2fLysFbbwAjnusLfJ6kukdhoquTEaE/e/r8 7A0DUGMsBhvMEGACjprEaUl9oLyGGbo0wEJNq8wxxWSOK/AB/XPwW4Y0/yxXX9pD/wIRuxc6Curz oyF+wb7qcaj+FFHDZg0= )`
	`PAY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200124135036 20200117135036 32790 pay.gov. boqFpwAMwT+OiKecMBW9nqCN/G3c7Dv0txvLaeuV3Okahgt98noqUTrrR61M+il+FppKMPzLBAtG DAMd7EDXlHebMtT0d0DbzPWvUXz8eUAzNn1kYcbmGbDL3UvYFratjT1zmtkGy92NbJ7x82W7qUdN 5VSdfq2TlMR9shaq2vB6ZWVCM+VaUBRqI/WTDDRRAOQkEetun5yoU3iYr8KwKQZEKxPBi8AJhiPN xXWR6qz8g4EYGIKITEDFgNcjBFbRFoVgTmfSigsO1dKi0KMsEWSDNUpCSunYRE+znCMoEGCLbKsR dcJcKlkQ6e4x5HwDVSrjpcuEsYI60wIFUcOBxA== )`
	RRSIG=18233 and DNSKEY=18233 verifies the DNSKEY RRset
	RRSIG=34562 and DNSKEY=34562 verifies the DNSKEY RRset
	RRSIG=32790 and DNSKEY=32790/SEP verifies the DNSKEY RRset
	DNSKEY=18233 is now in the chain-of-trust
	DNSKEY=34562 is now in the chain-of-trust
	Query to ns1.twai.GOV for PAY.GOV/A
	Received 386 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (386 bytes) ;; HEADER SECTION ;; id = 55176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (3 records) PAY.GOV. 5 IN A 199.169.192.21 PAY.GOV. 5 IN RRSIG ( A 7 2 5 20200122055038 20200115055038 18233 pay.gov. W8SJ3TAj4jfZx+EDuScal5Ls5bnfL38ad4/j/svqYBsBpkKlr+CGvaS9V+GEnAUaurkqffLgrmc3 WClG/TGp9qHw2bEApgK7knMGROxsuWkO2cfC3FUFFFZKdTOt9cVOsklMMQcwpI0ndZfLRYP/WotT PNuWq3LgylV0Wx3V9fg= ) PAY.GOV. 5 IN RRSIG ( A 7 2 5 20200124135029 20200117135029 34562 pay.gov. M5wXLm0atjQnVtobZLMihuDlDift1S3b8ussCpRNK5EXLXdOd/g8kxHBNOzHlOadTEWxeveAB3VO yQpNu93gtDlBi9uFFjzzkslCiZcADaGLmz+T4w1/WArtBFEcXCYa+lRhiYuVHkrQZXLLz853hUa6 +E3exPxJVSykqa2iO7M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PAY.GOV is authoritative for PAY.GOV
	Found RRSIG signed by pay.gov zone
	Query to ns1.twai.GOV for PAY.GOV/SOA
	Received 2218 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2218 bytes) ;; HEADER SECTION ;; id = 7723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN SOA ;; ANSWER SECTION (3 records) PAY.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019100510 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20200122055053 20200115055053 18233 pay.gov. ow1A0YWFiXJTuRW37egvk2EuHLfD2VCB2fUOLQNLwr75QaeVcSj6fLCIewy5MzEJSl+7zX1NhV7T F+CnV6KqsO8sZcUb9RYHoJQEl2vAvZIJwnI2rDi5tF50YhHwoioBgBgeyrCEcLuxM8mjUZ7plWjW 52mG1vj04dy4j9xl/Fw= ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20200124135030 20200117135030 34562 pay.gov. hufRutwTiapfdSrqYcsc/BSHj1kue6p1SXGCARX+HVePHVlXdhIF+56Z+VbvV74b3u8WDxj2OSxq vk0fyJ/da7PQR+sSApbbGsco15Wu+n9qUhUYUVUrD7dBply4PI8g29Bi3hfvseMadZ4LahRhvp7i HVUVK0SIuUvWiqrTLQ0= ) ;; AUTHORITY SECTION (4 records) PAY.GOV. 30 IN NS ns1.twai.GOV. PAY.GOV. 30 IN NS ns2.twai.GOV. PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20200122055127 20200115055127 18233 pay.gov. in5XMCRkd7seth0OomBsQhOfRrFQ6csWDl4VBjKLaVe2y7WgeIMPvcecesQsoPjft4SaWGckJXkh PkT7lycZpLER726dUpfwQC6WXkol29nqv0JB0gSLa3s6WZ+c9Oafr9XkSlvgEE4ptqO+UoePzmVl GNg/ChehEVLGINdBNvE= ) PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20200124135034 20200117135034 34562 pay.gov. os4BgOBhMgeJBWniF2eUBV/0CLOpxDxc5rPx98FmXtd2wHswvrG8MmvOSdOWXfA2i69JwqghYopX ZT+Ubl611W+adg2C6zq1Qb3wZfSlgLXms0ubZr7xdQQpmueZJZQtR8zHc93UzHaEbIq9EFtuTdGS 8x6KQyi73IVgQVdZ77A= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200122055040 20200115055040 9512 twai.gov. NFkkyz1wWP4yWLTlrIYKr8WapL5+HL48JT2z9eckH8nPvFmB9tp/tpoK1hyghLIOW6UHNZGqtU7F bQVW3ZbAMrdNzsAfu4Iu/NvDNz5ZuGnzOiGN/NPNAR0n9uaTkIel4ndL+ixz07HGMtbkLkjKwc+k cYaoOPhzhTZAOwYw1+o= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200124135029 20200117135029 64247 twai.gov. X2vQExPzQSYyuPf4SoBiGiIQJN4hoxj0JqMdwGqu0OnGAUek7dQIOGxQBlaEfEI91kKZlsPJVxXT C++7Qu5SFS+ki2qPHyvFeCihS9i4skkzzrL8mwK+U+MuIGp8Zy5gdit8B/xg9+FJa0HWWBv2CRMY TJOPCouM45u8JxHkqmk= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200122055040 20200115055040 9512 twai.gov. wp2LE2WtcHcyeMukRPlqkQZKjw0cOgLhKJdIirXqZ3gSchGpycpL6rS35fRt9h8cVJl3O/enWWQ2 8gjv/C+xoAIXRBDL3CtElz/fOw5vjH8w7IpLSPa66vI08lKocdX4IDhUYr52buE56ZHYKQuQAEa1 CyCSKzZ891Ns64U+STQ= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200124135029 20200117135029 64247 twai.gov. OZNEsCYZqsmEs7zIRB2RVklGXTskb3sZ0x52M8/WxSy3WkltA9aUgAGOCeBcnzjhrC4NldZ6xyVJ 7f+haIOZd+lKGZcXBihYPssaWlGsl8TLJfYRkIVhlmLi2a35O1/RaE5p2CCkORXeRWRaYvXUiMu/ P8Sx0mOAKHQQb6OF/q8= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200122055040 20200115055040 9512 twai.gov. m29uFA8PRVewa6qGZ1o7ymra6eeuAUAr9biMwossmBkb+KWGj61lItLinLoZfKQO0hLlOECh7rZN 63YKWkwI/owhkCl965IGSrd9RImSuZuZsKjUlvgf9UeOjFRPvc7AjydKjgPjJeOG7CsiLU0hCOSG hVRSocQaB1V6wROR+QM= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200124135029 20200117135029 64247 twai.gov. LxhJZHFzOXWxM9RP6nFsTdLg/jGSmn1/8uY0voeu5G3dAb4HACJZbdL/F87hyh//1+Q3Bo5SZpe2 MrG/b0kVnY0nRDzQd9g9GFwcNMbS5sLcyPn4IyM8L2VwhG3R2yYQcrvbn5RtkdQ2yTDIVm6wphVg YCdR3iL1cTI9SuEc2r0= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200122055040 20200115055040 9512 twai.gov. TYxx+KYf0aPAG1MB5Rvjmyu5L9fe8b/oAfvzM7MujhiU2UCeZm08WrmRK+l4u0ewy0TCmmFMZXF/ abI32YPCMuFW77THq9j4p44VRe4IrAl1TOX2Zuu/YMJErkvXPEoZApjDyjIbyFXaEp6huf8SOLKR w/aMdWLqU3FO50eqqUQ= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200124135029 20200117135029 64247 twai.gov. a8BdffTzie3q9uP9xID6Tv5tNNcgkmE5glgFYQjmYIjP6pOADM1mOvFN0C7N8ywNnFL/IJnYUD9d DBVaH/xJvnDm9TzIKomRLdA0zZoY1MNwvi6FaKejxKPOs4NY8J+5IsJsimFwORQx+tJL9lXvcZ9r 5Z+rCW/tKSCOw/n3prY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for PAY.GOV/SOA
	Received 2218 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (2218 bytes) ;; HEADER SECTION ;; id = 32790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN SOA ;; ANSWER SECTION (3 records) PAY.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019100510 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20200122055147 20200115055147 18233 pay.gov. ci6iUTHzlssQG3eZtEwV+vXP4xJAoxkXsfR2A7rSHPXyR1xf2MTEyOussFPygh88VgUvazt7ESzq CY2aCGY7+SAIg/2hEn5SlQVpV8rsoLGasHkB49uVwTgSohoCOPsw16DFhHWWdJAOc9ZfyDkl8nBo 8Qy29iyqf+3+rxkvMqI= ) PAY.GOV. 30 IN RRSIG ( SOA 7 2 30 20200124135051 20200117135051 34562 pay.gov. cXh62lozl3NCTRFiZBGz0cm1HMt/JLyK3TXcIZml+yx9nf9d6MRMft9V7XPq1QlSeZApmehKtwG4 xrwgKTk70TPkVGQA94w0Sc4UBIENEVw5b9OU14ccHB2uEHUS3m/z6DV7rCGrmqI37JGwY2zZOkZr dyIKZDBbwBb1zkDtnFk= ) ;; AUTHORITY SECTION (4 records) PAY.GOV. 30 IN NS ns2.twai.GOV. PAY.GOV. 30 IN NS ns1.twai.GOV. PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20200122055107 20200115055107 18233 pay.gov. gi886+ES1PrIdliavrzWPmgpod7HB18reCiVatxDQ6gjeZIi2pcUjTQqXWpGgAQiRow2y2p+Hyyj ga4/PFGUGz/BKMaf5hj27s1DRmPO+pLbsmyU/lKayMqFP5tTdVEY0/rPx5g6Y7yG3/ooo3oJBq/X M8X8yE4+be6HmfRVYuI= ) PAY.GOV. 30 IN RRSIG ( NS 7 2 30 20200124135034 20200117135034 34562 pay.gov. os4BgOBhMgeJBWniF2eUBV/0CLOpxDxc5rPx98FmXtd2wHswvrG8MmvOSdOWXfA2i69JwqghYopX ZT+Ubl611W+adg2C6zq1Qb3wZfSlgLXms0ubZr7xdQQpmueZJZQtR8zHc93UzHaEbIq9EFtuTdGS 8x6KQyi73IVgQVdZ77A= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200122055043 20200115055043 9512 twai.gov. NXFIJqn5AuNPLPGKQwdYoo3Crm3cJTbYVWbK2uTf2BzKoPdhBGCpCdwsqgQtTCxq5qcQJXFmatM+ u2iWyPxl4TJ9NLfITfVCw9mKaS9CtMFDIg2QR20YWAOcMM+GE+WCSRztftmt/lts+xYVzQiCFbCS oW1SdQWJ+SLH0yCkOFQ= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200124135029 20200117135029 64247 twai.gov. X2vQExPzQSYyuPf4SoBiGiIQJN4hoxj0JqMdwGqu0OnGAUek7dQIOGxQBlaEfEI91kKZlsPJVxXT C++7Qu5SFS+ki2qPHyvFeCihS9i4skkzzrL8mwK+U+MuIGp8Zy5gdit8B/xg9+FJa0HWWBv2CRMY TJOPCouM45u8JxHkqmk= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200122055043 20200115055043 9512 twai.gov. OJatake27CWRy20SPgJZwClUOxZfXOzBFXEKE8zuQy1R6twFbOv6kGlxHS0YK25Uq6ooD9Ky5J42 5o2wTqB7I5/5ie5w5ds3ic6DWlgyGz/RP+VoQEyVRh3x8Ftd4NgcU7Mka9DBiNQI09k0/GbYnlwK ZcCjeLDxG0PFOIc47ys= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200124135029 20200117135029 64247 twai.gov. OZNEsCYZqsmEs7zIRB2RVklGXTskb3sZ0x52M8/WxSy3WkltA9aUgAGOCeBcnzjhrC4NldZ6xyVJ 7f+haIOZd+lKGZcXBihYPssaWlGsl8TLJfYRkIVhlmLi2a35O1/RaE5p2CCkORXeRWRaYvXUiMu/ P8Sx0mOAKHQQb6OF/q8= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200122055043 20200115055043 9512 twai.gov. LwX6p91hjiH8lTopAUEwgWo+jqFITjvfYKVqUKgVlCcTkpSsj2qH1M7OL+WUcZFGd7bJIKy3PnYh QO8BdPuWivQ+sptgvDhmTUxA1DaMZjLcgKz6/61xGD83RUqIpbJZTZvaUqStvJboJLkJMN9tPG1+ A0bv0Y9emxm4Qh6ByJQ= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200124135029 20200117135029 64247 twai.gov. LxhJZHFzOXWxM9RP6nFsTdLg/jGSmn1/8uY0voeu5G3dAb4HACJZbdL/F87hyh//1+Q3Bo5SZpe2 MrG/b0kVnY0nRDzQd9g9GFwcNMbS5sLcyPn4IyM8L2VwhG3R2yYQcrvbn5RtkdQ2yTDIVm6wphVg YCdR3iL1cTI9SuEc2r0= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200122055043 20200115055043 9512 twai.gov. RLErQJClW3UFB1fmILxCZ9h5tkWWIzW3Dodc7Q/f3ul4aCgPLR0Lcwxs7s4ZvH4jb8v8xqYkFN2+ P314hLCuZn9AaMOCx/9es9PF1eAewf4zgozAfBEpm0g29QluGfqnUbqaXoYHDRInWBDhjzLFyASR kIni3uJbnEuJ9qTY1Mc= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200124135029 20200117135029 64247 twai.gov. a8BdffTzie3q9uP9xID6Tv5tNNcgkmE5glgFYQjmYIjP6pOADM1mOvFN0C7N8ywNnFL/IJnYUD9d DBVaH/xJvnDm9TzIKomRLdA0zZoY1MNwvi6FaKejxKPOs4NY8J+5IsJsimFwORQx+tJL9lXvcZ9r 5Z+rCW/tKSCOw/n3prY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.twai.GOV for PAY.GOV/A
	Error querying ns1.twai.GOV/2605:3100:fffc:100:0:0:0:7 for PAY.GOV/A: 'IPv6 transport disabled'
	Received 386 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (386 bytes) ;; HEADER SECTION ;; id = 8149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PAY.GOV. IN A ;; ANSWER SECTION (3 records) PAY.GOV. 5 IN A 199.169.192.21 PAY.GOV. 5 IN RRSIG ( A 7 2 5 20200122055037 20200115055037 18233 pay.gov. f6+RU23/g7jHPmNBYD7j9TPO2ABvWt2oJYUHKJspd/EmXz08scvgU4hfBu9LGzy6K7DO4iphDbAP 0T3QqXyzWreh0zszXSH2YLild3mQ/FaEIXtRsUrRqorKRiUAEUtjMleq/xveIdcHpGnLVKv+yJf4 a1UYPtmFTmrw8cba8bE= ) PAY.GOV. 5 IN RRSIG ( A 7 2 5 20200124135030 20200117135030 34562 pay.gov. YDFidPy2p/sj8uzQqn3eINg4D7COCV9aPy4TV4PI80CjBoogBCBW3JrA2QrQA6Aw3WJZSzWApSJV +EB/4x94zWfDEBKEElgVXrWaIueFdwQ43CGpPSZOX/nB3WTTOFNYe1zXr0/pKsuHSiv/niGjSk0O t8dbiN4knU28ra0FTwg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PAY.GOV A RR has value 199.169.192.21
	Found 2 RRSIGs over A RRset
	`PAY.GOV. 5 IN RRSIG ( A 7 2 5 20200122055037 20200115055037 18233 pay.gov. f6+RU23/g7jHPmNBYD7j9TPO2ABvWt2oJYUHKJspd/EmXz08scvgU4hfBu9LGzy6K7DO4iphDbAP 0T3QqXyzWreh0zszXSH2YLild3mQ/FaEIXtRsUrRqorKRiUAEUtjMleq/xveIdcHpGnLVKv+yJf4 a1UYPtmFTmrw8cba8bE= )`
	`PAY.GOV. 5 IN RRSIG ( A 7 2 5 20200124135030 20200117135030 34562 pay.gov. YDFidPy2p/sj8uzQqn3eINg4D7COCV9aPy4TV4PI80CjBoogBCBW3JrA2QrQA6Aw3WJZSzWApSJV +EB/4x94zWfDEBKEElgVXrWaIueFdwQ43CGpPSZOX/nB3WTTOFNYe1zXr0/pKsuHSiv/niGjSk0O t8dbiN4knU28ra0FTwg= )`
	RRSIG=18233 and DNSKEY=18233 verifies the A RRset
	RRSIG=34562 and DNSKEY=34562 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PAY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: