DNSSEC Debugger - SCIENCE.GOV

Domain Name:

Time: 2025-07-03 05:43:40 UTC

Analyzing DNSSEC problems for SCIENCE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 37724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to h.root-servers.net for SCIENCE.GOV/A
	Received 618 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 618 octets ;; HEADER SECTION ;; id = 49974 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20250716050000 20250703040000 46441 . V/NndFuj2k1NZcHZd2zdaWXg8AJqCY+YmQOcTEG5lBDq/gdJncCqY4042oYePA71chsQUZA9qsGB 3+MBCpZ5Hd9eCfpsa+dKuxf05JRpCY8wrMEi4SmociOxpwr8cu0HKrvGIfpRNkwf39dNWxPVkUI6 KzA0n9u2mg2MuLZ8/CifPUtlvshlqjG7zpjcwPJO6WZthEztn0HBX18Sw5jDMQjZgH1SySaMeS7s UmxTaDJbR9bmrC9nIT7XmNls1Wt8iZ9au+w3CHSzFCb/1Qv8iS4oVUhmXC5RzUJbqVBEdMRYxnYS Jf333LRzol5TJEH6DHFsJDVZ0LIkzv3+XLfQhQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 616 octets ;; HEADER SECTION ;; id = 36963 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250716050000 20250703040000 46441 . V/NndFuj2k1NZcHZd2zdaWXg8AJqCY+YmQOcTEG5lBDq/gdJncCqY4042oYePA71chsQUZA9qsGB 3+MBCpZ5Hd9eCfpsa+dKuxf05JRpCY8wrMEi4SmociOxpwr8cu0HKrvGIfpRNkwf39dNWxPVkUI6 KzA0n9u2mg2MuLZ8/CifPUtlvshlqjG7zpjcwPJO6WZthEztn0HBX18Sw5jDMQjZgH1SySaMeS7s UmxTaDJbR9bmrC9nIT7XmNls1Wt8iZ9au+w3CHSzFCb/1Qv8iS4oVUhmXC5RzUJbqVBEdMRYxnYS Jf333LRzol5TJEH6DHFsJDVZ0LIkzv3+XLfQhQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 40050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20250716050000 20250703040000 46441 . V/NndFuj2k1NZcHZd2zdaWXg8AJqCY+YmQOcTEG5lBDq/gdJncCqY4042oYePA71chsQUZA9qsGB 3+MBCpZ5Hd9eCfpsa+dKuxf05JRpCY8wrMEi4SmociOxpwr8cu0HKrvGIfpRNkwf39dNWxPVkUI6 KzA0n9u2mg2MuLZ8/CifPUtlvshlqjG7zpjcwPJO6WZthEztn0HBX18Sw5jDMQjZgH1SySaMeS7s UmxTaDJbR9bmrC9nIT7XmNls1Wt8iZ9au+w3CHSzFCb/1Qv8iS4oVUhmXC5RzUJbqVBEdMRYxnYS Jf333LRzol5TJEH6DHFsJDVZ0LIkzv3+XLfQhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20250716050000 20250703040000 46441 . V/NndFuj2k1NZcHZd2zdaWXg8AJqCY+YmQOcTEG5lBDq/gdJncCqY4042oYePA71chsQUZA9qsGB 3+MBCpZ5Hd9eCfpsa+dKuxf05JRpCY8wrMEi4SmociOxpwr8cu0HKrvGIfpRNkwf39dNWxPVkUI6 KzA0n9u2mg2MuLZ8/CifPUtlvshlqjG7zpjcwPJO6WZthEztn0HBX18Sw5jDMQjZgH1SySaMeS7s UmxTaDJbR9bmrC9nIT7XmNls1Wt8iZ9au+w3CHSzFCb/1Qv8iS4oVUhmXC5RzUJbqVBEdMRYxnYS Jf333LRzol5TJEH6DHFsJDVZ0LIkzv3+XLfQhQ== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 28553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for SCIENCE.GOV/A
	Received 351 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 351 octets ;; HEADER SECTION ;; id = 15307 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) SCIENCE.GOV. 10800 IN NS edns1.ultradns.biz. SCIENCE.GOV. 10800 IN NS edns1.ultradns.com. SCIENCE.GOV. 10800 IN NS edns1.ultradns.net. SCIENCE.GOV. 10800 IN NS edns1.ultradns.org. SCIENCE.GOV. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6 SCIENCE.GOV. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db ) SCIENCE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250704064340 20250702044340 35496 gov. yHynLgumPLzsEy8e2DFk39eSCinXWR/81Eg5+vTcsSwwwlyMNgkY5qPkm+TGM3Podn7nQ53Z7SQX Jz+D3H8euA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for SCIENCE.GOV/DNSKEY
	Received 351 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 351 octets ;; HEADER SECTION ;; id = 34696 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) SCIENCE.GOV. 10800 IN NS edns1.ultradns.biz. SCIENCE.GOV. 10800 IN NS edns1.ultradns.com. SCIENCE.GOV. 10800 IN NS edns1.ultradns.net. SCIENCE.GOV. 10800 IN NS edns1.ultradns.org. SCIENCE.GOV. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6 SCIENCE.GOV. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db ) SCIENCE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250704064340 20250702044340 35496 gov. VKzQNUEWxT0+nXQkCGtHRFO301XecXo4l9E526kqUgq6tMDOZ2E9RJoj6jsMwhZstUX+SeRcuF0s rmR4jbucRA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone SCIENCE.GOV

SCIENCE.GOV

	Checking DS between GOV and SCIENCE.GOV
	Query to b.ns.gov for SCIENCE.GOV/DS
	Received 223 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 223 octets ;; HEADER SECTION ;; id = 38360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN DS ;; ANSWER SECTION (3 records) SCIENCE.GOV. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6 SCIENCE.GOV. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db ) SCIENCE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250704064340 20250702044340 35496 gov. OkDF5q9z4Yf4X3sQLhGC/dH6P/4cIDjs9A2gr0JfsKKFsMo8LM0BJsdK2PkrtYKUaYuNrSVK5eYc Hbq8Qeb60A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for SCIENCE.GOV in the GOV zone
	DS=52349/SHA-1 uses a deprecated digest algorithm
	DS=52349/SHA-1 has algorithm ECDSAP256SHA256
	DS=52349/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`SCIENCE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250704064340 20250702044340 35496 gov. OkDF5q9z4Yf4X3sQLhGC/dH6P/4cIDjs9A2gr0JfsKKFsMo8LM0BJsdK2PkrtYKUaYuNrSVK5eYc Hbq8Qeb60A== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=52349/SHA-1 is now in the chain-of-trust
	`SCIENCE.GOV. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6`
	`SCIENCE.GOV. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db )`
	Query to edns1.ultradns.com for SCIENCE.GOV/DNSKEY
	Received 318 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 318 octets ;; HEADER SECTION ;; id = 13752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN DNSKEY ;; ANSWER SECTION (3 records) science.gov. 86400 IN DNSKEY ( 256 3 13 PGF1uZeriPzcZetI6YTSL6cr6eddHvw+WY+jg5k1GPUfkOuRi5yewhyExwO+kY45+kXBP1pDD+WL JetQWex8HQ== ) ; keytag 52196 science.gov. 86400 IN DNSKEY ( 257 3 13 JnEBeKQSxXQ8RNX8G+Nxki8lfPi+SGpZ6tbEcJ90j1lakkui7E93z0HLBQVZ8iyR57qc0cc1kap6 h2rlAbFIQA== ) ; keytag 52349 science.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20250713195826 20250629195826 52349 science.gov. eD3qjglhBs6gvSpRFPDGJVN9fdOtwyy8wKTXHYxwREEJI/M0wYUa2PIQ2GARnz3CWQjCbm8F43gp knm5RQKOag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for SCIENCE.GOV
	`science.gov. 86400 IN DNSKEY ( 256 3 13 PGF1uZeriPzcZetI6YTSL6cr6eddHvw+WY+jg5k1GPUfkOuRi5yewhyExwO+kY45+kXBP1pDD+WL JetQWex8HQ== ) ; keytag 52196`
	`science.gov. 86400 IN DNSKEY ( 257 3 13 JnEBeKQSxXQ8RNX8G+Nxki8lfPi+SGpZ6tbEcJ90j1lakkui7E93z0HLBQVZ8iyR57qc0cc1kap6 h2rlAbFIQA== ) ; keytag 52349`
	DNSKEY=52349/SEP is now in the chain-of-trust
	DS=52349/SHA-1 verifies DNSKEY=52349/SEP
	DS=52349/SHA-256 verifies DNSKEY=52349/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`science.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20250713195826 20250629195826 52349 science.gov. eD3qjglhBs6gvSpRFPDGJVN9fdOtwyy8wKTXHYxwREEJI/M0wYUa2PIQ2GARnz3CWQjCbm8F43gp knm5RQKOag== )`
	RRSIG=52349 and DNSKEY=52349/SEP verifies the DNSKEY RRset
	DNSKEY=52196 is now in the chain-of-trust
	Query to edns1.ultradns.biz for SCIENCE.GOV/A
	Received 409 bytes from 204.74.67.1
	;; Response received from [204.74.67.1] 409 octets ;; HEADER SECTION ;; id = 36787 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. 0uhaRNj9JLo+ra4J7omST7tm3iXjwm0m1DzfgKSxJuDfq4vnqnGq+euL7WHyhTY865+KaoVz38a4 6qva0d6J0A== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. EJbwbBaeO6lgD+aRAMSNR+5oGIn6TtgH73ClZugi6wH/V4GTDWdMu4QkXQJpRgC6myI6hepSELWf TxXO5Lmimw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.biz is authoritative for SCIENCE.GOV
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.org for SCIENCE.GOV/SOA
	Received 455 bytes from 204.74.111.1
	;; Response received from [204.74.111.1] 455 octets ;; HEADER SECTION ;; id = 49294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN SOA ;; ANSWER SECTION (2 records) science.gov. 10800 IN SOA ( edns1.ultradns.com. premiumdns.support.neustar. 2019092002 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 10800 ;minimum ) science.gov. 10800 IN RRSIG ( SOA 13 2 10800 20250713195826 20250629195826 52196 science.gov. Lzd8XNO6DwhFM+xJsicnrrNOgfTtjKywdVmHiZA7nRW1llRPTwbNw+9vGfPxBNWPPAhBpcLbwsdg 3/SV6vcuAw== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. oXTB25S4fsx44nOKkEXzPVsp2hY4crKNxU4GMkewvoY2oO5i2HDoMvZVNX0X/N85DV1CG+EELgaf /+4AB7tIew== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to edns1.ultradns.com for SCIENCE.GOV/SOA
	Received 455 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 455 octets ;; HEADER SECTION ;; id = 44894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN SOA ;; ANSWER SECTION (2 records) science.gov. 10800 IN SOA ( edns1.ultradns.com. premiumdns.support.neustar. 2019092002 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 10800 ;minimum ) science.gov. 10800 IN RRSIG ( SOA 13 2 10800 20250713195826 20250629195826 52196 science.gov. HpeXL9CUPr4jPmQPyo6ujT18f87EocGGZr0jv/nwbS17e3aLS25H6SUe1JaT6X88+Ewf4e42WTO+ bM+BnvO4Qg== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. O385txgXWkBmWnfWW8C1gStSdS5SB9sTXJLpem0RvPJk1VAnVyOjtA1xk/WUsqEcRbwtHPd/5oOj X5R67ZNB2g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to edns1.ultradns.net for SCIENCE.GOV/SOA
	Received 455 bytes from 204.74.110.1
	;; Response received from [204.74.110.1] 455 octets ;; HEADER SECTION ;; id = 10419 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN SOA ;; ANSWER SECTION (2 records) science.gov. 10800 IN SOA ( edns1.ultradns.com. premiumdns.support.neustar. 2019092002 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 10800 ;minimum ) science.gov. 10800 IN RRSIG ( SOA 13 2 10800 20250713195826 20250629195826 52196 science.gov. 8UkUbhLyyVDxhJYdOr76DxOfW1JukuFntntY3+2QRvFwv9cdpNyZt2LG9cwTlRKE2x09MKmJjimP bTbpUVVZNg== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. Wf3q4y/uSTBfX+04mB1C22NOge7rzNsFb+fzHQByCevgP5XBVG4z9fqwblPnCn5Tau9IO6/mrHyV 3KF/thoTNQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to edns1.ultradns.biz for SCIENCE.GOV/A
	Received 409 bytes from 204.74.67.1
	;; Response received from [204.74.67.1] 409 octets ;; HEADER SECTION ;; id = 35806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. GYj59w1QwgzwFHjQazoFmGPIGm8tkdYOTgoHG3f6irTvPKb7LX+zGMff+zqrDTr8Jg5yDobyDs9r wRNzoD+DQQ== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. 4fg0/QxZz6Heu9rQeXpB6cm0IzkfcR4nNvLb1TqKdup9SSWBMjg/PL4M8dhyIh4BUHqplJZHRrFS A5wT91oY7Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	SCIENCE.GOV A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. GYj59w1QwgzwFHjQazoFmGPIGm8tkdYOTgoHG3f6irTvPKb7LX+zGMff+zqrDTr8Jg5yDobyDs9r wRNzoD+DQQ== )`
	RRSIG=52196 and DNSKEY=52196 verifies the A RRset

SCIENCE.GOV

	Query to edns1.ultradns.net for SCIENCE.GOV/A
	Received 409 bytes from 204.74.110.1
	;; Response received from [204.74.110.1] 409 octets ;; HEADER SECTION ;; id = 36142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. WGA5pnm1ySPQuRIcwNlWrRTdtEX9u1TZP1ZtwlhRdSDXrwD37M5ZcPKblApnEnqbL1zpXYuxHYg4 Iag9A0Rs3w== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. uqPhu80dG336vMlOvhQCZsY/kyBSvW1n7syKXKq2BN0OsqqxvkMkisJBgnLvM/saG6clWd0GS5+Z iJoUpjgREQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.net is authoritative for SCIENCE.GOV
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.net for SCIENCE.GOV/A
	Received 409 bytes from 204.74.110.1
	;; Response received from [204.74.110.1] 409 octets ;; HEADER SECTION ;; id = 58238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. 0CMpT1qmu2TSDHmrfPm/c/Fc0ShsetTyuI62HPUJvCxoxdQ9H+0/qh8dWqmyl/iY8WVPKYjjWWHo 2y8WxP/QyA== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. DgEeRNVr7M/2D0k0MuaZROLRIB9NQloEGYtZyXi2O/fRueq2/U6dFfNIJnMey0+JhwRaBTpDqXir Kpo6vk+Q9Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	SCIENCE.GOV A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. 0CMpT1qmu2TSDHmrfPm/c/Fc0ShsetTyuI62HPUJvCxoxdQ9H+0/qh8dWqmyl/iY8WVPKYjjWWHo 2y8WxP/QyA== )`
	RRSIG=52196 and DNSKEY=52196 verifies the A RRset

SCIENCE.GOV

	Query to edns1.ultradns.com for SCIENCE.GOV/A
	Received 409 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 409 octets ;; HEADER SECTION ;; id = 59624 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. 1qHx43d/J5qWABLxDdN7X+TvDeGdc7Pan1aUbYYU1UyyQgOPCxRnpZSqiUuDJslqg8aFcpcYEkU0 mSvq7BnqEg== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. gkSPf7SDtSnR1eHAJaUqPVfbzR4cdthHYZJ4vOkUFDckN054m9dW94JaWZ0hkn5LQtJ5VZEYsvov vxz79vsAow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.com is authoritative for SCIENCE.GOV
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.com for SCIENCE.GOV/A
	Received 409 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 409 octets ;; HEADER SECTION ;; id = 6789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. z6Qa1aN0GPg0aPV3B3r9jv/QH/O88fPjOxJiVxnJSJqyOpL7RScVgUubFIbBnT2HX81keZibwpcY c+KtyTSUTQ== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. /ZIFjW9WB/CMkys4MwNEGzjp5MCojrBriIKRi6ZoR+1yenjXy0zIzH4jMofeZIQeUZRZGiGI6Q5I 980bV1CQwQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	SCIENCE.GOV A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. z6Qa1aN0GPg0aPV3B3r9jv/QH/O88fPjOxJiVxnJSJqyOpL7RScVgUubFIbBnT2HX81keZibwpcY c+KtyTSUTQ== )`
	RRSIG=52196 and DNSKEY=52196 verifies the A RRset

SCIENCE.GOV

	Query to edns1.ultradns.org for SCIENCE.GOV/A
	Received 409 bytes from 204.74.111.1
	;; Response received from [204.74.111.1] 409 octets ;; HEADER SECTION ;; id = 51438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. YCN2CPS1xQKSwPsnm0CHyNn9nufYq9+nUSfsj5N6O+7t2WLH5YK24FLS/xR0IuZpXE0yKbKjleLN 8C2Z52749Q== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. NSrIPBy4yqNwVlwcr3fpUXet1yk677KeZa71u3iZNHujTAsFseXnPHWG4QHxE3cKkh1xvkczUYyK MH3ix4uqeg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.org is authoritative for SCIENCE.GOV
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.org for SCIENCE.GOV/A
	Received 409 bytes from 204.74.111.1
	;; Response received from [204.74.111.1] 409 octets ;; HEADER SECTION ;; id = 39686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SCIENCE.GOV. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. ucA9bfyo2HvoLWx/6Shz2GVaoP+OfXSq8vzr6esLgoygkLh48aDjbG8QDcDvbdVwB0JhcGQwXmmK tzJDzfuS1Q== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20250713195826 20250629195826 52196 science.gov. gOoXhdU7BkBjWXRpKITt/98W3aKKFLXnqdN1Znx5E5hjIuP3ltdVz3VeVazvnuh2C8rkikWuy+uW Hh2UPP/CwQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	SCIENCE.GOV A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20250713195826 20250629195826 52196 science.gov. ucA9bfyo2HvoLWx/6Shz2GVaoP+OfXSq8vzr6esLgoygkLh48aDjbG8QDcDvbdVwB0JhcGQwXmmK tzJDzfuS1Q== )`
	RRSIG=52196 and DNSKEY=52196 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SCIENCE.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: