DNSSEC Debugger - STATE.GOV

Domain Name:

Time: 2026-02-23 04:28:53 UTC

Analyzing DNSSEC problems for STATE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 61569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for STATE.GOV/A
	Received 616 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 616 octets ;; HEADER SECTION ;; id = 34687 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 38170 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 35710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 65477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.GOV for STATE.GOV/A
	Received 411 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 411 octets ;; HEADER SECTION ;; id = 44610 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) STATE.GOV. 10800 IN NS a1-63.akam.net. STATE.GOV. 10800 IN NS a14-64.akam.net. STATE.GOV. 10800 IN NS a26-65.akam.net. STATE.GOV. 10800 IN NS a3-66.akam.net. STATE.GOV. 10800 IN NS a8-67.akam.net. STATE.GOV. 10800 IN NS a9-64.akam.net. STATE.GOV. 3600 IN DS ( 37327 8 2 a237d8eced906248420037c47dca91c1f157d5d7071794f70fcec1a01e1607ad ) STATE.GOV. 3600 IN DS ( 55537 8 2 5c7cb3767a98d5d23aa52b6c06845fa25a3ed55ed4d358504572b8bd643ac634 ) STATE.GOV. 3600 IN DS ( 65110 8 2 7bf2d1c2ed04c968e28e8850066d70fe6b5853228e54074708711184f8474d13 ) STATE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224052853 20260222032853 35496 gov. b2+bDCXyXOVyGa+8E9K20rnkeneCQYxQV4SyYrqRSdHCjAxITEca5JxNlSmGgE2PdvdiI6xu6tJ8 erIMMvzBMg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for STATE.GOV/DNSKEY
	Received 411 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 411 octets ;; HEADER SECTION ;; id = 54876 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) STATE.GOV. 10800 IN NS a1-63.akam.net. STATE.GOV. 10800 IN NS a14-64.akam.net. STATE.GOV. 10800 IN NS a26-65.akam.net. STATE.GOV. 10800 IN NS a3-66.akam.net. STATE.GOV. 10800 IN NS a8-67.akam.net. STATE.GOV. 10800 IN NS a9-64.akam.net. STATE.GOV. 3600 IN DS ( 37327 8 2 a237d8eced906248420037c47dca91c1f157d5d7071794f70fcec1a01e1607ad ) STATE.GOV. 3600 IN DS ( 55537 8 2 5c7cb3767a98d5d23aa52b6c06845fa25a3ed55ed4d358504572b8bd643ac634 ) STATE.GOV. 3600 IN DS ( 65110 8 2 7bf2d1c2ed04c968e28e8850066d70fe6b5853228e54074708711184f8474d13 ) STATE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224052853 20260222032853 35496 gov. 4cCIyW8yzhDQL+mIT8I5qvCuwC2t92g+DZaA/pXyR6Xn0YJ9wAe6qVuOiHNAcw/8o434V3ZC0SYY RVM/x2v7yw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone STATE.GOV

STATE.GOV

	Checking DS between GOV and STATE.GOV
	Query to a.ns.GOV for STATE.GOV/DS
	Received 281 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 281 octets ;; HEADER SECTION ;; id = 42693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN DS ;; ANSWER SECTION (4 records) STATE.GOV. 3600 IN DS ( 37327 8 2 a237d8eced906248420037c47dca91c1f157d5d7071794f70fcec1a01e1607ad ) STATE.GOV. 3600 IN DS ( 55537 8 2 5c7cb3767a98d5d23aa52b6c06845fa25a3ed55ed4d358504572b8bd643ac634 ) STATE.GOV. 3600 IN DS ( 65110 8 2 7bf2d1c2ed04c968e28e8850066d70fe6b5853228e54074708711184f8474d13 ) STATE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224052853 20260222032853 35496 gov. TY6VIyKHWFxLydwOwSka7tPUMGHLB+zKSvjCrkKDUVjlLfC1hdrDoAJpLclINhdNcNN1vWgEc1Ke 2zCksVz9IQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for STATE.GOV in the GOV zone
	DS=37327/SHA-256 has algorithm RSASHA256
	DS=55537/SHA-256 has algorithm RSASHA256
	DS=65110/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`STATE.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224052853 20260222032853 35496 gov. TY6VIyKHWFxLydwOwSka7tPUMGHLB+zKSvjCrkKDUVjlLfC1hdrDoAJpLclINhdNcNN1vWgEc1Ke 2zCksVz9IQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=37327/SHA-256 is now in the chain-of-trust
	DS=55537/SHA-256 is now in the chain-of-trust
	DS=65110/SHA-256 is now in the chain-of-trust
	`STATE.GOV. 3600 IN DS ( 37327 8 2 a237d8eced906248420037c47dca91c1f157d5d7071794f70fcec1a01e1607ad )`
	`STATE.GOV. 3600 IN DS ( 55537 8 2 5c7cb3767a98d5d23aa52b6c06845fa25a3ed55ed4d358504572b8bd643ac634 )`
	`STATE.GOV. 3600 IN DS ( 65110 8 2 7bf2d1c2ed04c968e28e8850066d70fe6b5853228e54074708711184f8474d13 )`
	Query to a1-63.akam.net for STATE.GOV/DNSKEY
	Received 2309 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 2309 octets ;; HEADER SECTION ;; id = 17492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) STATE.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbFCYwq7l17ndn3dBWULFLNeoq1QOfJ0zanVcgTHMOuYOFq7L0mjdlcMKidKJFBWy0UTi7YB VXx6nLsk57layuGmtLr520KhXjwiF/zvCR2Gp2ue0AVk+ZhqA7qbVSYsaY7nDHQl/1+CvXckPaAm ivO7XdCdgWYqMlOq2Q/fNdMquXlq2/UYrVof+pv0Cx/B39bx6bGtOXXKe2RSuhfc2DgF6DWMakU0 /QceYk2O0IX20hi4Bx4hbjfk6VBwC9RQ0mio1YsC41NZBz3oA63p6EAHYD5ocALRj9EZTcGHWaM+ 7Doo105f21eKpSEdDpOEp++gGY3jEC+Weakc3oqT0j8= ) ; keytag 23634 STATE.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAeAXrJ44JCnY4ApgPhRJD5fKY2cMYmWqXPZFptSRLzLAr/WEFKlNKgv8smO01RyJ9FVtta3e L/J8iRBfU8+k9bNbT29hEfH8jxE87ls7YXjMBEAGYH24dnBO/ZGaNW/IwD/kbHW1/N8t3cAoYlWw KGE90EzmgbyRu6garIiZT3Z1cBTL3Eg+yDVh/Bm7dXebBQELvLua7KxsBQqra0Z0BPsIaGcpZrRR Y5Dj/yem+P0rl1eurNI/q3v2YZ87W8DUwiXwN9gdXnO1MYtk/V/WKGdZ0cdtoj7hRnjVKWUUob+z D20jWFX6vCUdG/6Jouxvq8IKaWEdXHgXAbXhyWd8mL0= ) ; keytag 31845 STATE.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAaX7fFeAXiatyjmSI5LQFfhNkImqs6Ucb9u50IebKSDA5FjfMr27SsrAmSoLu/6DN67owIb4 WYO8H6G4S2H3/e44o7qtyh2TnGloYD1/6XKZwclDbfPkKMbtJd87XJTjYdWozqsIWm1tJ9aRzivG YqOl1B3vwCYAQldZatAQi0ZZSnQRYW4zxZ6emxweU+Es/nTBHxQedGNnlSeR5mM3R1T+ezHbCKqy ypZeTkjVNV/0XYrTVUOADd2/G+UAp04gAnyb348e5E4MP6zBozwUi6l4FfyEx14xBCkof7b+H4Ok PUtYHPPolhq7faGtBBCeRlYaE6RgdWTSkfNxmLH6zLU= ) ; keytag 55537 STATE.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAdWMWGeERLS0yrVbAkjik6pHkHh798RfPyakX3k09Qb6N8bnwQXqAvGiIt5PV6yQarUW0qSA 36ESfv/HYySQr9gwDTb0wpqgoW7f0EhfJ/MXZqMfDrY7wdG4wH9svLlEo+AQTbiqGfU3TNlKLVGT NaaqwYN5N4r6J+CoglFbqLeU8kR/P8uGzKITPbR6zET13so6+0jOjb5Novk9exT9WDfDh1g3ZExt 5c1xlez26tQSovKwuLiG2RhOJYnlqNl3wXGn/I42UV8K3syDDgEyFDdmgzq56Z5Rxae7b36SiSxj dT2yWnsLwEHYN7DBrqfn3NT+E+ennOKL3dc5EBe9LjM= ) ; keytag 41190 STATE.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAcyP8JylsCI28j2szivKu4F1RfGhLQOROBQkonjlfCAIi4uIsvORdRgtyFecupsBjtWbghpy sq/ommbYX94LqZRICE+IN3BIkxExcr3MXiAcrnCtRH0z5Xrl04ysonaNuWukif8DJPQ/v/9Z+Kiz XiA6eCElQRGhSB8RFnPD90jcLxmPd78i/3zItp1vQNXtG3215PyExijLQ7zdiA1jxZzAZNoUIEV6 ySpiO3Bsn8ZiCZ7WtZcy4JVz2efVM4zW8nMDLi7Un54mMw16WNxt6Uf6k7MJhwao010Ti6cTZu6j GQefePmqoB6f4gVXz2AYsTXhQFAy3BKRAZZwTDK2whk= ) ; keytag 37327 STATE.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153116 20260218150614 31845 state.gov. LPxmDTYcqk9KxA30LSkr5rJNWp3gil+3VheTWTUOQFOaMVSgPntgUbZl0N+tpfa+DHY/QxqF6L8p 3bsio8q+BEIadMFGKh14es8X9naL4uhnDzR5LFC127WPV2bo2Um8rP8rTi9MPP+xOyGJ32weZ5zP dxLOo8m0lTM+hQoa7mQ6i2ol+f4etlJusmU0yQnna86MbcraweCbzSwgGOnR5Rewxz0rMDlD/cWz ammq2/e6p3qL+ATTMP8unCQnlJUBOAF4Z4sHTDEFSJ8U3ms1AimXpEhuAo+/RTDvc+mrttFLjxvQ wbmlwbR+72OQ4kt4T7ufWjQj+XxKOYal96ukdg== ) STATE.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153116 20260218150614 37327 state.gov. QXJ9vxO4GnutucChh+FD4pwuQJnQasrd2jr3ENgQatWWap9+88uOyXfhktIY6vuH0J5Q7OyJ/mFM fqmXVPJ9km/fTMtMb8AdrX+gXySADYAy4MqLRbuz/F6PTyOZ5PfuQ1WFpZCqpD93lA9XH8zjMfB3 YrV2nw/xjsfY8PE46CVkIhQRWTo/oE7Ee5K/oRbrkFqD042k0ZpxhaHVMH7rjIXguTbYg1sAIupV ii1SOpG1294XCJ/Wx2DQldRgbvHMvGtypn1F4VjwBYUzFprt43DA4FIOgBSC0jpGkGS6b0pG2dDw pRUAx6hzvNf1bgXRZVLcwYeql1KAOOj+uH5LQQ== ) STATE.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153116 20260218150614 55537 state.gov. BRjr4aC9GqlwKtzb3/Xl0TCMBcVT1ga7abjw1AiesFHTWinP48sHa7zlTVbeNFMoF8Kt2oaD8vWG MMVBSb0IGta8GuciU5v07X9tJ+/kIPkT4kqzZrTGdniFSRhpFbwWVw9XpLYXYu2HYAJUQ2QZkOr3 7i2C1MmaXmmoFT7qm61aWsNnF4kLKlpfepCrTTag2i3ASRMFmWk7NS4Pk7YD931ew9v5bwfiFxpN 4/bc+2amz9VvOqIrh6WMhF5eEmyd2hT0yT6hAa5PaRFKrt5sSmofdEtVkpHQ+vyCg3OMe0cqB5l+ 1Us6STCTpuNzT4IC1HDwFeGyiEbcKMsPbAL19g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for STATE.GOV
	`STATE.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAbFCYwq7l17ndn3dBWULFLNeoq1QOfJ0zanVcgTHMOuYOFq7L0mjdlcMKidKJFBWy0UTi7YB VXx6nLsk57layuGmtLr520KhXjwiF/zvCR2Gp2ue0AVk+ZhqA7qbVSYsaY7nDHQl/1+CvXckPaAm ivO7XdCdgWYqMlOq2Q/fNdMquXlq2/UYrVof+pv0Cx/B39bx6bGtOXXKe2RSuhfc2DgF6DWMakU0 /QceYk2O0IX20hi4Bx4hbjfk6VBwC9RQ0mio1YsC41NZBz3oA63p6EAHYD5ocALRj9EZTcGHWaM+ 7Doo105f21eKpSEdDpOEp++gGY3jEC+Weakc3oqT0j8= ) ; keytag 23634`
	`STATE.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAeAXrJ44JCnY4ApgPhRJD5fKY2cMYmWqXPZFptSRLzLAr/WEFKlNKgv8smO01RyJ9FVtta3e L/J8iRBfU8+k9bNbT29hEfH8jxE87ls7YXjMBEAGYH24dnBO/ZGaNW/IwD/kbHW1/N8t3cAoYlWw KGE90EzmgbyRu6garIiZT3Z1cBTL3Eg+yDVh/Bm7dXebBQELvLua7KxsBQqra0Z0BPsIaGcpZrRR Y5Dj/yem+P0rl1eurNI/q3v2YZ87W8DUwiXwN9gdXnO1MYtk/V/WKGdZ0cdtoj7hRnjVKWUUob+z D20jWFX6vCUdG/6Jouxvq8IKaWEdXHgXAbXhyWd8mL0= ) ; keytag 31845`
	`STATE.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAaX7fFeAXiatyjmSI5LQFfhNkImqs6Ucb9u50IebKSDA5FjfMr27SsrAmSoLu/6DN67owIb4 WYO8H6G4S2H3/e44o7qtyh2TnGloYD1/6XKZwclDbfPkKMbtJd87XJTjYdWozqsIWm1tJ9aRzivG YqOl1B3vwCYAQldZatAQi0ZZSnQRYW4zxZ6emxweU+Es/nTBHxQedGNnlSeR5mM3R1T+ezHbCKqy ypZeTkjVNV/0XYrTVUOADd2/G+UAp04gAnyb348e5E4MP6zBozwUi6l4FfyEx14xBCkof7b+H4Ok PUtYHPPolhq7faGtBBCeRlYaE6RgdWTSkfNxmLH6zLU= ) ; keytag 55537`
	`STATE.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAdWMWGeERLS0yrVbAkjik6pHkHh798RfPyakX3k09Qb6N8bnwQXqAvGiIt5PV6yQarUW0qSA 36ESfv/HYySQr9gwDTb0wpqgoW7f0EhfJ/MXZqMfDrY7wdG4wH9svLlEo+AQTbiqGfU3TNlKLVGT NaaqwYN5N4r6J+CoglFbqLeU8kR/P8uGzKITPbR6zET13so6+0jOjb5Novk9exT9WDfDh1g3ZExt 5c1xlez26tQSovKwuLiG2RhOJYnlqNl3wXGn/I42UV8K3syDDgEyFDdmgzq56Z5Rxae7b36SiSxj dT2yWnsLwEHYN7DBrqfn3NT+E+ennOKL3dc5EBe9LjM= ) ; keytag 41190`
	`STATE.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAcyP8JylsCI28j2szivKu4F1RfGhLQOROBQkonjlfCAIi4uIsvORdRgtyFecupsBjtWbghpy sq/ommbYX94LqZRICE+IN3BIkxExcr3MXiAcrnCtRH0z5Xrl04ysonaNuWukif8DJPQ/v/9Z+Kiz XiA6eCElQRGhSB8RFnPD90jcLxmPd78i/3zItp1vQNXtG3215PyExijLQ7zdiA1jxZzAZNoUIEV6 ySpiO3Bsn8ZiCZ7WtZcy4JVz2efVM4zW8nMDLi7Un54mMw16WNxt6Uf6k7MJhwao010Ti6cTZu6j GQefePmqoB6f4gVXz2AYsTXhQFAy3BKRAZZwTDK2whk= ) ; keytag 37327`
	DNSKEY=55537/SEP is now in the chain-of-trust
	DS=55537/SHA-256 verifies DNSKEY=55537/SEP
	DNSKEY=37327/SEP is now in the chain-of-trust
	DS=37327/SHA-256 verifies DNSKEY=37327/SEP
	DS=65110/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`STATE.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153116 20260218150614 31845 state.gov. LPxmDTYcqk9KxA30LSkr5rJNWp3gil+3VheTWTUOQFOaMVSgPntgUbZl0N+tpfa+DHY/QxqF6L8p 3bsio8q+BEIadMFGKh14es8X9naL4uhnDzR5LFC127WPV2bo2Um8rP8rTi9MPP+xOyGJ32weZ5zP dxLOo8m0lTM+hQoa7mQ6i2ol+f4etlJusmU0yQnna86MbcraweCbzSwgGOnR5Rewxz0rMDlD/cWz ammq2/e6p3qL+ATTMP8unCQnlJUBOAF4Z4sHTDEFSJ8U3ms1AimXpEhuAo+/RTDvc+mrttFLjxvQ wbmlwbR+72OQ4kt4T7ufWjQj+XxKOYal96ukdg== )`
	`STATE.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153116 20260218150614 37327 state.gov. QXJ9vxO4GnutucChh+FD4pwuQJnQasrd2jr3ENgQatWWap9+88uOyXfhktIY6vuH0J5Q7OyJ/mFM fqmXVPJ9km/fTMtMb8AdrX+gXySADYAy4MqLRbuz/F6PTyOZ5PfuQ1WFpZCqpD93lA9XH8zjMfB3 YrV2nw/xjsfY8PE46CVkIhQRWTo/oE7Ee5K/oRbrkFqD042k0ZpxhaHVMH7rjIXguTbYg1sAIupV ii1SOpG1294XCJ/Wx2DQldRgbvHMvGtypn1F4VjwBYUzFprt43DA4FIOgBSC0jpGkGS6b0pG2dDw pRUAx6hzvNf1bgXRZVLcwYeql1KAOOj+uH5LQQ== )`
	`STATE.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153116 20260218150614 55537 state.gov. BRjr4aC9GqlwKtzb3/Xl0TCMBcVT1ga7abjw1AiesFHTWinP48sHa7zlTVbeNFMoF8Kt2oaD8vWG MMVBSb0IGta8GuciU5v07X9tJ+/kIPkT4kqzZrTGdniFSRhpFbwWVw9XpLYXYu2HYAJUQ2QZkOr3 7i2C1MmaXmmoFT7qm61aWsNnF4kLKlpfepCrTTag2i3ASRMFmWk7NS4Pk7YD931ew9v5bwfiFxpN 4/bc+2amz9VvOqIrh6WMhF5eEmyd2hT0yT6hAa5PaRFKrt5sSmofdEtVkpHQ+vyCg3OMe0cqB5l+ 1Us6STCTpuNzT4IC1HDwFeGyiEbcKMsPbAL19g== )`
	RRSIG=31845 and DNSKEY=31845 verifies the DNSKEY RRset
	RRSIG=37327 and DNSKEY=37327/SEP verifies the DNSKEY RRset
	RRSIG=55537 and DNSKEY=55537/SEP verifies the DNSKEY RRset
	DNSKEY=23634 is now in the chain-of-trust
	DNSKEY=31845 is now in the chain-of-trust
	DNSKEY=41190 is now in the chain-of-trust
	Query to a8-67.akam.net for STATE.GOV/A
	Received 383 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 383 octets ;; HEADER SECTION ;; id = 35556 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for STATE.GOV
	Found RRSIG signed by state.gov zone
	Query to a14-64.akam.net for STATE.GOV/SOA
	Received 837 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 837 octets ;; HEADER SECTION ;; id = 58707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN SOA ;; ANSWER SECTION (2 records) STATE.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.STATE.GOV. 78822 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) STATE.GOV. 900 IN RRSIG ( SOA 8 2 900 20270222122907 20260222112907 31845 state.gov. vmAj5VGQuuAAA/Wnwg4RnS3BwiYOYUsrT3z5vFZiJKdoxor64lBleQqQz0XyMHwyV4h/Kfq1kiIn tS/vypJ5RH7VfapEGojM8bUbgLS/Gh5WKXpeaGv7YfuNNunSC+g7MGWvgZnyuosu9ZXVDI0aHH3j sijQBL3mYWdFMyPteDFmTz6bHZ0KnUTBp0NoEMN69DmCySDkV39O6uZLWaQ0zJTUKfPrLlIcPKuA eUK7ZkzmCd/X4evNuf23NdK9gvNoYi+bqERYZrLWh6xUJefWffMkOc0VmMHh+zJqcFTYyjM3eC7S Tv/Zm8C3ptZFpAUcfp+BYhUARHGgW4WjkEB/UQ== ) ;; AUTHORITY SECTION (7 records) STATE.GOV. 900 IN NS a8-67.akam.net. STATE.GOV. 900 IN NS a14-64.akam.net. STATE.GOV. 900 IN NS a9-64.akam.net. STATE.GOV. 900 IN NS a1-63.akam.net. STATE.GOV. 900 IN NS a3-66.akam.net. STATE.GOV. 900 IN NS a26-65.akam.net. STATE.GOV. 900 IN RRSIG ( NS 8 2 900 20270218151658 20260218150546 31845 state.gov. 3znZBPNHGGteSlXduh+6HxQOm3DubHAj5cYc17AFOQ7da9EV45w68LYz3PUTLHa5dHrjZHjyM9ky hIOq4qx7ToCBZYi5Dt0oEaIwG5lfhb/PT7w3OIfv30XKx8TwPDGpkzsWlB7qiMGnJ0FKaRLphm2y 3ee4mqz7iYPKYpQPIOPPChfJLbdTErtPBzSBLWbYcf3Arfb184PrgW/W+mTvQeUD9AuzkcgURxu1 7gcbvDz1CG5TWIaP6/Koge3LPOoaOTFcDPx+hEozWTiThfXPtrFx9AxC2lPe4at7uda6Ai2jo1E+ ZRYzzXQ2E+36vcBl5aBf8TRAzK2HnPm0dqV+Lg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-66.akam.net for STATE.GOV/SOA
	Received 837 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 837 octets ;; HEADER SECTION ;; id = 47519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN SOA ;; ANSWER SECTION (2 records) STATE.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.STATE.GOV. 78822 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) STATE.GOV. 900 IN RRSIG ( SOA 8 2 900 20270222122907 20260222112907 31845 state.gov. vmAj5VGQuuAAA/Wnwg4RnS3BwiYOYUsrT3z5vFZiJKdoxor64lBleQqQz0XyMHwyV4h/Kfq1kiIn tS/vypJ5RH7VfapEGojM8bUbgLS/Gh5WKXpeaGv7YfuNNunSC+g7MGWvgZnyuosu9ZXVDI0aHH3j sijQBL3mYWdFMyPteDFmTz6bHZ0KnUTBp0NoEMN69DmCySDkV39O6uZLWaQ0zJTUKfPrLlIcPKuA eUK7ZkzmCd/X4evNuf23NdK9gvNoYi+bqERYZrLWh6xUJefWffMkOc0VmMHh+zJqcFTYyjM3eC7S Tv/Zm8C3ptZFpAUcfp+BYhUARHGgW4WjkEB/UQ== ) ;; AUTHORITY SECTION (7 records) STATE.GOV. 900 IN NS a3-66.akam.net. STATE.GOV. 900 IN NS a1-63.akam.net. STATE.GOV. 900 IN NS a26-65.akam.net. STATE.GOV. 900 IN NS a14-64.akam.net. STATE.GOV. 900 IN NS a9-64.akam.net. STATE.GOV. 900 IN NS a8-67.akam.net. STATE.GOV. 900 IN RRSIG ( NS 8 2 900 20270218151658 20260218150546 31845 state.gov. 3znZBPNHGGteSlXduh+6HxQOm3DubHAj5cYc17AFOQ7da9EV45w68LYz3PUTLHa5dHrjZHjyM9ky hIOq4qx7ToCBZYi5Dt0oEaIwG5lfhb/PT7w3OIfv30XKx8TwPDGpkzsWlB7qiMGnJ0FKaRLphm2y 3ee4mqz7iYPKYpQPIOPPChfJLbdTErtPBzSBLWbYcf3Arfb184PrgW/W+mTvQeUD9AuzkcgURxu1 7gcbvDz1CG5TWIaP6/Koge3LPOoaOTFcDPx+hEozWTiThfXPtrFx9AxC2lPe4at7uda6Ai2jo1E+ ZRYzzXQ2E+36vcBl5aBf8TRAzK2HnPm0dqV+Lg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-63.akam.net for STATE.GOV/SOA
	Received 837 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 837 octets ;; HEADER SECTION ;; id = 23852 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN SOA ;; ANSWER SECTION (2 records) STATE.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.STATE.GOV. 78822 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) STATE.GOV. 900 IN RRSIG ( SOA 8 2 900 20270222122907 20260222112907 31845 state.gov. vmAj5VGQuuAAA/Wnwg4RnS3BwiYOYUsrT3z5vFZiJKdoxor64lBleQqQz0XyMHwyV4h/Kfq1kiIn tS/vypJ5RH7VfapEGojM8bUbgLS/Gh5WKXpeaGv7YfuNNunSC+g7MGWvgZnyuosu9ZXVDI0aHH3j sijQBL3mYWdFMyPteDFmTz6bHZ0KnUTBp0NoEMN69DmCySDkV39O6uZLWaQ0zJTUKfPrLlIcPKuA eUK7ZkzmCd/X4evNuf23NdK9gvNoYi+bqERYZrLWh6xUJefWffMkOc0VmMHh+zJqcFTYyjM3eC7S Tv/Zm8C3ptZFpAUcfp+BYhUARHGgW4WjkEB/UQ== ) ;; AUTHORITY SECTION (7 records) STATE.GOV. 900 IN NS a3-66.akam.net. STATE.GOV. 900 IN NS a14-64.akam.net. STATE.GOV. 900 IN NS a26-65.akam.net. STATE.GOV. 900 IN NS a8-67.akam.net. STATE.GOV. 900 IN NS a1-63.akam.net. STATE.GOV. 900 IN NS a9-64.akam.net. STATE.GOV. 900 IN RRSIG ( NS 8 2 900 20270218151658 20260218150546 31845 state.gov. 3znZBPNHGGteSlXduh+6HxQOm3DubHAj5cYc17AFOQ7da9EV45w68LYz3PUTLHa5dHrjZHjyM9ky hIOq4qx7ToCBZYi5Dt0oEaIwG5lfhb/PT7w3OIfv30XKx8TwPDGpkzsWlB7qiMGnJ0FKaRLphm2y 3ee4mqz7iYPKYpQPIOPPChfJLbdTErtPBzSBLWbYcf3Arfb184PrgW/W+mTvQeUD9AuzkcgURxu1 7gcbvDz1CG5TWIaP6/Koge3LPOoaOTFcDPx+hEozWTiThfXPtrFx9AxC2lPe4at7uda6Ai2jo1E+ ZRYzzXQ2E+36vcBl5aBf8TRAzK2HnPm0dqV+Lg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for STATE.GOV/SOA
	Received 837 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 837 octets ;; HEADER SECTION ;; id = 14844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN SOA ;; ANSWER SECTION (2 records) STATE.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.STATE.GOV. 78822 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) STATE.GOV. 900 IN RRSIG ( SOA 8 2 900 20270222122907 20260222112907 31845 state.gov. vmAj5VGQuuAAA/Wnwg4RnS3BwiYOYUsrT3z5vFZiJKdoxor64lBleQqQz0XyMHwyV4h/Kfq1kiIn tS/vypJ5RH7VfapEGojM8bUbgLS/Gh5WKXpeaGv7YfuNNunSC+g7MGWvgZnyuosu9ZXVDI0aHH3j sijQBL3mYWdFMyPteDFmTz6bHZ0KnUTBp0NoEMN69DmCySDkV39O6uZLWaQ0zJTUKfPrLlIcPKuA eUK7ZkzmCd/X4evNuf23NdK9gvNoYi+bqERYZrLWh6xUJefWffMkOc0VmMHh+zJqcFTYyjM3eC7S Tv/Zm8C3ptZFpAUcfp+BYhUARHGgW4WjkEB/UQ== ) ;; AUTHORITY SECTION (7 records) STATE.GOV. 900 IN NS a26-65.akam.net. STATE.GOV. 900 IN NS a9-64.akam.net. STATE.GOV. 900 IN NS a1-63.akam.net. STATE.GOV. 900 IN NS a3-66.akam.net. STATE.GOV. 900 IN NS a14-64.akam.net. STATE.GOV. 900 IN NS a8-67.akam.net. STATE.GOV. 900 IN RRSIG ( NS 8 2 900 20270218151658 20260218150546 31845 state.gov. 3znZBPNHGGteSlXduh+6HxQOm3DubHAj5cYc17AFOQ7da9EV45w68LYz3PUTLHa5dHrjZHjyM9ky hIOq4qx7ToCBZYi5Dt0oEaIwG5lfhb/PT7w3OIfv30XKx8TwPDGpkzsWlB7qiMGnJ0FKaRLphm2y 3ee4mqz7iYPKYpQPIOPPChfJLbdTErtPBzSBLWbYcf3Arfb184PrgW/W+mTvQeUD9AuzkcgURxu1 7gcbvDz1CG5TWIaP6/Koge3LPOoaOTFcDPx+hEozWTiThfXPtrFx9AxC2lPe4at7uda6Ai2jo1E+ ZRYzzXQ2E+36vcBl5aBf8TRAzK2HnPm0dqV+Lg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-65.akam.net for STATE.GOV/SOA
	Received 837 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 837 octets ;; HEADER SECTION ;; id = 61440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN SOA ;; ANSWER SECTION (2 records) STATE.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.STATE.GOV. 78822 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) STATE.GOV. 900 IN RRSIG ( SOA 8 2 900 20270222122907 20260222112907 31845 state.gov. vmAj5VGQuuAAA/Wnwg4RnS3BwiYOYUsrT3z5vFZiJKdoxor64lBleQqQz0XyMHwyV4h/Kfq1kiIn tS/vypJ5RH7VfapEGojM8bUbgLS/Gh5WKXpeaGv7YfuNNunSC+g7MGWvgZnyuosu9ZXVDI0aHH3j sijQBL3mYWdFMyPteDFmTz6bHZ0KnUTBp0NoEMN69DmCySDkV39O6uZLWaQ0zJTUKfPrLlIcPKuA eUK7ZkzmCd/X4evNuf23NdK9gvNoYi+bqERYZrLWh6xUJefWffMkOc0VmMHh+zJqcFTYyjM3eC7S Tv/Zm8C3ptZFpAUcfp+BYhUARHGgW4WjkEB/UQ== ) ;; AUTHORITY SECTION (7 records) STATE.GOV. 900 IN NS a14-64.akam.net. STATE.GOV. 900 IN NS a1-63.akam.net. STATE.GOV. 900 IN NS a9-64.akam.net. STATE.GOV. 900 IN NS a3-66.akam.net. STATE.GOV. 900 IN NS a26-65.akam.net. STATE.GOV. 900 IN NS a8-67.akam.net. STATE.GOV. 900 IN RRSIG ( NS 8 2 900 20270218151658 20260218150546 31845 state.gov. 3znZBPNHGGteSlXduh+6HxQOm3DubHAj5cYc17AFOQ7da9EV45w68LYz3PUTLHa5dHrjZHjyM9ky hIOq4qx7ToCBZYi5Dt0oEaIwG5lfhb/PT7w3OIfv30XKx8TwPDGpkzsWlB7qiMGnJ0FKaRLphm2y 3ee4mqz7iYPKYpQPIOPPChfJLbdTErtPBzSBLWbYcf3Arfb184PrgW/W+mTvQeUD9AuzkcgURxu1 7gcbvDz1CG5TWIaP6/Koge3LPOoaOTFcDPx+hEozWTiThfXPtrFx9AxC2lPe4at7uda6Ai2jo1E+ ZRYzzXQ2E+36vcBl5aBf8TRAzK2HnPm0dqV+Lg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-67.akam.net for STATE.GOV/A
	Received 383 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 383 octets ;; HEADER SECTION ;; id = 16205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	STATE.GOV A RR has value 34.233.146.45
	STATE.GOV A RR has value 107.22.78.153
	STATE.GOV A RR has value 100.28.244.61
	Found 1 RRSIGs over A RRset
	`STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== )`
	RRSIG=31845 and DNSKEY=31845 verifies the A RRset

STATE.GOV

	Query to a3-66.akam.net for STATE.GOV/A
	Received 383 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 383 octets ;; HEADER SECTION ;; id = 4493 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-66.akam.net is authoritative for STATE.GOV
	Found RRSIG signed by state.gov zone
	Query to a3-66.akam.net for STATE.GOV/A
	Received 383 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 383 octets ;; HEADER SECTION ;; id = 56794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	STATE.GOV A RR has value 107.22.78.153
	STATE.GOV A RR has value 34.233.146.45
	STATE.GOV A RR has value 100.28.244.61
	Found 1 RRSIGs over A RRset
	`STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== )`
	RRSIG=31845 and DNSKEY=31845 verifies the A RRset

STATE.GOV

	Query to a26-65.akam.net for STATE.GOV/A
	Received 383 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 383 octets ;; HEADER SECTION ;; id = 48948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-65.akam.net is authoritative for STATE.GOV
	Found RRSIG signed by state.gov zone
	Query to a26-65.akam.net for STATE.GOV/A
	Received 383 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 383 octets ;; HEADER SECTION ;; id = 26757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	STATE.GOV A RR has value 107.22.78.153
	STATE.GOV A RR has value 34.233.146.45
	STATE.GOV A RR has value 100.28.244.61
	Found 1 RRSIGs over A RRset
	`STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== )`
	RRSIG=31845 and DNSKEY=31845 verifies the A RRset

STATE.GOV

	Query to a9-64.akam.net for STATE.GOV/A
	Received 383 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 383 octets ;; HEADER SECTION ;; id = 41451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for STATE.GOV
	Found RRSIG signed by state.gov zone
	Query to a9-64.akam.net for STATE.GOV/A
	Received 383 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 383 octets ;; HEADER SECTION ;; id = 3082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	STATE.GOV A RR has value 100.28.244.61
	STATE.GOV A RR has value 107.22.78.153
	STATE.GOV A RR has value 34.233.146.45
	Found 1 RRSIGs over A RRset
	`STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== )`
	RRSIG=31845 and DNSKEY=31845 verifies the A RRset

STATE.GOV

	Query to a14-64.akam.net for STATE.GOV/A
	Received 383 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 383 octets ;; HEADER SECTION ;; id = 229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for STATE.GOV
	Found RRSIG signed by state.gov zone
	Query to a14-64.akam.net for STATE.GOV/A
	Received 383 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 383 octets ;; HEADER SECTION ;; id = 57016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	STATE.GOV A RR has value 107.22.78.153
	STATE.GOV A RR has value 100.28.244.61
	STATE.GOV A RR has value 34.233.146.45
	Found 1 RRSIGs over A RRset
	`STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== )`
	RRSIG=31845 and DNSKEY=31845 verifies the A RRset

STATE.GOV

	Query to a1-63.akam.net for STATE.GOV/A
	Received 383 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 383 octets ;; HEADER SECTION ;; id = 52914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-63.akam.net is authoritative for STATE.GOV
	Found RRSIG signed by state.gov zone
	Query to a1-63.akam.net for STATE.GOV/A
	Received 383 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 383 octets ;; HEADER SECTION ;; id = 21195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STATE.GOV. IN A ;; ANSWER SECTION (4 records) STATE.GOV. 900 IN A 100.28.244.61 STATE.GOV. 900 IN A 107.22.78.153 STATE.GOV. 900 IN A 34.233.146.45 STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	STATE.GOV A RR has value 100.28.244.61
	STATE.GOV A RR has value 107.22.78.153
	STATE.GOV A RR has value 34.233.146.45
	Found 1 RRSIGs over A RRset
	`STATE.GOV. 900 IN RRSIG ( A 8 2 900 20270218154704 20260218150547 31845 state.gov. uQmFu/XAyly1Pkv+C0l6OjPFvEF67kzzbhK4gJe9rUmS/753PWiWX9bhxIhfqMM0ZFfctM4NFian v2XW6un0YGgqHiWN50JarrmB/U1kSk3HCM9TW2dp46C+YdZpvMTNt212rSCz44t5sm7elKEkEFeo JdaF3Pqu3r3vbg/l/UGJe7Jy1P6AgbjUH9Sgbf6Hdp1N4lRDtz9Of8R/pb6AWfIquTNwqvP8JNCX x1/l4QTr0YZXfXpiqbTPS2iGjtVoYgMLxJyBmU+gAzxN4Xk9mloGxVt88O76udumlk/+DMsi+8xr vqV6Y+n8wlGfZbXhazWluSr6sMRoF8B40DBOZQ== )`
	RRSIG=31845 and DNSKEY=31845 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test STATE.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: