DNSSEC Analyzer

Domain Name:

Time: 2019-08-25 09:05:10 UTC, NTP stratum 4

Analyzing DNSSEC problems for TAX.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 31520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to d.root-servers.net for TAX.GOV/A
	Received 662 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (662 bytes) ;; HEADER SECTION ;; id = 9691 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 38127 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 25298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 58940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	Query to b.gov-servers.net for TAX.GOV/A
	Received 623 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (623 bytes) ;; HEADER SECTION ;; id = 54740 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) TAX.GOV. 86400 IN NS ns2.irs.GOV. TAX.GOV. 86400 IN NS ns4.irs.GOV. TAX.GOV. 86400 IN NS ns5.irs.GOV. TAX.GOV. 86400 IN NS ns1.irs.GOV. TAX.GOV. 86400 IN NS ns3.irs.GOV. TAX.GOV. 86400 IN NS ns6.irs.GOV. TAX.GOV. 3600 IN DS ( 26104 8 2 6b3b77d7db04097e1d9aef849ab09f6a2e902087b3725aaf4b24457f70956912 ) TAX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. xxv0v5aC8rHgRRyiiAm1B4yTo1btDs9y9pgW+onKAGygWfdfu/djEFvIdkukSFT5sq6LbpLRpATC 4cw1opXFycd56F3BepNWAV0xyjKk0DxkaM4/vYAGm/tk83qZMxpsuUSq2R3ZtZlkF2QmbkKbv4dI CwWUB0Kq4QGmdAWNYsY= ) ;; ADDITIONAL SECTION (13 records) ns2.irs.GOV. 86400 IN A 152.216.7.165 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ns5.irs.GOV. 86400 IN A 152.216.13.164 ns5.irs.GOV. 86400 IN AAAA 2610:30:0:13::164 ns1.irs.GOV. 86400 IN A 152.216.7.164 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns6.irs.GOV. 86400 IN A 152.216.13.165 ns6.irs.GOV. 86400 IN AAAA 2610:30:0:13::165 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for TAX.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for TAX.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 623 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (623 bytes) ;; HEADER SECTION ;; id = 59642 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) TAX.GOV. 86400 IN NS ns2.irs.GOV. TAX.GOV. 86400 IN NS ns4.irs.GOV. TAX.GOV. 86400 IN NS ns5.irs.GOV. TAX.GOV. 86400 IN NS ns1.irs.GOV. TAX.GOV. 86400 IN NS ns3.irs.GOV. TAX.GOV. 86400 IN NS ns6.irs.GOV. TAX.GOV. 3600 IN DS ( 26104 8 2 6b3b77d7db04097e1d9aef849ab09f6a2e902087b3725aaf4b24457f70956912 ) TAX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. xxv0v5aC8rHgRRyiiAm1B4yTo1btDs9y9pgW+onKAGygWfdfu/djEFvIdkukSFT5sq6LbpLRpATC 4cw1opXFycd56F3BepNWAV0xyjKk0DxkaM4/vYAGm/tk83qZMxpsuUSq2R3ZtZlkF2QmbkKbv4dI CwWUB0Kq4QGmdAWNYsY= ) ;; ADDITIONAL SECTION (13 records) ns2.irs.GOV. 86400 IN A 152.216.7.165 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ns5.irs.GOV. 86400 IN A 152.216.13.164 ns5.irs.GOV. 86400 IN AAAA 2610:30:0:13::164 ns1.irs.GOV. 86400 IN A 152.216.7.164 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns6.irs.GOV. 86400 IN A 152.216.13.165 ns6.irs.GOV. 86400 IN AAAA 2610:30:0:13::165 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TAX.GOV

TAX.GOV

	Checking DS between GOV and TAX.GOV
	Query to b.gov-servers.net for TAX.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for TAX.GOV/DS: 'IPv6 transport disabled'
	Received 247 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (247 bytes) ;; HEADER SECTION ;; id = 58352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN DS ;; ANSWER SECTION (2 records) TAX.GOV. 3600 IN DS ( 26104 8 2 6b3b77d7db04097e1d9aef849ab09f6a2e902087b3725aaf4b24457f70956912 ) TAX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. xxv0v5aC8rHgRRyiiAm1B4yTo1btDs9y9pgW+onKAGygWfdfu/djEFvIdkukSFT5sq6LbpLRpATC 4cw1opXFycd56F3BepNWAV0xyjKk0DxkaM4/vYAGm/tk83qZMxpsuUSq2R3ZtZlkF2QmbkKbv4dI CwWUB0Kq4QGmdAWNYsY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for TAX.GOV in the GOV zone
	DS=26104/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`TAX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. xxv0v5aC8rHgRRyiiAm1B4yTo1btDs9y9pgW+onKAGygWfdfu/djEFvIdkukSFT5sq6LbpLRpATC 4cw1opXFycd56F3BepNWAV0xyjKk0DxkaM4/vYAGm/tk83qZMxpsuUSq2R3ZtZlkF2QmbkKbv4dI CwWUB0Kq4QGmdAWNYsY= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=26104/SHA-256 is now in the chain-of-trust
	`TAX.GOV. 3600 IN DS ( 26104 8 2 6b3b77d7db04097e1d9aef849ab09f6a2e902087b3725aaf4b24457f70956912 )`
	Query to ns6.irs.GOV for TAX.GOV/DNSKEY
	Error querying ns6.irs.GOV/2610:30:0:13:0:0:0:165 for TAX.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1435 bytes from 152.216.13.165
	;; Answer received from 152.216.13.165 (1435 bytes) ;; HEADER SECTION ;; id = 51357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) TAX.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAbYGRn+LqIO6tNR2nuXqhD2cHGQ/op2tOnwcDwuEvPdPS5IVZujRLrTnsO3HE+08JMzjtgPr urwUrkmWaWbVdPq3f18PcK2j7Y6xVvYP987TW0VqsY4s8Qy706aI81+SLRe1LFqoT9zuHIcj4dBo BTuv/ceFwdHfRQkZM2+QJHGpUqwijgc0o/aWn0pYspxJPwu2yLUD1KTTidzcWeFQwMHsqz+6cWDf Vu/kPmZ3O2K3ymQLPRoj+caC4quPwPvmxXsEG+opvcVYJWhozcqB0TvRSVKg+aGGcDzeUAxHDEJp zqhFYSftfx8oNPWCkIfLlqtyjsIwyJAJXdb10WQjlBs= ) ; Key ID = 59931 TAX.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAdBhdMPgz5qRicfUt+eDQ3Id6P26CF2jhAMOS6qH/QAvkGHJkzI6mx01iTdc2byvo4GqYtDW Ww6IEOkx9nFJGOC0cLSEHHMIpF3VKA8GD4uBcpAyklwXnAznkh3TdJMSdPPWQqZzwbxgrpwsBmEM b+mOadUJWOkaE851MJMDa/EYVzEeFDYWvbe/lMjEUfr33+crU4qiyjtbOgQdwhwJ7mXitO7CTtLh VSrNEGEnwwznD47G/CirCQuG/QdDHYFKkZdRuKm1PQ0HiscH/oo5t7ij0lMvfpnl+ykTMxIevyvq Ji3n9a83tiRuiQd29RvZaF0SL92+drIoXF4hfuKGcts= ) ; Key ID = 59241 TAX.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAbvPFVTVFtTkVLkHaS7Os4NDQlckE8j76De0Kf1Wfy7o6eKYJ73lNDxsLSIzVbwAaBf5q5cx BLqs1451/IPj1ofDxN+CRNQD5yPW0eVjFNa1Y3Jx+KWslxz/pXRzrEyFthgRcMNiY1uMu2GcYpTH 7XJyA/PLoO4EPT8zI8Yo7bOaKyGIYRRRH8HhETxxPoJdl56LKiGYSdKpV3M0A+VlqZVjq1sAiHsX jGh738H3N1YKfwWP5RCeh04IOm+88cg0Hx/9DtVGtGmPE7gVETvIXMU2PLyErpWbXWMaNoEE6Ec+ FqnogQJDteovJL+7PzQxKSFKjXP7nqQUfvFdZNC1KAM= ) ; Key ID = 26104 TAX.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAdYO02RFozQwtxwZSt8XppxW4Ub6shEXDLrLh3sHEEUPuS7oqKkytKazRTCQdo47wiNBQq8j x2PlAto34V4+YwNZPuif9aS5SWeIF+ff1gFFPycP1q1hnrrneNNd/b/xjGMouVGQ0tRAGC3nSlSx XYLoEwGu+TeUcY3JaWf9i4d8FzjqeKfqOR3DQ6l2LnWMuOVzR2XCfqoodCrW4xrwYxClkZNp/XCL ZWMtFYyen2lmlUXQw28nOGiYBlgjtUmDm2wKKnDlDHkOH8bVvyEqomr9YTCUxR9jnB0eHM1BJR9I oq+VIhQJQhgSp58+pVDDstubyOC5bGL1n+/+fcRxMX8= ) ; Key ID = 13810 TAX.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20190901030931 20190825020931 26104 tax.gov. QvX0c6qxNJIXOB4GFlbEthBesW2+AguVdYjGQGJZ76Ne2XDlH+8v+ix6mewtdUHGGmloHxCKhFaE 0x6xdY3KFKHY6FCymZBzIpcxlnsuHKbrq41O7OKLLCYZo03Dxy8ogxoXAAw4IsAF2D2MUhPtpBr2 xxGAdiEk4su1BKce48XGfb9RcWztYWvvlUj0pCVH3Nb2LG5g+wBMmbwU6kK84WGbh59yFXlgoug9 gQxMOg+bQuyq503vGk7VkJr2q4IQt2WwzU+ljvomftumY/z4xSjKSiD1l2y5uv7OVRPC9RJPaZXt fjURW7ZC5tJSVN9FCyUeZPBYwybEG7xIz19IDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Found 4 DNSKEY records for TAX.GOV
	`TAX.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAbYGRn+LqIO6tNR2nuXqhD2cHGQ/op2tOnwcDwuEvPdPS5IVZujRLrTnsO3HE+08JMzjtgPr urwUrkmWaWbVdPq3f18PcK2j7Y6xVvYP987TW0VqsY4s8Qy706aI81+SLRe1LFqoT9zuHIcj4dBo BTuv/ceFwdHfRQkZM2+QJHGpUqwijgc0o/aWn0pYspxJPwu2yLUD1KTTidzcWeFQwMHsqz+6cWDf Vu/kPmZ3O2K3ymQLPRoj+caC4quPwPvmxXsEG+opvcVYJWhozcqB0TvRSVKg+aGGcDzeUAxHDEJp zqhFYSftfx8oNPWCkIfLlqtyjsIwyJAJXdb10WQjlBs= ) ; Key ID = 59931`
	`TAX.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAdBhdMPgz5qRicfUt+eDQ3Id6P26CF2jhAMOS6qH/QAvkGHJkzI6mx01iTdc2byvo4GqYtDW Ww6IEOkx9nFJGOC0cLSEHHMIpF3VKA8GD4uBcpAyklwXnAznkh3TdJMSdPPWQqZzwbxgrpwsBmEM b+mOadUJWOkaE851MJMDa/EYVzEeFDYWvbe/lMjEUfr33+crU4qiyjtbOgQdwhwJ7mXitO7CTtLh VSrNEGEnwwznD47G/CirCQuG/QdDHYFKkZdRuKm1PQ0HiscH/oo5t7ij0lMvfpnl+ykTMxIevyvq Ji3n9a83tiRuiQd29RvZaF0SL92+drIoXF4hfuKGcts= ) ; Key ID = 59241`
	`TAX.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAbvPFVTVFtTkVLkHaS7Os4NDQlckE8j76De0Kf1Wfy7o6eKYJ73lNDxsLSIzVbwAaBf5q5cx BLqs1451/IPj1ofDxN+CRNQD5yPW0eVjFNa1Y3Jx+KWslxz/pXRzrEyFthgRcMNiY1uMu2GcYpTH 7XJyA/PLoO4EPT8zI8Yo7bOaKyGIYRRRH8HhETxxPoJdl56LKiGYSdKpV3M0A+VlqZVjq1sAiHsX jGh738H3N1YKfwWP5RCeh04IOm+88cg0Hx/9DtVGtGmPE7gVETvIXMU2PLyErpWbXWMaNoEE6Ec+ FqnogQJDteovJL+7PzQxKSFKjXP7nqQUfvFdZNC1KAM= ) ; Key ID = 26104`
	`TAX.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAdYO02RFozQwtxwZSt8XppxW4Ub6shEXDLrLh3sHEEUPuS7oqKkytKazRTCQdo47wiNBQq8j x2PlAto34V4+YwNZPuif9aS5SWeIF+ff1gFFPycP1q1hnrrneNNd/b/xjGMouVGQ0tRAGC3nSlSx XYLoEwGu+TeUcY3JaWf9i4d8FzjqeKfqOR3DQ6l2LnWMuOVzR2XCfqoodCrW4xrwYxClkZNp/XCL ZWMtFYyen2lmlUXQw28nOGiYBlgjtUmDm2wKKnDlDHkOH8bVvyEqomr9YTCUxR9jnB0eHM1BJR9I oq+VIhQJQhgSp58+pVDDstubyOC5bGL1n+/+fcRxMX8= ) ; Key ID = 13810`
	DNSKEY=26104/SEP is now in the chain-of-trust
	DS=26104/SHA-256 verifies DNSKEY=26104/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`TAX.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20190901030931 20190825020931 26104 tax.gov. QvX0c6qxNJIXOB4GFlbEthBesW2+AguVdYjGQGJZ76Ne2XDlH+8v+ix6mewtdUHGGmloHxCKhFaE 0x6xdY3KFKHY6FCymZBzIpcxlnsuHKbrq41O7OKLLCYZo03Dxy8ogxoXAAw4IsAF2D2MUhPtpBr2 xxGAdiEk4su1BKce48XGfb9RcWztYWvvlUj0pCVH3Nb2LG5g+wBMmbwU6kK84WGbh59yFXlgoug9 gQxMOg+bQuyq503vGk7VkJr2q4IQt2WwzU+ljvomftumY/z4xSjKSiD1l2y5uv7OVRPC9RJPaZXt fjURW7ZC5tJSVN9FCyUeZPBYwybEG7xIz19IDQ== )`
	RRSIG=26104 and DNSKEY=26104/SEP verifies the DNSKEY RRset
	DNSKEY=59931 is now in the chain-of-trust
	DNSKEY=59241 is now in the chain-of-trust
	DNSKEY=13810/SEP is now in the chain-of-trust
	Query to ns4.irs.GOV for TAX.GOV/A
	Received 718 bytes from 152.216.11.133
	;; Answer received from 152.216.11.133 (718 bytes) ;; HEADER SECTION ;; id = 16361 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN A ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN A 155.130.130.113 TAX.GOV. 14400 IN RRSIG ( A 8 2 14400 20190901030931 20190825020931 59241 tax.gov. VgTlzOAOuZdZIfWCYD8zBzTXyahtR5Uiz7HhuJWDcib03XtfWWxAivp6R85dCxWMwPpZ4i2wwtmF /w9iJarxeRnL/vN6cWUL0+U0yj08nKFFtI6SUCOktI4hUYg52g8h5Y2wTJD6QX3PfqLE72VWkMfS JFfvlQsvYM7BuyWoPYtEo6vzGYdB7HlL9lEuFYCm4t1NqJqyCkhwqspc/tLxlJhMR/aq0MfpkRaC K//3RXZ91dYI3GdFqER9SCaWZxgyL1VtsyXfV3mTdu5rJlbFsrK7hjq1Mb5h85gTWfTh1WsjGQDM OQUCS+XC9N16dPyzt0MZSjVIG+KqvM5Lyy9AUA== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	TAX.GOV is authoritative for TAX.GOV
	Found RRSIG signed by tax.gov zone
	Query to ns5.irs.GOV for TAX.GOV/SOA
	Error querying ns5.irs.GOV/2610:30:0:13:0:0:0:164 for TAX.GOV/SOA: 'IPv6 transport disabled'
	Received 768 bytes from 152.216.13.164
	;; Answer received from 152.216.13.164 (768 bytes) ;; HEADER SECTION ;; id = 2172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN SOA ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 3126 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) TAX.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190831030500 20190824020500 59241 tax.gov. AzOa6TVm57tKtUm/8daNVUqKtSujEfsy9Pl+7jKPm/2mA/A9y/SiN0fQDKVwnRmxqhsnVl6lJRhI in97CSPWXwYHUbten2vfbvjXm5zpHP1zjVyP9wT3EuRZWcoylxuc1avG2oSRWOAo9IIbYywV6/pp mG+8BUi+wxW15ot198GFJ3zV4hO/Ek7aMZPEqsrBUAuG3LtKuCrmBzzBQno74mibMSZJd5oWUsfE E/9s80oaEPDzshjr0KGl75zzuZHhldc2lyTxP7qEWIR5gTMX60Hoytoz9DMP9MzbjWsIGWHObjTQ 5TxtobLjY9dQYGRcayFZDJ9cGUZpzSHJk0Hv5A== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190831030500 20190824020500 59241 tax.gov. v/gUgaJBc1qiJ+Nxt1Dza/6kd4bOX7TwEC4nQnvYjm0cPX7wwQ7MfUL4YOT7hC7ddl3pCxfS8Ekc Inlo3DGMoWpS5F9J0/o9X1ggAEOElhXd7r3AoxZtDOtS+bWkdyupJkgPsSOTimep6gjH5mCCNS6i KlTwcAh0FnAuz7fFRONk0qmewjmisDOcUOVDkhf62wSfK35HXosgXQwa0YiJEJevOmM3dJXO8y/l TmnQKOOxPueANtJiVJiWIt52DGiGbyD9kiNH1bxVPwGEytGr/FmtuIUYkbAgToulYmoiXgFxi1bQ Pje5dwiNva0eOVDrJQclNNX3DLNbG51NUwhw8g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Query to ns6.irs.GOV for TAX.GOV/SOA
	Error querying ns6.irs.GOV/2610:30:0:13:0:0:0:165 for TAX.GOV/SOA: 'IPv6 transport disabled'
	Received 768 bytes from 152.216.13.165
	;; Answer received from 152.216.13.165 (768 bytes) ;; HEADER SECTION ;; id = 8216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN SOA ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 3127 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) TAX.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190901030931 20190825020931 59241 tax.gov. THbYuLuH+1u3267P7hDJSjyYhv5VVvWHI0DI+KDj+PQ1zdwABCAh6u3tekZTcrhs/M0NjO/rJ4kN kPEELCAHzHw2eMBgr94ozSw8hJ2bMiE9pMhrEHsrrqQUdhgyltuPel6RA4dKQ8gE4wgsGLrHbi4m xc3TFenYBrLAZcG9G929/3WwwC/CjbwhB9IL1lr1UkWsMzTIKUuMRe8rFO49JdFto7aeMZ2F8bqc ZMBw/kAqEu4hfdqYATAgFfuCzrEB/05AHHlTlrCmCyBKRl3WmY331MQnxTfJiKYHExUPFGfNEqQe 1pJX+17hqE7rXpDdsk/bESWCq62jmPfBGUMIkw== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns6.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
	Query to ns4.irs.GOV for TAX.GOV/SOA
	Error querying ns4.irs.GOV/2610:30:2000:53:0:0:0:91 for TAX.GOV/SOA: 'IPv6 transport disabled'
	Received 768 bytes from 152.216.11.133
	;; Answer received from 152.216.11.133 (768 bytes) ;; HEADER SECTION ;; id = 16114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN SOA ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 3127 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) TAX.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190901030931 20190825020931 59241 tax.gov. THbYuLuH+1u3267P7hDJSjyYhv5VVvWHI0DI+KDj+PQ1zdwABCAh6u3tekZTcrhs/M0NjO/rJ4kN kPEELCAHzHw2eMBgr94ozSw8hJ2bMiE9pMhrEHsrrqQUdhgyltuPel6RA4dKQ8gE4wgsGLrHbi4m xc3TFenYBrLAZcG9G929/3WwwC/CjbwhB9IL1lr1UkWsMzTIKUuMRe8rFO49JdFto7aeMZ2F8bqc ZMBw/kAqEu4hfdqYATAgFfuCzrEB/05AHHlTlrCmCyBKRl3WmY331MQnxTfJiKYHExUPFGfNEqQe 1pJX+17hqE7rXpDdsk/bESWCq62jmPfBGUMIkw== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns4.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
	Query to ns3.irs.GOV for TAX.GOV/SOA
	Received 768 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (768 bytes) ;; HEADER SECTION ;; id = 42995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN SOA ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 3127 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) TAX.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190901030931 20190825020931 59241 tax.gov. THbYuLuH+1u3267P7hDJSjyYhv5VVvWHI0DI+KDj+PQ1zdwABCAh6u3tekZTcrhs/M0NjO/rJ4kN kPEELCAHzHw2eMBgr94ozSw8hJ2bMiE9pMhrEHsrrqQUdhgyltuPel6RA4dKQ8gE4wgsGLrHbi4m xc3TFenYBrLAZcG9G929/3WwwC/CjbwhB9IL1lr1UkWsMzTIKUuMRe8rFO49JdFto7aeMZ2F8bqc ZMBw/kAqEu4hfdqYATAgFfuCzrEB/05AHHlTlrCmCyBKRl3WmY331MQnxTfJiKYHExUPFGfNEqQe 1pJX+17hqE7rXpDdsk/bESWCq62jmPfBGUMIkw== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns3.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
	Query to ns1.irs.GOV for TAX.GOV/SOA
	Received 768 bytes from 152.216.7.164
	;; Answer received from 152.216.7.164 (768 bytes) ;; HEADER SECTION ;; id = 5097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN SOA ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 3127 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) TAX.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190901030931 20190825020931 59241 tax.gov. THbYuLuH+1u3267P7hDJSjyYhv5VVvWHI0DI+KDj+PQ1zdwABCAh6u3tekZTcrhs/M0NjO/rJ4kN kPEELCAHzHw2eMBgr94ozSw8hJ2bMiE9pMhrEHsrrqQUdhgyltuPel6RA4dKQ8gE4wgsGLrHbi4m xc3TFenYBrLAZcG9G929/3WwwC/CjbwhB9IL1lr1UkWsMzTIKUuMRe8rFO49JdFto7aeMZ2F8bqc ZMBw/kAqEu4hfdqYATAgFfuCzrEB/05AHHlTlrCmCyBKRl3WmY331MQnxTfJiKYHExUPFGfNEqQe 1pJX+17hqE7rXpDdsk/bESWCq62jmPfBGUMIkw== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns1.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
	Query to ns2.irs.GOV for TAX.GOV/SOA
	Received 768 bytes from 152.216.7.165
	;; Answer received from 152.216.7.165 (768 bytes) ;; HEADER SECTION ;; id = 1816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN SOA ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 3127 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) TAX.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190901030931 20190825020931 59241 tax.gov. THbYuLuH+1u3267P7hDJSjyYhv5VVvWHI0DI+KDj+PQ1zdwABCAh6u3tekZTcrhs/M0NjO/rJ4kN kPEELCAHzHw2eMBgr94ozSw8hJ2bMiE9pMhrEHsrrqQUdhgyltuPel6RA4dKQ8gE4wgsGLrHbi4m xc3TFenYBrLAZcG9G929/3WwwC/CjbwhB9IL1lr1UkWsMzTIKUuMRe8rFO49JdFto7aeMZ2F8bqc ZMBw/kAqEu4hfdqYATAgFfuCzrEB/05AHHlTlrCmCyBKRl3WmY331MQnxTfJiKYHExUPFGfNEqQe 1pJX+17hqE7rXpDdsk/bESWCq62jmPfBGUMIkw== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns2.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
	Query to ns4.irs.GOV for TAX.GOV/A
	Received 718 bytes from 152.216.11.133
	;; Answer received from 152.216.11.133 (718 bytes) ;; HEADER SECTION ;; id = 5333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; TAX.GOV. IN A ;; ANSWER SECTION (2 records) TAX.GOV. 14400 IN A 155.130.130.113 TAX.GOV. 14400 IN RRSIG ( A 8 2 14400 20190901030931 20190825020931 59241 tax.gov. VgTlzOAOuZdZIfWCYD8zBzTXyahtR5Uiz7HhuJWDcib03XtfWWxAivp6R85dCxWMwPpZ4i2wwtmF /w9iJarxeRnL/vN6cWUL0+U0yj08nKFFtI6SUCOktI4hUYg52g8h5Y2wTJD6QX3PfqLE72VWkMfS JFfvlQsvYM7BuyWoPYtEo6vzGYdB7HlL9lEuFYCm4t1NqJqyCkhwqspc/tLxlJhMR/aq0MfpkRaC K//3RXZ91dYI3GdFqER9SCaWZxgyL1VtsyXfV3mTdu5rJlbFsrK7hjq1Mb5h85gTWfTh1WsjGQDM OQUCS+XC9N16dPyzt0MZSjVIG+KqvM5Lyy9AUA== ) ;; AUTHORITY SECTION (5 records) TAX.GOV. 14400 IN NS ns1.irs.GOV. TAX.GOV. 14400 IN NS ns2.irs.GOV. TAX.GOV. 14400 IN NS ns3.irs.GOV. TAX.GOV. 14400 IN NS ns4.irs.GOV. TAX.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190901030931 20190825020931 59241 tax.gov. JGrxeUloLT3h0BDCJJnWLjqL6CCpRVS8dkwT04QSZc32GESd3QIUxtWb5HVZ6ZuSP17C6mosKPwp aKyB3IhJSo5yJONYbQx4OlLfTl+tzFG+mHIBqWkAkUfWsBoH3Jo0a4JUNwpbQw4vUf4l7vibv1DU IWq9pda1oE55YcOeNTML56Cuv5LcQ9SldIvuBqZEJuSDlZzYdg5XA+3rxaBp2ffLgNyYyKNbR7fx ftT76JhKEkZw1famtHRgFgFdop7cQdfZhsZh1znwVP1Xu0p5YES6DSPXDqEWaOGkKOvnnHtBAwFz kL3/ePPg+wH+DYnkmk9SB6rb5+7xscBQUmfzIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	TAX.GOV A RR has value 155.130.130.113
	Found 1 RRSIGs over A RRset
	`TAX.GOV. 14400 IN RRSIG ( A 8 2 14400 20190901030931 20190825020931 59241 tax.gov. VgTlzOAOuZdZIfWCYD8zBzTXyahtR5Uiz7HhuJWDcib03XtfWWxAivp6R85dCxWMwPpZ4i2wwtmF /w9iJarxeRnL/vN6cWUL0+U0yj08nKFFtI6SUCOktI4hUYg52g8h5Y2wTJD6QX3PfqLE72VWkMfS JFfvlQsvYM7BuyWoPYtEo6vzGYdB7HlL9lEuFYCm4t1NqJqyCkhwqspc/tLxlJhMR/aq0MfpkRaC K//3RXZ91dYI3GdFqER9SCaWZxgyL1VtsyXfV3mTdu5rJlbFsrK7hjq1Mb5h85gTWfTh1WsjGQDM OQUCS+XC9N16dPyzt0MZSjVIG+KqvM5Lyy9AUA== )`
	RRSIG=59241 and DNSKEY=59241 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TAX.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: