DNSSEC Analyzer - TREAS.GOV

Domain Name:

Time: 2020-05-29 03:10:40 UTC, NTP stratum 4

Analyzing DNSSEC problems for TREAS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 59867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	Query to j.root-servers.net for TREAS.GOV/A
	Received 664 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (664 bytes) ;; HEADER SECTION ;; id = 38592 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 49028 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 61553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 37593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40176 is now in the chain-of-trust
	Query to b.gov-servers.net for TREAS.GOV/A
	Received 450 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (450 bytes) ;; HEADER SECTION ;; id = 27167 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) TREAS.GOV. 86400 IN NS ns1.treasury.GOV. TREAS.GOV. 86400 IN NS ns3.treasury.GOV. TREAS.GOV. 3600 IN DS ( 42831 7 2 6241e6fa296030e94d1e9a3a9514dc9877247208f91485efb7a4a4a4b2e50239 ) TREAS.GOV. 3600 IN DS 42831 7 1 dc1e49c77766f3c7253d413b0e25bdb100368022 TREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. VC+TrY8jwG2DZ4UNCQS37d3l0/5uINVxP7M8Byf2YHGgxlbM9R6IarIT9R8lik6+uBQSJfNJXSEE r1/wnDUFCF+npUOwBBVjUZ8PVcB17kY4pJnGXgOSv8Y7N/Z7Wcx9odJ8LLL5AowA8q9SRTOb/PVX pMSvR1owfcOeUIUvQLGiEjArTjfSp41WcOGf9P9LpuC7rLoqqbGpLlbXF74Krg== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for TREAS.GOV/DNSKEY
	Received 450 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (450 bytes) ;; HEADER SECTION ;; id = 36091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) TREAS.GOV. 86400 IN NS ns1.treasury.GOV. TREAS.GOV. 86400 IN NS ns3.treasury.GOV. TREAS.GOV. 3600 IN DS ( 42831 7 2 6241e6fa296030e94d1e9a3a9514dc9877247208f91485efb7a4a4a4b2e50239 ) TREAS.GOV. 3600 IN DS 42831 7 1 dc1e49c77766f3c7253d413b0e25bdb100368022 TREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. VC+TrY8jwG2DZ4UNCQS37d3l0/5uINVxP7M8Byf2YHGgxlbM9R6IarIT9R8lik6+uBQSJfNJXSEE r1/wnDUFCF+npUOwBBVjUZ8PVcB17kY4pJnGXgOSv8Y7N/Z7Wcx9odJ8LLL5AowA8q9SRTOb/PVX pMSvR1owfcOeUIUvQLGiEjArTjfSp41WcOGf9P9LpuC7rLoqqbGpLlbXF74Krg== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TREAS.GOV

TREAS.GOV

	Checking DS between GOV and TREAS.GOV
	Query to a.gov-servers.net for TREAS.GOV/DS
	Received 317 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (317 bytes) ;; HEADER SECTION ;; id = 2295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN DS ;; ANSWER SECTION (3 records) TREAS.GOV. 3600 IN DS ( 42831 7 2 6241e6fa296030e94d1e9a3a9514dc9877247208f91485efb7a4a4a4b2e50239 ) TREAS.GOV. 3600 IN DS 42831 7 1 dc1e49c77766f3c7253d413b0e25bdb100368022 TREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. VC+TrY8jwG2DZ4UNCQS37d3l0/5uINVxP7M8Byf2YHGgxlbM9R6IarIT9R8lik6+uBQSJfNJXSEE r1/wnDUFCF+npUOwBBVjUZ8PVcB17kY4pJnGXgOSv8Y7N/Z7Wcx9odJ8LLL5AowA8q9SRTOb/PVX pMSvR1owfcOeUIUvQLGiEjArTjfSp41WcOGf9P9LpuC7rLoqqbGpLlbXF74Krg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for TREAS.GOV in the GOV zone
	DS=42831/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=42831/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. VC+TrY8jwG2DZ4UNCQS37d3l0/5uINVxP7M8Byf2YHGgxlbM9R6IarIT9R8lik6+uBQSJfNJXSEE r1/wnDUFCF+npUOwBBVjUZ8PVcB17kY4pJnGXgOSv8Y7N/Z7Wcx9odJ8LLL5AowA8q9SRTOb/PVX pMSvR1owfcOeUIUvQLGiEjArTjfSp41WcOGf9P9LpuC7rLoqqbGpLlbXF74Krg== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=42831/SHA-256 is now in the chain-of-trust
	`TREAS.GOV. 3600 IN DS ( 42831 7 2 6241e6fa296030e94d1e9a3a9514dc9877247208f91485efb7a4a4a4b2e50239 )`
	`TREAS.GOV. 3600 IN DS 42831 7 1 dc1e49c77766f3c7253d413b0e25bdb100368022`
	Query to ns1.treasury.GOV for TREAS.GOV/DNSKEY
	Received 989 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (989 bytes) ;; HEADER SECTION ;; id = 44841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) TREAS.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAa2FbGqoY5eSC8zqDawEWZz9W6y3gdEzFcxhvgrqmTH1Kr27SQOyG3p9pkb+HHDdMyvXdhuA GT0Uj4l+JNP0QAbDdR3IM/mAs4Y3zXwPZ5oeSN5aor0kVThH1ERurVwekWGKSt9FfpL6ELP99Dj+ cJJDEU4x5xTppVgZnk0IS8Gr ) ; Key ID = 42831 TREAS.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAYa6xN0QGdQcSeklgtav5CqPZmLbGaXmYmrgPbrIWRBpjkloPsecrLoI0J7ttfIMQ/Xr/MPS 5fVSmU/lWYHHCGzG5vYNKiVHD1LwWoqLXZ6EP5FrwzAR/ck4u0QxEuRtfICfQehRTQBnd1zo6qgQ CLk6kFU0gvFFtPkrvXPQhwgV ) ; Key ID = 22100 TREAS.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAcRXq99SyxcvkKPAvZn4IQElehpFZXUYIMDmU0eVnY7bRZ3Az1fbcLMkqk+0XNmMQnr8RbbX hV5yMplSKcxZU/eVS/q6/vOSZvr57wVD1P/svp/zyTIxVdS4g3qeuOwl6X9NErRvHljVrYOY2hkJ Cw/DRRiSqYoGrzCHldyrIpq1 ) ; Key ID = 41993 TREAS.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20200602071145 20200526071145 42831 treas.gov. maWUB5/LtAATlKbqDvHJMsL4FTQ4AJwL41e+zmHpXMm8iwm8yhi9klKCfZW518bAGixFa4IWqfpg bd/nv4Eple9I3HHFIZnEf7D+cQUyOAoYXvMlfbbTkH72MkeAVMfLmTgXhMCChJAm9yhFQiZv4Jtg qUZgUVH5Wl0Gnb+uTJE= ) TREAS.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20200602071145 20200526071145 22100 treas.gov. Er1rwrOr1no9SaknJAfUP94sZPflQ9XT4sJBevqfvHIo9DHWQijxtIQUbl6SYFWxIykJQF80LHyl V6HbjUrQPP6itvCr6PTaPcqf403lABam8c2dwL27RXwKT6GUvYRO7ZrIIdhpJogzi6GrdXkuuy26 rkG2ZhjiMBPOyA03RG4= ) TREAS.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20200602071145 20200526071145 41993 treas.gov. I2PdPfAAmtk9goGQcPFr8lDW4aGXYLQvLPWm+JZvkDL2WoFn+XP1/QCH52y4mImxBgB2fqEH92EX 4itpadju+4lfak93B1j3Uc0mlSyxDKAdC2UNQm6v9qezcZKRcLGVc+VdnTaz32IEav26KWu2u0NF CIFLpNxsjKuzYn4BjG8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for TREAS.GOV
	`TREAS.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAa2FbGqoY5eSC8zqDawEWZz9W6y3gdEzFcxhvgrqmTH1Kr27SQOyG3p9pkb+HHDdMyvXdhuA GT0Uj4l+JNP0QAbDdR3IM/mAs4Y3zXwPZ5oeSN5aor0kVThH1ERurVwekWGKSt9FfpL6ELP99Dj+ cJJDEU4x5xTppVgZnk0IS8Gr ) ; Key ID = 42831`
	`TREAS.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAYa6xN0QGdQcSeklgtav5CqPZmLbGaXmYmrgPbrIWRBpjkloPsecrLoI0J7ttfIMQ/Xr/MPS 5fVSmU/lWYHHCGzG5vYNKiVHD1LwWoqLXZ6EP5FrwzAR/ck4u0QxEuRtfICfQehRTQBnd1zo6qgQ CLk6kFU0gvFFtPkrvXPQhwgV ) ; Key ID = 22100`
	`TREAS.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAcRXq99SyxcvkKPAvZn4IQElehpFZXUYIMDmU0eVnY7bRZ3Az1fbcLMkqk+0XNmMQnr8RbbX hV5yMplSKcxZU/eVS/q6/vOSZvr57wVD1P/svp/zyTIxVdS4g3qeuOwl6X9NErRvHljVrYOY2hkJ Cw/DRRiSqYoGrzCHldyrIpq1 ) ; Key ID = 41993`
	DNSKEY=42831/SEP is now in the chain-of-trust
	DS=42831/SHA-256 verifies DNSKEY=42831/SEP
	DS=42831/SHA-1 verifies DNSKEY=42831/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TREAS.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20200602071145 20200526071145 42831 treas.gov. maWUB5/LtAATlKbqDvHJMsL4FTQ4AJwL41e+zmHpXMm8iwm8yhi9klKCfZW518bAGixFa4IWqfpg bd/nv4Eple9I3HHFIZnEf7D+cQUyOAoYXvMlfbbTkH72MkeAVMfLmTgXhMCChJAm9yhFQiZv4Jtg qUZgUVH5Wl0Gnb+uTJE= )`
	`TREAS.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20200602071145 20200526071145 22100 treas.gov. Er1rwrOr1no9SaknJAfUP94sZPflQ9XT4sJBevqfvHIo9DHWQijxtIQUbl6SYFWxIykJQF80LHyl V6HbjUrQPP6itvCr6PTaPcqf403lABam8c2dwL27RXwKT6GUvYRO7ZrIIdhpJogzi6GrdXkuuy26 rkG2ZhjiMBPOyA03RG4= )`
	`TREAS.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20200602071145 20200526071145 41993 treas.gov. I2PdPfAAmtk9goGQcPFr8lDW4aGXYLQvLPWm+JZvkDL2WoFn+XP1/QCH52y4mImxBgB2fqEH92EX 4itpadju+4lfak93B1j3Uc0mlSyxDKAdC2UNQm6v9qezcZKRcLGVc+VdnTaz32IEav26KWu2u0NF CIFLpNxsjKuzYn4BjG8= )`
	RRSIG=42831 and DNSKEY=42831/SEP verifies the DNSKEY RRset
	RRSIG=22100 and DNSKEY=22100 verifies the DNSKEY RRset
	RRSIG=41993 and DNSKEY=41993 verifies the DNSKEY RRset
	DNSKEY=22100 is now in the chain-of-trust
	DNSKEY=41993 is now in the chain-of-trust
	Query to ns1.treasury.GOV for TREAS.GOV/A
	Received 2239 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (2239 bytes) ;; HEADER SECTION ;; id = 7188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN A ;; ANSWER SECTION (3 records) TREAS.GOV. 120 IN A 166.123.218.220 TREAS.GOV. 120 IN RRSIG ( A 7 2 120 20200604193644 20200528193644 22100 treas.gov. UhfHTFMZBt4l6A7UrhYm24MEFfL8KjD5N63RIdD2NaSWO0g6m/dyIxBjNWbK5kS1xRJb9dmt7epu Bgz4e9gxA8+3rziXP+H7j4in368GNm5/LVFsYp7NyeZFV9qW8mQtZKEgqcnJoOAFGHaJFzvWUVy3 9idQwVzjk6UV5QHvxHs= ) TREAS.GOV. 120 IN RRSIG ( A 7 2 120 20200602071151 20200526071151 41993 treas.gov. dlarOkANiljFLs6JjasKxnQKdoLXz7hH5WOC/pSCBpwhklW1T1DVvMNsWvoUWXJiaBdzapQJErP4 JfN0J8zDR6ExhYd5Mv6rYnk+9BpyDo/EtKbrKYOlHC6I9Em2Awnhoi2xH2k4RAYuQ5q3pkvNgxHQ CWVaefRTS5D4bJJkVG4= ) ;; AUTHORITY SECTION (4 records) TREAS.GOV. 300 IN NS ns1.treasury.GOV. TREAS.GOV. 300 IN NS ns3.treasury.GOV. TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200604194159 20200528194159 22100 treas.gov. U3Ra/NhBXykjCLBM1kuZffD0h860J8Lh0BgMgudU+Lej1s2I5MZ4TdR1se8aVpmk1atNwpemsgyx ir1xXkfrMj2Z75by4Nz858rEcCOs3DtMNdCx4H5V3OAgfdWN1nvitzEx6TFS2Oi6MkIBNfJqkSHH kPtErdKt7EzssHxXeIc= ) TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200602071144 20200526071144 41993 treas.gov. KEchfvGv/zSo5LfZxUvtDFGJGjZ89rLXA6PxKsj5YlOhWnbvOJfmYJjQEdjrrxOs/41Q52X+BDAX BIVfrvx7NFMe2SmuvjrNxRjg+Px0ZMt9lJ9ZCnqr+74AatEmD9MJp8dIMAIJuUvqqmWao8rlynrP vjAQ8ACX4G7wo/L8BWU= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200604213258 20200528213258 47468 treasury.gov. XWUTof/zIq2wiIcI7cqhmP3cvToJRwby74V8LrdmahWHCm0+3QufAjVORz41I8YdrXTfwLvj6Ydp TcihDclRoFQCiingW/zcKXTzGNQ12YdFKWXUvUcs29K3lHwOWsa1RPh/a6lEwkH3bDqcYLiahhoV 6cn5T1Jgwr8MyuR3DWs= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Aq5dMh2PlSR3O76jWQsm34NGlDxHC9221wLjUnXg72buaKHQk4wL0bzgklU8uQPtXwa2sKLkpmEr OGmwOemlJ3/+LA+QaRdPCoZaMTkr9K2X/wvP/5+TvJUA8QnH+0e6HMgXC5G3jznB2Xkb9Gh8kzFB N+x+ZPIMRMNRcgEylkU= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200605000654 20200529000654 47468 treasury.gov. Il4gxB51lP9RAa+efJ97WAxvFNGLJGfLNPY7ah8O5eaCS0lsi8Ypyi7I3VhKl+sqYmEZfznkWP1F 5VoASmyyFSQj1rcepNlYmz/JPi4ypb+ZfSIyOHY7qgAZDfTA+W8dkQ2lnCBnMClpW37xrY+nYVBf wVdPmdPfyhvBdEV9Lag= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Na+XSZsBV5WRkjBLLSyhOIPttgM4inlqDdOXdUPlgKMSUJoqTmiduKC0VB42wDpiMPuB8/8cpEXp /6fkR0/olgDp7QpFIZ9I3p8l4ce16cmnUoibbgWbuYyFIPl1xgjzfYSRzt9sFinR0MODcvSKEo+9 sGYqmqoKQaIWYIyrkxU= ) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200603170102 20200527170102 47468 treasury.gov. qd1lEiBNUu9AHC/SIQU6Ev2jhbOVq2enelysxaGCBxfhxrPEBl7KEN0h04gOFT7mzeNUNFcOWc02 RhtWGecbMAulyiv9XvhevhhgW1HHCZNMJb6MWUBmzZritY7sA7krsgbqwYm5DxXq+V4CC0f1kCJk f9bEvmPH2cP0dELOCDM= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KDz6QKBsXIZwOaEt1uEMzA2sCucjRj+290BGiJnZYzgRPfz0N8yyqAMQfD+kiJKSEsVVRWEZSwbe TpmQw0S4MbW8ozYessjoPyo2L1qGbjxxScdDsp7VLJqwhKFdQwnnY9KVIWaUgDfaIVc6psQuMzVi 4Js4MMbeDwOfoclQ8GM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200604111055 20200528111055 47468 treasury.gov. gO/Go5aeeChN1JXYUDS8jp3uNMzWCsymLkN7MOkfzB8bIddwZ9MbKJ1Om/1gLdLtdybEYfXcA+Fo JX5Ad/im+2dtemYIdSvedsgEQ2MztpT0JAMuHE8n0naxlQgyk4C1nPXA+4vK1AONwYVv1OkKLO2q ecHpfAB4VkALRbs/2zI= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KJH8EZ6pxrUSE75hf4HD3PZoUrA+m0bmqYP2xS5ceaIXHimM54HltexyzDrWSsETN2Nswl2XGZxC IApS4MQG52eRIfZxpqQ8n34/9XgTFHszEjJskKgFI48Yl66Zbbr4PQel4tRTBDjZYoUCVoJPPpri 171cXq+ExJEz2Bi7w30= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREAS.GOV is authoritative for TREAS.GOV
	Found RRSIG signed by treas.gov zone
	Query to ns3.treasury.GOV for TREAS.GOV/SOA
	Received 2289 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (2289 bytes) ;; HEADER SECTION ;; id = 1108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN SOA ;; ANSWER SECTION (3 records) TREAS.GOV. 300 IN SOA ( nstsm1.perimeter.bpd.TREAS.GOV. webadmin.bpd.TREAS.GOV. 2010673878 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TREAS.GOV. 300 IN RRSIG ( SOA 7 2 300 20200602033248 20200526033248 22100 treas.gov. ZIKccZ0Ao4GMCZAc4ku1GrOjDaM5kRqfyh9Wee4mxco2j2ml/9DdOwwqtqbIHt29RpssBTxKTqRQ mvl43ykiZ6QlPHXszZOJ2AErLWNFKLcEprTZPokutcR3MlgKf+C9c2I9z5WO70yESSZrAfV+bLol ALYXCagpaBjUXaJassQ= ) TREAS.GOV. 300 IN RRSIG ( SOA 7 2 300 20200602071144 20200526071144 41993 treas.gov. siEEsfd3WAbBh6HOrYid+MOmhbFvpTbN174WgRMNdhjarPkDUNx9qfHQIUobfcvQluk0cFL6LxQV 67rGmI7ly9OCF359PVckVZ6D4s+rVdeJ4WbhHv1XCRTgbLGzw+5hJdph1E3CHmKq+Qt1VkguaSuI sSSBAE8qFxl3qlmqOw8= ) ;; AUTHORITY SECTION (4 records) TREAS.GOV. 300 IN NS ns3.treasury.GOV. TREAS.GOV. 300 IN NS ns1.treasury.GOV. TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200602153601 20200526153601 22100 treas.gov. bhKEbFEvcwqnD+y7W8IJejQxQfg4d2i55eP8faXO0MpJI9B/ZmaTH3srB1mrLX+k+w09q4Hmpaed IzvyKic0U8fh6bKPHApSOiqwou3wCjNyDIQmr6VZfwLRiJbSf9pGZScOSGrE1kqNr0kthHBoQNU4 MqtPoHRgFFdzQKRLik8= ) TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200602071144 20200526071144 41993 treas.gov. KEchfvGv/zSo5LfZxUvtDFGJGjZ89rLXA6PxKsj5YlOhWnbvOJfmYJjQEdjrrxOs/41Q52X+BDAX BIVfrvx7NFMe2SmuvjrNxRjg+Px0ZMt9lJ9ZCnqr+74AatEmD9MJp8dIMAIJuUvqqmWao8rlynrP vjAQ8ACX4G7wo/L8BWU= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602141252 20200526141252 47468 treasury.gov. GA8bWNXfjAr1f2feqNMR/+huu3jremZhTvq1OlpQzwAl5C95Rz/E09yuamgKVtd9aUTzO4ZzauKV Vq+iFRFu8Gm6Q68KzhUYsdQRWjyJsWnZEcQ03iGD43mw24m6QSadVoSC0z+liOaJIvBIXPzWeOgd 4PN0+lMNFFChaOGLerI= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Aq5dMh2PlSR3O76jWQsm34NGlDxHC9221wLjUnXg72buaKHQk4wL0bzgklU8uQPtXwa2sKLkpmEr OGmwOemlJ3/+LA+QaRdPCoZaMTkr9K2X/wvP/5+TvJUA8QnH+0e6HMgXC5G3jznB2Xkb9Gh8kzFB N+x+ZPIMRMNRcgEylkU= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200603082632 20200527082632 47468 treasury.gov. CstUWbiDZi8hX4qzTZtgXre4hz3fYdly3eWj87ofRPwUjma4uX/eOmbKKyHR4/qxALtPApOGSOC5 z+FV7gxhrL8lYvFx2/aosLN0pbM/s+9rX/KjZCgrqsz2Qr8v7m8RdCwElA+nJ1TdXhh1TdcDGafT WkIWZ1wlHQxfCtx8v30= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Na+XSZsBV5WRkjBLLSyhOIPttgM4inlqDdOXdUPlgKMSUJoqTmiduKC0VB42wDpiMPuB8/8cpEXp /6fkR0/olgDp7QpFIZ9I3p8l4ce16cmnUoibbgWbuYyFIPl1xgjzfYSRzt9sFinR0MODcvSKEo+9 sGYqmqoKQaIWYIyrkxU= ) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200603082750 20200527082750 47468 treasury.gov. CTZNHIKMjppCa1D2Semk6K4MY+wv5Wf0dyGfrRzykUMoc0cWQ6TCa2Ig2gvTMYxkIlrbS8GaDlwU VLmty0EquOQ4DAYRb4r3i3053SJUhwpE/ixjMt7FJM64/5DtxtOtTKXwoBzByKHRfQlbTshSleRa GUWCDf7MRk6tqvuo5ik= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KDz6QKBsXIZwOaEt1uEMzA2sCucjRj+290BGiJnZYzgRPfz0N8yyqAMQfD+kiJKSEsVVRWEZSwbe TpmQw0S4MbW8ozYessjoPyo2L1qGbjxxScdDsp7VLJqwhKFdQwnnY9KVIWaUgDfaIVc6psQuMzVi 4Js4MMbeDwOfoclQ8GM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602073521 20200526073521 47468 treasury.gov. eML2OjTeStS/mq9Qimah4d+bvVHlY7MqyEM4m0nE37VNG6VIn046xPwIpPFkXkNj3xvL/W0W7DTZ Xj5jHhkC8AVu2RVx5AtX/2QmkVfRM7NWlAwAKWSQtTMb+8DaBTiZGIknL5/fmYUV6mZJ6DCGdGTv V0AtklbfINE11YNlK/8= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KJH8EZ6pxrUSE75hf4HD3PZoUrA+m0bmqYP2xS5ceaIXHimM54HltexyzDrWSsETN2Nswl2XGZxC IApS4MQG52eRIfZxpqQ8n34/9XgTFHszEjJskKgFI48Yl66Zbbr4PQel4tRTBDjZYoUCVoJPPpri 171cXq+ExJEz2Bi7w30= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for TREAS.GOV/SOA
	Received 2289 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (2289 bytes) ;; HEADER SECTION ;; id = 25532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN SOA ;; ANSWER SECTION (3 records) TREAS.GOV. 300 IN SOA ( nstsm1.perimeter.bpd.TREAS.GOV. webadmin.bpd.TREAS.GOV. 2010673878 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TREAS.GOV. 300 IN RRSIG ( SOA 7 2 300 20200602033248 20200526033248 22100 treas.gov. ZIKccZ0Ao4GMCZAc4ku1GrOjDaM5kRqfyh9Wee4mxco2j2ml/9DdOwwqtqbIHt29RpssBTxKTqRQ mvl43ykiZ6QlPHXszZOJ2AErLWNFKLcEprTZPokutcR3MlgKf+C9c2I9z5WO70yESSZrAfV+bLol ALYXCagpaBjUXaJassQ= ) TREAS.GOV. 300 IN RRSIG ( SOA 7 2 300 20200602071144 20200526071144 41993 treas.gov. siEEsfd3WAbBh6HOrYid+MOmhbFvpTbN174WgRMNdhjarPkDUNx9qfHQIUobfcvQluk0cFL6LxQV 67rGmI7ly9OCF359PVckVZ6D4s+rVdeJ4WbhHv1XCRTgbLGzw+5hJdph1E3CHmKq+Qt1VkguaSuI sSSBAE8qFxl3qlmqOw8= ) ;; AUTHORITY SECTION (4 records) TREAS.GOV. 300 IN NS ns1.treasury.GOV. TREAS.GOV. 300 IN NS ns3.treasury.GOV. TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200605003402 20200529003402 22100 treas.gov. MPR6sqLR0v3mtKjdRhE0/Z8LC3/eME4co6fLWhos9/H2FJuO+3QWdh0lAxEGU2C8sXmQhyNjDFbO pgXQjA004aNk33pEBhAn7z4UPa+sWPABnFSKfo3IEIw1IyEgRevIXDcl0QDLAPYWarHwMOv7TPDY 13lr4BndVdJ6h/slNO0= ) TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200602071144 20200526071144 41993 treas.gov. KEchfvGv/zSo5LfZxUvtDFGJGjZ89rLXA6PxKsj5YlOhWnbvOJfmYJjQEdjrrxOs/41Q52X+BDAX BIVfrvx7NFMe2SmuvjrNxRjg+Px0ZMt9lJ9ZCnqr+74AatEmD9MJp8dIMAIJuUvqqmWao8rlynrP vjAQ8ACX4G7wo/L8BWU= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200605001455 20200529001455 47468 treasury.gov. FuYOzr4MzFDgkUyTSbARmaYTq1FflE3WHSJTMbAzaGSLF+agystXd6NaGOPsLvkYyNiFtSA/sWbA 4RB2v4AvaglLXFHcpe06GQWy+GBbDpHaNRMwHSZXCIYDLpCdOiIzN9uVpT1yGRbQ2fq88OBP3tG9 +WAEwdQz4DL0hcs++QQ= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200605001455 20200529001455 40478 treasury.gov. MGB0D4POtl/jVVtfBRLjwG1NDGaSCVGH/DS++Yi03BrKYHIv1YqmYgpPpampsqqqLW+GplPHe08H LdnLWo/+xlDGKF3C6FHdU6BPqoMX+4JJ6Rx6M02vL4JVzkdUnE3IZldt6KjQVscInWQuXaHI6fho Pc0xo2+Kzyh4HJF8ru8= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200601213929 20200525213929 47468 treasury.gov. ZE8AdJSawnRokAVdjw3peP7pq2XEiQzuU5rBxecuwwsKFHWr2oYngvQfGGKXFVDZcE1dBMna8pcH FTgsatiUanzoX9nQyB2+zemZ4dbOpMEpqEr0xPPYozyiUkLVwUUfvzK8vyBkrcxbsk8iVDWo6SsP BlRRZljwrjN/S2ww2DQ= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Na+XSZsBV5WRkjBLLSyhOIPttgM4inlqDdOXdUPlgKMSUJoqTmiduKC0VB42wDpiMPuB8/8cpEXp /6fkR0/olgDp7QpFIZ9I3p8l4ce16cmnUoibbgWbuYyFIPl1xgjzfYSRzt9sFinR0MODcvSKEo+9 sGYqmqoKQaIWYIyrkxU= ) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200604102225 20200528102225 47468 treasury.gov. D4gx4nf8c8SaKnELaXbdzbrWOuLGf2T1xLpIxrqbxj08OnvxUIMyMoPiEE3zJtDT5E1gLwT8dcuN uIDAifmtI/tWwHVajMfBUsJsdKa3zjurHpMEeQ+SD95zsXgcJPLgK34iIWcnl32zLRjczgpiRdhx l6WdARSXn9NdIAsFHUU= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KDz6QKBsXIZwOaEt1uEMzA2sCucjRj+290BGiJnZYzgRPfz0N8yyqAMQfD+kiJKSEsVVRWEZSwbe TpmQw0S4MbW8ozYessjoPyo2L1qGbjxxScdDsp7VLJqwhKFdQwnnY9KVIWaUgDfaIVc6psQuMzVi 4Js4MMbeDwOfoclQ8GM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200604194418 20200528194418 47468 treasury.gov. BF/WSNOqFOyD+XVoYZCE019z2a8d4ja5nb0VuuJR07hjp5PVK8fjRXnQcFZq4adjDHhuVmCdtz9+ nlEU7AV5eEG9/17xFwobg6TmjG1WzJTPg9Q6p4hiOeCE7Sx2u9tGJQHYN7HyzV2iwsAnK7oDS5GE HefAPzkGrWgoTwWlGvk= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KJH8EZ6pxrUSE75hf4HD3PZoUrA+m0bmqYP2xS5ceaIXHimM54HltexyzDrWSsETN2Nswl2XGZxC IApS4MQG52eRIfZxpqQ8n34/9XgTFHszEjJskKgFI48Yl66Zbbr4PQel4tRTBDjZYoUCVoJPPpri 171cXq+ExJEz2Bi7w30= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for TREAS.GOV/A
	Received 2239 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (2239 bytes) ;; HEADER SECTION ;; id = 44242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREAS.GOV. IN A ;; ANSWER SECTION (3 records) TREAS.GOV. 120 IN A 166.123.218.220 TREAS.GOV. 120 IN RRSIG ( A 7 2 120 20200604193644 20200528193644 22100 treas.gov. UhfHTFMZBt4l6A7UrhYm24MEFfL8KjD5N63RIdD2NaSWO0g6m/dyIxBjNWbK5kS1xRJb9dmt7epu Bgz4e9gxA8+3rziXP+H7j4in368GNm5/LVFsYp7NyeZFV9qW8mQtZKEgqcnJoOAFGHaJFzvWUVy3 9idQwVzjk6UV5QHvxHs= ) TREAS.GOV. 120 IN RRSIG ( A 7 2 120 20200602071151 20200526071151 41993 treas.gov. dlarOkANiljFLs6JjasKxnQKdoLXz7hH5WOC/pSCBpwhklW1T1DVvMNsWvoUWXJiaBdzapQJErP4 JfN0J8zDR6ExhYd5Mv6rYnk+9BpyDo/EtKbrKYOlHC6I9Em2Awnhoi2xH2k4RAYuQ5q3pkvNgxHQ CWVaefRTS5D4bJJkVG4= ) ;; AUTHORITY SECTION (4 records) TREAS.GOV. 300 IN NS ns1.treasury.GOV. TREAS.GOV. 300 IN NS ns3.treasury.GOV. TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200604194159 20200528194159 22100 treas.gov. U3Ra/NhBXykjCLBM1kuZffD0h860J8Lh0BgMgudU+Lej1s2I5MZ4TdR1se8aVpmk1atNwpemsgyx ir1xXkfrMj2Z75by4Nz858rEcCOs3DtMNdCx4H5V3OAgfdWN1nvitzEx6TFS2Oi6MkIBNfJqkSHH kPtErdKt7EzssHxXeIc= ) TREAS.GOV. 300 IN RRSIG ( NS 7 2 300 20200602071144 20200526071144 41993 treas.gov. KEchfvGv/zSo5LfZxUvtDFGJGjZ89rLXA6PxKsj5YlOhWnbvOJfmYJjQEdjrrxOs/41Q52X+BDAX BIVfrvx7NFMe2SmuvjrNxRjg+Px0ZMt9lJ9ZCnqr+74AatEmD9MJp8dIMAIJuUvqqmWao8rlynrP vjAQ8ACX4G7wo/L8BWU= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200604213258 20200528213258 47468 treasury.gov. XWUTof/zIq2wiIcI7cqhmP3cvToJRwby74V8LrdmahWHCm0+3QufAjVORz41I8YdrXTfwLvj6Ydp TcihDclRoFQCiingW/zcKXTzGNQ12YdFKWXUvUcs29K3lHwOWsa1RPh/a6lEwkH3bDqcYLiahhoV 6cn5T1Jgwr8MyuR3DWs= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Aq5dMh2PlSR3O76jWQsm34NGlDxHC9221wLjUnXg72buaKHQk4wL0bzgklU8uQPtXwa2sKLkpmEr OGmwOemlJ3/+LA+QaRdPCoZaMTkr9K2X/wvP/5+TvJUA8QnH+0e6HMgXC5G3jznB2Xkb9Gh8kzFB N+x+ZPIMRMNRcgEylkU= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200605000654 20200529000654 47468 treasury.gov. Il4gxB51lP9RAa+efJ97WAxvFNGLJGfLNPY7ah8O5eaCS0lsi8Ypyi7I3VhKl+sqYmEZfznkWP1F 5VoASmyyFSQj1rcepNlYmz/JPi4ypb+ZfSIyOHY7qgAZDfTA+W8dkQ2lnCBnMClpW37xrY+nYVBf wVdPmdPfyhvBdEV9Lag= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Na+XSZsBV5WRkjBLLSyhOIPttgM4inlqDdOXdUPlgKMSUJoqTmiduKC0VB42wDpiMPuB8/8cpEXp /6fkR0/olgDp7QpFIZ9I3p8l4ce16cmnUoibbgWbuYyFIPl1xgjzfYSRzt9sFinR0MODcvSKEo+9 sGYqmqoKQaIWYIyrkxU= ) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200603170102 20200527170102 47468 treasury.gov. qd1lEiBNUu9AHC/SIQU6Ev2jhbOVq2enelysxaGCBxfhxrPEBl7KEN0h04gOFT7mzeNUNFcOWc02 RhtWGecbMAulyiv9XvhevhhgW1HHCZNMJb6MWUBmzZritY7sA7krsgbqwYm5DxXq+V4CC0f1kCJk f9bEvmPH2cP0dELOCDM= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KDz6QKBsXIZwOaEt1uEMzA2sCucjRj+290BGiJnZYzgRPfz0N8yyqAMQfD+kiJKSEsVVRWEZSwbe TpmQw0S4MbW8ozYessjoPyo2L1qGbjxxScdDsp7VLJqwhKFdQwnnY9KVIWaUgDfaIVc6psQuMzVi 4Js4MMbeDwOfoclQ8GM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200604111055 20200528111055 47468 treasury.gov. gO/Go5aeeChN1JXYUDS8jp3uNMzWCsymLkN7MOkfzB8bIddwZ9MbKJ1Om/1gLdLtdybEYfXcA+Fo JX5Ad/im+2dtemYIdSvedsgEQ2MztpT0JAMuHE8n0naxlQgyk4C1nPXA+4vK1AONwYVv1OkKLO2q ecHpfAB4VkALRbs/2zI= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KJH8EZ6pxrUSE75hf4HD3PZoUrA+m0bmqYP2xS5ceaIXHimM54HltexyzDrWSsETN2Nswl2XGZxC IApS4MQG52eRIfZxpqQ8n34/9XgTFHszEjJskKgFI48Yl66Zbbr4PQel4tRTBDjZYoUCVoJPPpri 171cXq+ExJEz2Bi7w30= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREAS.GOV A RR has value 166.123.218.220
	Found 2 RRSIGs over A RRset
	`TREAS.GOV. 120 IN RRSIG ( A 7 2 120 20200604193644 20200528193644 22100 treas.gov. UhfHTFMZBt4l6A7UrhYm24MEFfL8KjD5N63RIdD2NaSWO0g6m/dyIxBjNWbK5kS1xRJb9dmt7epu Bgz4e9gxA8+3rziXP+H7j4in368GNm5/LVFsYp7NyeZFV9qW8mQtZKEgqcnJoOAFGHaJFzvWUVy3 9idQwVzjk6UV5QHvxHs= )`
	`TREAS.GOV. 120 IN RRSIG ( A 7 2 120 20200602071151 20200526071151 41993 treas.gov. dlarOkANiljFLs6JjasKxnQKdoLXz7hH5WOC/pSCBpwhklW1T1DVvMNsWvoUWXJiaBdzapQJErP4 JfN0J8zDR6ExhYd5Mv6rYnk+9BpyDo/EtKbrKYOlHC6I9Em2Awnhoi2xH2k4RAYuQ5q3pkvNgxHQ CWVaefRTS5D4bJJkVG4= )`
	RRSIG=22100 and DNSKEY=22100 verifies the A RRset
	RRSIG=41993 and DNSKEY=41993 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TREAS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: