DNSSEC Analyzer - TREASLOCKBOX.GOV

Domain Name:

Time: 2020-05-29 05:06:32 UTC, NTP stratum 4

Analyzing DNSSEC problems for TREASLOCKBOX.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 43639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	Query to e.root-servers.net for TREASLOCKBOX.GOV/A
	Received 671 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (671 bytes) ;; HEADER SECTION ;; id = 33720 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 44971 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 18952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 48421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40176 is now in the chain-of-trust
	Query to d.gov-servers.net for TREASLOCKBOX.GOV/A
	Received 377 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (377 bytes) ;; HEADER SECTION ;; id = 48057 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 86400 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 86400 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. iR0YVpSbYRM26EcXS9W1bO1x4dIK4twHsSTZBJ3K5098hMhF3AB6ZIDlXcKOuWEmv2h8hZ3jKUEn OX0+QVRmNQsOsS8wpvl3P+wIKfI9pPZsdlYVddE9xOih6e7dT1UhE8and3Tx1Rq3H7WbKxvCz/F1 XkQNkZqYCX4jhXYNCaXvSImiXNrmwH8baDkHsouh9grzr5XaQWL76ihsAHra5Q== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for TREASLOCKBOX.GOV/DNSKEY
	Received 377 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (377 bytes) ;; HEADER SECTION ;; id = 47960 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 86400 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 86400 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. iR0YVpSbYRM26EcXS9W1bO1x4dIK4twHsSTZBJ3K5098hMhF3AB6ZIDlXcKOuWEmv2h8hZ3jKUEn OX0+QVRmNQsOsS8wpvl3P+wIKfI9pPZsdlYVddE9xOih6e7dT1UhE8and3Tx1Rq3H7WbKxvCz/F1 XkQNkZqYCX4jhXYNCaXvSImiXNrmwH8baDkHsouh9grzr5XaQWL76ihsAHra5Q== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TREASLOCKBOX.GOV

TREASLOCKBOX.GOV

	Checking DS between GOV and TREASLOCKBOX.GOV
	Query to d.gov-servers.net for TREASLOCKBOX.GOV/DS
	Received 276 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (276 bytes) ;; HEADER SECTION ;; id = 56000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DS ;; ANSWER SECTION (2 records) TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. iR0YVpSbYRM26EcXS9W1bO1x4dIK4twHsSTZBJ3K5098hMhF3AB6ZIDlXcKOuWEmv2h8hZ3jKUEn OX0+QVRmNQsOsS8wpvl3P+wIKfI9pPZsdlYVddE9xOih6e7dT1UhE8and3Tx1Rq3H7WbKxvCz/F1 XkQNkZqYCX4jhXYNCaXvSImiXNrmwH8baDkHsouh9grzr5XaQWL76ihsAHra5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for TREASLOCKBOX.GOV in the GOV zone
	DS=31635/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. iR0YVpSbYRM26EcXS9W1bO1x4dIK4twHsSTZBJ3K5098hMhF3AB6ZIDlXcKOuWEmv2h8hZ3jKUEn OX0+QVRmNQsOsS8wpvl3P+wIKfI9pPZsdlYVddE9xOih6e7dT1UhE8and3Tx1Rq3H7WbKxvCz/F1 XkQNkZqYCX4jhXYNCaXvSImiXNrmwH8baDkHsouh9grzr5XaQWL76ihsAHra5Q== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=31635/SHA-1 is now in the chain-of-trust
	`TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 )`
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/DNSKEY
	Received 1273 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1273 bytes) ;; HEADER SECTION ;; id = 3518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAc9V99Il4ybPwgZmH2rM9/yKCpYs/9h0EX8F0G/bNLCwdnIslxzKGxi8a9nI2vS2Jwb/gZqo 0u4/690SBcr1D/EpAQIULQ+vGt9kkITRXg/I8uq1Iv5LzBtt/jI+/6ANNyfQEU0GSub1r4JHeDpX rQKgvfphFqIYlnpEee+AMEj9 ) ; Key ID = 5192 TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcyQTNyusADN7uycnhO/NuBbgqH7vWx/Sji8UNYsK4KxPiAHhcAOfU0JgeVMYc0H/W22PYt7 eTCVTGVSQrazkcfwRz6Rq0V51SI9Q25i8oWEQ4p44QVr4LS7hodVQKKlHlBKXP2AGIvsslfhxWJU 570bAoqfS36yFTmJxrsMgsCX ) ; Key ID = 43040 TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAeNGNoXta1g7txxL54KPbICleTKFxir4PWd7S5f8uSDrAlzYaCDDEQTDUhBuQuitAkLf+v4t VQ1DlzJ5j74C0kIKMqWGhIvub77hnupkH0+sZk4W8eCcM7uItJrjj96M1V0l7qMvEixO+QSNqM4w Eq3wWyCgXWFKeXodFO6BvkD1Gu8AYphF+yqQGkaVUP3DjhHs+1Ijg8wZ5rgfH2+BmovDg/JYgkic /ahjdKGzFXn5soClTmaZT9JKCgGte6y1zdJeatue1mlBl7DiLM0i010Iw7gvEBg/CiSAE9aIeXfB qzX3hJo8CBN+VfxyHip2hUVgfM7jU9jk+t84rNO+3sM= ) ; Key ID = 31635 TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603060253 20200527060253 5192 treaslockbox.gov. Hu4rF1J1BXWLxPtbwz7pv1SiGq2LVyYlH8kkR5jQpI2d4Gxnq9vuMH7hXFGUE+PACKAFLyG4XnLE zm9Uv6LL4svcwllt7hncS+rlFJoTA+PI04iwY8QfcWQpi1d/z5bEy8P2qLg0JyrCqiPuAdDCEETH 16W+hWA3TWPTKRo+Tc0= ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603060253 20200527060253 43040 treaslockbox.gov. rzihDDjDZ1bHqOSAkyl2Vkoy5DcXMaj/g7iq27LUfX/k1gQ7chp9YXs41J93oSF3fBZ6gKJ3HGuw tV99MsjQ+vdTIVkEarT22Lz3VuPoiG/0gYEhI89IFeMCO5XNbLohIgEiXeHEF9tPS378GTTuuPGr xpi0frB4EoPSz1mR7yM= ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603060253 20200527060253 31635 treaslockbox.gov. bw94LkrM0axKPlb0Y3P6ZOtTzXKayKMF0UZneXCcRgRYJDYC7mWSQELt1YVbKttxzeKHCSGhV5Hg PXgWrDyQEjGV9AWh4pd3GoVIndInTa/yF5n7BpOdnKZwYJP0oYWUwoKWtRQ8jv/UPJWl7Tn2wWT6 YpSp9870M5HCyDa813qZbygSxmaoc1t/B52upOgD6GtUDr84KfNBs/Ah+Vby4VFYdyCXfwxk/FyZ RnXMEnPvMhUcjlt/XVVGaj3mORJ0P88nPlPa5x6xe8URtq63f9UITUs6mX7DMd4eAgTJvS5sQ+vK B7DrT8qS2TO0RGYiQR4BeIE/R6GEhq+GacWlSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for TREASLOCKBOX.GOV
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAc9V99Il4ybPwgZmH2rM9/yKCpYs/9h0EX8F0G/bNLCwdnIslxzKGxi8a9nI2vS2Jwb/gZqo 0u4/690SBcr1D/EpAQIULQ+vGt9kkITRXg/I8uq1Iv5LzBtt/jI+/6ANNyfQEU0GSub1r4JHeDpX rQKgvfphFqIYlnpEee+AMEj9 ) ; Key ID = 5192`
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcyQTNyusADN7uycnhO/NuBbgqH7vWx/Sji8UNYsK4KxPiAHhcAOfU0JgeVMYc0H/W22PYt7 eTCVTGVSQrazkcfwRz6Rq0V51SI9Q25i8oWEQ4p44QVr4LS7hodVQKKlHlBKXP2AGIvsslfhxWJU 570bAoqfS36yFTmJxrsMgsCX ) ; Key ID = 43040`
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAeNGNoXta1g7txxL54KPbICleTKFxir4PWd7S5f8uSDrAlzYaCDDEQTDUhBuQuitAkLf+v4t VQ1DlzJ5j74C0kIKMqWGhIvub77hnupkH0+sZk4W8eCcM7uItJrjj96M1V0l7qMvEixO+QSNqM4w Eq3wWyCgXWFKeXodFO6BvkD1Gu8AYphF+yqQGkaVUP3DjhHs+1Ijg8wZ5rgfH2+BmovDg/JYgkic /ahjdKGzFXn5soClTmaZT9JKCgGte6y1zdJeatue1mlBl7DiLM0i010Iw7gvEBg/CiSAE9aIeXfB qzX3hJo8CBN+VfxyHip2hUVgfM7jU9jk+t84rNO+3sM= ) ; Key ID = 31635`
	DNSKEY=31635/SEP is now in the chain-of-trust
	DS=31635/SHA-1 verifies DNSKEY=31635/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603060253 20200527060253 5192 treaslockbox.gov. Hu4rF1J1BXWLxPtbwz7pv1SiGq2LVyYlH8kkR5jQpI2d4Gxnq9vuMH7hXFGUE+PACKAFLyG4XnLE zm9Uv6LL4svcwllt7hncS+rlFJoTA+PI04iwY8QfcWQpi1d/z5bEy8P2qLg0JyrCqiPuAdDCEETH 16W+hWA3TWPTKRo+Tc0= )`
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603060253 20200527060253 43040 treaslockbox.gov. rzihDDjDZ1bHqOSAkyl2Vkoy5DcXMaj/g7iq27LUfX/k1gQ7chp9YXs41J93oSF3fBZ6gKJ3HGuw tV99MsjQ+vdTIVkEarT22Lz3VuPoiG/0gYEhI89IFeMCO5XNbLohIgEiXeHEF9tPS378GTTuuPGr xpi0frB4EoPSz1mR7yM= )`
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603060253 20200527060253 31635 treaslockbox.gov. bw94LkrM0axKPlb0Y3P6ZOtTzXKayKMF0UZneXCcRgRYJDYC7mWSQELt1YVbKttxzeKHCSGhV5Hg PXgWrDyQEjGV9AWh4pd3GoVIndInTa/yF5n7BpOdnKZwYJP0oYWUwoKWtRQ8jv/UPJWl7Tn2wWT6 YpSp9870M5HCyDa813qZbygSxmaoc1t/B52upOgD6GtUDr84KfNBs/Ah+Vby4VFYdyCXfwxk/FyZ RnXMEnPvMhUcjlt/XVVGaj3mORJ0P88nPlPa5x6xe8URtq63f9UITUs6mX7DMd4eAgTJvS5sQ+vK B7DrT8qS2TO0RGYiQR4BeIE/R6GEhq+GacWlSQ== )`
	RRSIG=5192 and DNSKEY=5192 verifies the DNSKEY RRset
	RRSIG=43040 and DNSKEY=43040 verifies the DNSKEY RRset
	RRSIG=31635 and DNSKEY=31635/SEP verifies the DNSKEY RRset
	DNSKEY=5192 is now in the chain-of-trust
	DNSKEY=43040 is now in the chain-of-trust
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (413 bytes) ;; HEADER SECTION ;; id = 44525 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20200601032720 20200525032720 5192 treaslockbox.gov. EfesJZq/QGuIvS6/NXNnzk8jf/FrQ7pUwEUAawxQ4PRK86cdTJx0cK/cQlHuukA/vlT6V+GAQBWG F5VRBtMUNbbkVNXvLOKvh+uDMt9W4kfvUYXMHgQFZDwZZ8q2vuRhikH+2sp9gjJaoPqofl7yAn7R KmU3dyBLu91flmubg58= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20200603061214 20200527061214 43040 treaslockbox.gov. uy0DiF5BDHrviXim/cgxXEcColbpvh49MNxmigP4WDMoS1btcTrfeen3Ydszsz4OXPE5yrV7+T34 yMdiPSpfFF6pV6Zr7JqBEMqD6R/kjcgX+BANDPOjyIHgsxzyEjRR2KSmO/sxFNbFfHovhjsoSgmF dfx/nYDTUcia/54PGDY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASLOCKBOX.GOV is authoritative for TREASLOCKBOX.GOV
	Found RRSIG signed by treaslockbox.gov zone
	Query to ns1.twai.GOV for TREASLOCKBOX.GOV/SOA
	Received 2263 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2263 bytes) ;; HEADER SECTION ;; id = 31784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN SOA ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019102601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20200601023753 20200525023753 5192 treaslockbox.gov. zanP6JbLOiqN7HxosD2PDRdZaI5ID8MHF+eaxGZ84qrSeQ2t9ivPTpREAtSygAXHhzGdxuK3vnmC tthX9W3MbHJI2XRj0TFB1hsjAGYkHmfNJNiAYafpZ2o+3cgpFmkh90VIypnb0nP7E9SngmcYpWb+ TwURV7LCHsib1MAUJn8= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20200603082444 20200527082444 43040 treaslockbox.gov. xCdvl2dUsbabs3zTfI0/zT6xlhjwTEKUszyWwaa6Eh2SE3gjVf2DmD9dvoE8Reny3EnRGR3mDr/y 2QNu0M5UNqpeZH/R09+V+XlZCOTVGWJS73A6Ixo2VCYXsFfQXXK6TDG9suPVa4e5EEBZ4NAMidDe w7aH612wrMRUX0ElvdA= ) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 30 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 30 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20200601003632 20200525003632 5192 treaslockbox.gov. zMDD2ADnBKBmHpGio+NvdQa7z/q6xV2JNGDPSwxwOjKy4fE4L3XZDDZdUhqELZAZQPIM06MqKQr/ Dvew46A58Oz0okRJOXsOSM/6A1L0xQclgtqKRYSjQy9CyiHVHJFhahvf6tx61SnKbZEPi8X4s2EP qILS9gL3pt88s5+Kr4A= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20200603071503 20200527071503 43040 treaslockbox.gov. OOuI2V/PD2jdY6WXr1pTtDoo2+UOHSoLFHEmTlj6om4XQ+ry+wxXUaWvQ4gSiciBIYQf69ygGb0d VVYK3OwWpMjk6gsvgGpoueuG1ofPv+ukhHqXcg5BUYHY8ocyFQ9DhCPcf5N4V0rYmTrq39O8DaXd gSBlT2VkDQ7dKfDzCh8= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200531215048 20200524215048 52220 twai.gov. uWe6oryxirf3kIf7rvAxIdjRPEwSVVgJhQxoNUNXnnlMC2EDfBeQhrQbjSPQsMNG172I7CuV86ay vgWmYm/KXFsHHsDLrNa/i5gGg8hD/0VWwIq/Gp315V8vvhF911YHmQhvX/T0Hl4PBcCKUtTemNC6 pmKQNC6BBdZL9HsL3mI= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200603055036 20200527055036 60668 twai.gov. YmePwYdXjB1TkmJq0BNOC3xZjNAGVd33KRvZiTU8G94xbON5kcTJhWzhcGZbWKSy5eLiLlXJapVl SLKWM/yaApWToYWGEJS5zXkV0aLp0b1xGrUOzXV3H9/ajF52LwTQ8hxp/FLbYxo4k082qawn/CaI z/MwRw0oeIygbHNc3og= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200531215048 20200524215048 52220 twai.gov. CezvRQtk7kBE8taJ6lnO2KRtskIdt2OGhujnKmk8PTdzObnxjFymjOfJM94K/2swfn1O0cqbKqJr 6A5Xpc4xkrmF1k2Eukjvtl8Zx5aT12BfUMsbYCuG6UplGKvh8VDSzn9WzBJeHIJBVpE3EZ29bjnw M0W5KwQ0BtC31VZaM5g= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200603055036 20200527055036 60668 twai.gov. Nutu5XxjugPZqoJj2XFKClwMdUiuii2g37hbEavVSIOo0S0oTSlEi+cUPrSB1d9VnxWgEEmbuazt 1vx+L759M1uQounqdgfE2Bqwm41gPKuMnoIs9WPccLInkTvykmXIOiM7pMC1TSzkE5jdkvK16k7c 55ttmGSDT711rEAqybs= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200531215048 20200524215048 52220 twai.gov. ou6FkOxIN5+CPdD8P5rDFEavbekbfubiR3xMQpXaKgRAdQxfBlGm9KxOWJL1G3fEpo7RctZvFZjz AUIRBYuQbsWV2KqR10qEV2BwaRNPgPF3+ouQKbTqtBKdX/P2CD3JwA8up4RKbR/ste8sLT3qvmrM NY6cV/3dnpFPBFB8qQQ= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200603055036 20200527055036 60668 twai.gov. OJ4NIhC6Tp73MSVJCGHqIikLgc2xH0DoYHOBdB96te6WnLKfdr1Lf9I6V6JKYsYCAJYLssEGnhN5 vcqcWQYhYO3xYSVDYaPFgxFMeRC6MxK7IxS6IucLmE88t9E6T0ZHKUK48vgcD7ikiTbMZbFJBqft CqxvnRv8EGql0NQmFHE= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200531215048 20200524215048 52220 twai.gov. tcWHaFSqxZNvVGfogqfOem+1kih8Rx+bbThzwKmaLNL6WVCyTyZfsFLzvkLX3YZ2o+qTF1DifJMR f6ioEHalbqxZ8tMc8Oi5EK+g3N400qtExHrJ20wceZkoDMCvViuzY8v+xhrGu0S9PRKtbXmH5gt8 dWBDpWsMkFUqeVJwUtg= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200603055036 20200527055036 60668 twai.gov. tMGdPrQuxLqq2eRRLBXEeHAocXvaBqnAAZ5nbNoci+WiWu0wSNfFIT+Ifi6EqRseLgmulUJMJ7Ll 8poWz7FmSvYd1vj5rvCe/F/ThUugiorFnFN86Hk3LF1hU5nfIuQmWza+FJJlcEnvr7v7jelVnoUe xXtpG0Sy/DZ4kh51WhI= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/SOA
	Received 2263 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (2263 bytes) ;; HEADER SECTION ;; id = 4707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN SOA ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019102601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20200601030106 20200525030106 5192 treaslockbox.gov. BF4MuJOcKY5sdl30gatc5GkNIprpVunlZLxM2XPn75x7SUL3LcNWXD1UF/9afB9NJMBn7r4zULPy YBGt0R28JrfVWrS9mciEfroGfV+ZI0Zx+K6BAyOcl1vOWc51dxE5RItohnWxztW9CC+NdYaw42SC MFlAotcG5Npoo8u3PUk= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20200603072602 20200527072602 43040 treaslockbox.gov. NGjAUbuXsrCB6Q2G36vvgahlF7F3djlrZqI20T1l5d8ZaZP2EzU8smK+qep+4rPKlBsCijdz3E3r BnMwHzIeoqkjwmfnSGsGCS4DSaRn0gnPGCBqtTELUa8Ev8YkX9x0DOQ9WzsADLjjuWaQhEt7xRWM GaP2X4ZL/Q/E4/ROs7U= ) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 30 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 30 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20200531233054 20200524233054 5192 treaslockbox.gov. SUstrXhwj4GirbTyhxFIViapszkCG9TNI8YLRoT+NdIqghq2EnFnjcs1o7giH3+2HAI3OtVa7Ktg mGRk1GCEw40Aj9dyQGKBOorL7dPaAty1eF/LXU0kEpg8pukQF3ewcovYpK/o7+ZphfT7MF0ya9kP b2Zm6bYc31rx1fNdhUM= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20200603072602 20200527072602 43040 treaslockbox.gov. xzjYv82b9rvq1UdlGbBPiamrbCwXVbiawN7NKyQdSAsdYV5LEq6jeFdhODF5R1H+yA4ULQgRffzX b8rx0TaMVOo1RBpncdP/MPK0689sDogA7oEvYdRdqY3gElE3NMz7bJjwZBvsBJIQQ6hNCoBCJckr FjBw1m9a/QKN39uMU5k= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200531215048 20200524215048 52220 twai.gov. uWe6oryxirf3kIf7rvAxIdjRPEwSVVgJhQxoNUNXnnlMC2EDfBeQhrQbjSPQsMNG172I7CuV86ay vgWmYm/KXFsHHsDLrNa/i5gGg8hD/0VWwIq/Gp315V8vvhF911YHmQhvX/T0Hl4PBcCKUtTemNC6 pmKQNC6BBdZL9HsL3mI= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200603055036 20200527055036 60668 twai.gov. YmePwYdXjB1TkmJq0BNOC3xZjNAGVd33KRvZiTU8G94xbON5kcTJhWzhcGZbWKSy5eLiLlXJapVl SLKWM/yaApWToYWGEJS5zXkV0aLp0b1xGrUOzXV3H9/ajF52LwTQ8hxp/FLbYxo4k082qawn/CaI z/MwRw0oeIygbHNc3og= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200531215048 20200524215048 52220 twai.gov. CezvRQtk7kBE8taJ6lnO2KRtskIdt2OGhujnKmk8PTdzObnxjFymjOfJM94K/2swfn1O0cqbKqJr 6A5Xpc4xkrmF1k2Eukjvtl8Zx5aT12BfUMsbYCuG6UplGKvh8VDSzn9WzBJeHIJBVpE3EZ29bjnw M0W5KwQ0BtC31VZaM5g= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20200603055036 20200527055036 60668 twai.gov. Nutu5XxjugPZqoJj2XFKClwMdUiuii2g37hbEavVSIOo0S0oTSlEi+cUPrSB1d9VnxWgEEmbuazt 1vx+L759M1uQounqdgfE2Bqwm41gPKuMnoIs9WPccLInkTvykmXIOiM7pMC1TSzkE5jdkvK16k7c 55ttmGSDT711rEAqybs= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200531215048 20200524215048 52220 twai.gov. ou6FkOxIN5+CPdD8P5rDFEavbekbfubiR3xMQpXaKgRAdQxfBlGm9KxOWJL1G3fEpo7RctZvFZjz AUIRBYuQbsWV2KqR10qEV2BwaRNPgPF3+ouQKbTqtBKdX/P2CD3JwA8up4RKbR/ste8sLT3qvmrM NY6cV/3dnpFPBFB8qQQ= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200603055036 20200527055036 60668 twai.gov. OJ4NIhC6Tp73MSVJCGHqIikLgc2xH0DoYHOBdB96te6WnLKfdr1Lf9I6V6JKYsYCAJYLssEGnhN5 vcqcWQYhYO3xYSVDYaPFgxFMeRC6MxK7IxS6IucLmE88t9E6T0ZHKUK48vgcD7ikiTbMZbFJBqft CqxvnRv8EGql0NQmFHE= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200531215048 20200524215048 52220 twai.gov. tcWHaFSqxZNvVGfogqfOem+1kih8Rx+bbThzwKmaLNL6WVCyTyZfsFLzvkLX3YZ2o+qTF1DifJMR f6ioEHalbqxZ8tMc8Oi5EK+g3N400qtExHrJ20wceZkoDMCvViuzY8v+xhrGu0S9PRKtbXmH5gt8 dWBDpWsMkFUqeVJwUtg= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20200603055036 20200527055036 60668 twai.gov. tMGdPrQuxLqq2eRRLBXEeHAocXvaBqnAAZ5nbNoci+WiWu0wSNfFIT+Ifi6EqRseLgmulUJMJ7Ll 8poWz7FmSvYd1vj5rvCe/F/ThUugiorFnFN86Hk3LF1hU5nfIuQmWza+FJJlcEnvr7v7jelVnoUe xXtpG0Sy/DZ4kh51WhI= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (413 bytes) ;; HEADER SECTION ;; id = 7820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20200601023504 20200525023504 5192 treaslockbox.gov. hzvVxiBkqO/CBxpgqmpv3grrc35bVqIRgwRgiD/3SDMMeZCbOd3IkQq8yMxiLLR+2pL7MNviN29V dNJ7Q3aSwmYfPZuvwAfIahe+fKgM4k8zfntIuF+mzIW8iERm8T/jt/pg1vZtJg/tx6vQ758P7dJX MTJ2XsyENbJiDfSLt/s= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20200603063852 20200527063852 43040 treaslockbox.gov. ND72ksAkFkhXijSZiaKGZIY+IR4h9LU40/zxl6tgE7ZTZhZTPioFMIdIV0Lz7qMO+AzPrkedvdno O3gwG4Wx4AHp5JzJg9766sTdaFsPg28KqAw+PKSdF6ZtlwXYMXMjyAHuim4MuXbrLQtkQr/mFJE2 iAmh3tX8gaawj0jpBss= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASLOCKBOX.GOV A RR has value 199.169.192.12
	Found 2 RRSIGs over A RRset
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20200601023504 20200525023504 5192 treaslockbox.gov. hzvVxiBkqO/CBxpgqmpv3grrc35bVqIRgwRgiD/3SDMMeZCbOd3IkQq8yMxiLLR+2pL7MNviN29V dNJ7Q3aSwmYfPZuvwAfIahe+fKgM4k8zfntIuF+mzIW8iERm8T/jt/pg1vZtJg/tx6vQ758P7dJX MTJ2XsyENbJiDfSLt/s= )`
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20200603063852 20200527063852 43040 treaslockbox.gov. ND72ksAkFkhXijSZiaKGZIY+IR4h9LU40/zxl6tgE7ZTZhZTPioFMIdIV0Lz7qMO+AzPrkedvdno O3gwG4Wx4AHp5JzJg9766sTdaFsPg28KqAw+PKSdF6ZtlwXYMXMjyAHuim4MuXbrLQtkQr/mFJE2 iAmh3tX8gaawj0jpBss= )`
	RRSIG=5192 and DNSKEY=5192 verifies the A RRset
	RRSIG=43040 and DNSKEY=43040 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TREASLOCKBOX.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: