DNSSEC Analyzer - USASPENDING.GOV

Domain Name:

Time: 2020-10-26 13:11:50 UTC, NTP stratum 4

Analyzing DNSSEC problems for USASPENDING.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 50717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to a.root-servers.net for USASPENDING.GOV/A
	Received 670 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (670 bytes) ;; HEADER SECTION ;; id = 53256 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 50459 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 50432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 56307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to c.gov-servers.net for USASPENDING.GOV/A
	Received 456 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (456 bytes) ;; HEADER SECTION ;; id = 57947 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USASPENDING.GOV. 86400 IN NS ns3.treasury.GOV. USASPENDING.GOV. 86400 IN NS ns1.treasury.GOV. USASPENDING.GOV. 3600 IN DS ( 2647 8 2 8a21f338d90b19877e6bf180199066e44707a0a50278a5742cb5d2d50ac75be3 ) USASPENDING.GOV. 3600 IN DS ( 2647 8 1 3bc54c5abdebe333fe539fc0771907b7738923b7 ) USASPENDING.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. ssHhzCFDTjHYUEP5mchXsi4D1Xd2fz/Z3fwol1gu/8bSBtk8ntCJiZsm/eIn4NFrKjwbR0Au06EP AkX/rFVxlhsDEt4lzmr+tIJ0RRqmqyTcWuUGh3F6bW2B5mZEzaRROC/LwvCPgV4DovPlBo4KZ40T N2RMEGhi0cyefMcPRkb2cot1e1nh6L4Sr/mz3+MUX/t7E2XwVpFD7sqB36qZoQ== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for USASPENDING.GOV/DNSKEY
	Received 456 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (456 bytes) ;; HEADER SECTION ;; id = 48475 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USASPENDING.GOV. 86400 IN NS ns3.treasury.GOV. USASPENDING.GOV. 86400 IN NS ns1.treasury.GOV. USASPENDING.GOV. 3600 IN DS ( 2647 8 2 8a21f338d90b19877e6bf180199066e44707a0a50278a5742cb5d2d50ac75be3 ) USASPENDING.GOV. 3600 IN DS ( 2647 8 1 3bc54c5abdebe333fe539fc0771907b7738923b7 ) USASPENDING.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. ssHhzCFDTjHYUEP5mchXsi4D1Xd2fz/Z3fwol1gu/8bSBtk8ntCJiZsm/eIn4NFrKjwbR0Au06EP AkX/rFVxlhsDEt4lzmr+tIJ0RRqmqyTcWuUGh3F6bW2B5mZEzaRROC/LwvCPgV4DovPlBo4KZ40T N2RMEGhi0cyefMcPRkb2cot1e1nh6L4Sr/mz3+MUX/t7E2XwVpFD7sqB36qZoQ== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone USASPENDING.GOV

USASPENDING.GOV

	Checking DS between GOV and USASPENDING.GOV
	Query to d.gov-servers.net for USASPENDING.GOV/DS
	Received 323 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (323 bytes) ;; HEADER SECTION ;; id = 8855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN DS ;; ANSWER SECTION (3 records) USASPENDING.GOV. 3600 IN DS ( 2647 8 2 8a21f338d90b19877e6bf180199066e44707a0a50278a5742cb5d2d50ac75be3 ) USASPENDING.GOV. 3600 IN DS ( 2647 8 1 3bc54c5abdebe333fe539fc0771907b7738923b7 ) USASPENDING.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. ssHhzCFDTjHYUEP5mchXsi4D1Xd2fz/Z3fwol1gu/8bSBtk8ntCJiZsm/eIn4NFrKjwbR0Au06EP AkX/rFVxlhsDEt4lzmr+tIJ0RRqmqyTcWuUGh3F6bW2B5mZEzaRROC/LwvCPgV4DovPlBo4KZ40T N2RMEGhi0cyefMcPRkb2cot1e1nh6L4Sr/mz3+MUX/t7E2XwVpFD7sqB36qZoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for USASPENDING.GOV in the GOV zone
	DS=2647/SHA-256 has algorithm RSASHA256
	DS=2647/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`USASPENDING.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. ssHhzCFDTjHYUEP5mchXsi4D1Xd2fz/Z3fwol1gu/8bSBtk8ntCJiZsm/eIn4NFrKjwbR0Au06EP AkX/rFVxlhsDEt4lzmr+tIJ0RRqmqyTcWuUGh3F6bW2B5mZEzaRROC/LwvCPgV4DovPlBo4KZ40T N2RMEGhi0cyefMcPRkb2cot1e1nh6L4Sr/mz3+MUX/t7E2XwVpFD7sqB36qZoQ== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=2647/SHA-256 is now in the chain-of-trust
	`USASPENDING.GOV. 3600 IN DS ( 2647 8 2 8a21f338d90b19877e6bf180199066e44707a0a50278a5742cb5d2d50ac75be3 )`
	`USASPENDING.GOV. 3600 IN DS ( 2647 8 1 3bc54c5abdebe333fe539fc0771907b7738923b7 )`
	Query to ns3.treasury.GOV for USASPENDING.GOV/DNSKEY
	Received 690 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (690 bytes) ;; HEADER SECTION ;; id = 35607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) USASPENDING.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAaybSBjV4ALbEh35SfLUZT0Tv7pKRQkM1dRyFS/W3vmNe8EcZ0EtnjmAR8kdWJoVg+N7ysUv rn5Yic+nIQ+LvJYaBbsMQ7+f9f676H+QVopIQPEMhmt70AUO+wuKOXBhcy0/2csir00vRu6IiBUD ZLKledzdMu1u5m03MYYVvd4/ ) ; Key ID = 2647 USASPENDING.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAaPbvbP3bR32SHYDOvGbAEY2Ngns5NOfDCkrD+51632317WtC2x92dLcFOYz4OhCqCAggDQD iYexkKHdVB3yPxLaYyRgKlCAT+7WsHxO13wYH6sQ8ymcnZ3Gjp3kAq/E+uqm2GQhtMxlC+ZxVQf8 YcnjRdvaLyKSV9QsoXu4fcTb ) ; Key ID = 38691 USASPENDING.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101191558 20201025191558 2647 usaspending.gov. pck+9PVEvvbwP7bs0aTmit7UWAWnKxizAhdHkox1KsEuBbI+kxUVQ3bteQls/5T1zPqXqwL3sLRg d6N88JJVaWjyGO0YMVP0IgIjCKGQlPv4dRUSQzQbPTJ1i2gBSshRcEq5W8zgueJQKC0uEriUg4+i Bu/Cm3iBx0LdpRgGlKs= ) USASPENDING.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101191558 20201025191558 38691 usaspending.gov. DwdCR0rbmx9sfTCyWyhRpuiPFC9FmECQ/0upw/NtHNVJYxuUED7/KgU2Q37JOcJs81CDmW/fnwOP A64hc4CcCwcWVk6eC5wX08+UMe23JSZBC/fSXUBLP0k3ph+AanEGxcRP/3A4pTZ5CozJUVa4QExK 2p5XQ4tN4jyPlPlY9hA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for USASPENDING.GOV
	`USASPENDING.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAaybSBjV4ALbEh35SfLUZT0Tv7pKRQkM1dRyFS/W3vmNe8EcZ0EtnjmAR8kdWJoVg+N7ysUv rn5Yic+nIQ+LvJYaBbsMQ7+f9f676H+QVopIQPEMhmt70AUO+wuKOXBhcy0/2csir00vRu6IiBUD ZLKledzdMu1u5m03MYYVvd4/ ) ; Key ID = 2647`
	`USASPENDING.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAaPbvbP3bR32SHYDOvGbAEY2Ngns5NOfDCkrD+51632317WtC2x92dLcFOYz4OhCqCAggDQD iYexkKHdVB3yPxLaYyRgKlCAT+7WsHxO13wYH6sQ8ymcnZ3Gjp3kAq/E+uqm2GQhtMxlC+ZxVQf8 YcnjRdvaLyKSV9QsoXu4fcTb ) ; Key ID = 38691`
	DNSKEY=2647/SEP is now in the chain-of-trust
	DS=2647/SHA-256 verifies DNSKEY=2647/SEP
	DS=2647/SHA-1 verifies DNSKEY=2647/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`USASPENDING.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101191558 20201025191558 2647 usaspending.gov. pck+9PVEvvbwP7bs0aTmit7UWAWnKxizAhdHkox1KsEuBbI+kxUVQ3bteQls/5T1zPqXqwL3sLRg d6N88JJVaWjyGO0YMVP0IgIjCKGQlPv4dRUSQzQbPTJ1i2gBSshRcEq5W8zgueJQKC0uEriUg4+i Bu/Cm3iBx0LdpRgGlKs= )`
	`USASPENDING.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101191558 20201025191558 38691 usaspending.gov. DwdCR0rbmx9sfTCyWyhRpuiPFC9FmECQ/0upw/NtHNVJYxuUED7/KgU2Q37JOcJs81CDmW/fnwOP A64hc4CcCwcWVk6eC5wX08+UMe23JSZBC/fSXUBLP0k3ph+AanEGxcRP/3A4pTZ5CozJUVa4QExK 2p5XQ4tN4jyPlPlY9hA= )`
	RRSIG=2647 and DNSKEY=2647/SEP verifies the DNSKEY RRset
	RRSIG=38691 and DNSKEY=38691 verifies the DNSKEY RRset
	DNSKEY=38691 is now in the chain-of-trust
	Query to ns3.treasury.GOV for USASPENDING.GOV/A
	Received 1231 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1231 bytes) ;; HEADER SECTION ;; id = 60009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN A ;; ANSWER SECTION (2 records) USASPENDING.GOV. 900 IN A 166.123.218.220 USASPENDING.GOV. 900 IN RRSIG ( A 8 2 900 20201101204538 20201025204538 38691 usaspending.gov. FellF6OM8KAZ7gNWjNeuwZlSVzI8mmOV1DnOFzDiC17hVhQAiKYdmAmjKMF92rIr3na3zApwZdQA YXWtJ0U+6jm0zPUgDuri/LXBpXGvOX7pYePtDtfzfiP5Mt9gT1d5hFh+w/GIyOztaJK5xxRYOIU+ rmpdItYLMoFCVsJUNOs= ) ;; AUTHORITY SECTION (3 records) USASPENDING.GOV. 3600 IN NS ns1.treasury.GOV. USASPENDING.GOV. 3600 IN NS ns3.treasury.GOV. USASPENDING.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201101200227 20201025200227 38691 usaspending.gov. glmqu9Rnn97TdnkKu9Jtxvh8eZlJ12jOlJ47xz+rwYQfhbspkI7/CFR+BFRv2qq3ARn/xNfmjffx kQ7Og/q4yY0jMDk7Ef1GvX6FSUUXbIBHe0CamiB8iyCm+dX53BxOCskiFJDd6Lw0iN7BG0tlfmQ3 buFsF0vgbrE/aQBmWNY= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. XSakiVUAb8VJPPsy9/nwe1K0XlMG1xyyIAct1UEgyXYiVGx9LaaGVt6Rclct+Ku7ANJRtm8jT8dS 2XsvMDnwxkXqqkDsH+CdIwNcEGyhqtvQQ4evsAtE+ob0LphsM0bhJo+ItvpJhumouBMQI468UlFl EdubgvVY+znvfoKazl4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. VDldIoxOJKlEBL0dSKK1w6xEPszXp8QG7aZfnGg1l7n+MtZobyX8+X1fZD8+bzJUeF7Kh5uEma+S ls9VGU9YyKWAPfH4aU2/bry2EKjkVpq9o1kWWtJ4NQqLEdw6dGWo2fWqyp1VKu37MHrP4K3ru+Ub DupqruNU5yx3yAj5dKs= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. PhkXA0pnk5sLg8NAVu/SIeaDqOELN6/Vp2qmkwME4dgCOdIwJjn/j8sY7O8ZmXAqTpRz3gKvcp2J Gb688I8LHLz9bzOa+7m88O9axvtflujkpOzl7Jj6TP0muHp76QBRKoPh4c8nO8P32Cm6EHUTlojo L87FgTnnZ9t/yFsUNFY= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. F6Njj6l+SHzOzrPguR6gGw2GS8Rey+T8y3QP45CmqUUngB4ynt1/qSrHwvTVVs/xggc+BMnvVHXk evS+XLK6rJ4sm+R25e5n2GspnN39ycLO2kl7XCFAOxAAHW1jahXYkBN7ciHWXI6s826ZFPi7mhtT GUQPd4U19euylmWEacU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	USASPENDING.GOV is authoritative for USASPENDING.GOV
	Found RRSIG signed by usaspending.gov zone
	Query to ns3.treasury.GOV for USASPENDING.GOV/SOA
	Received 1270 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1270 bytes) ;; HEADER SECTION ;; id = 47472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN SOA ;; ANSWER SECTION (2 records) USASPENDING.GOV. 3600 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 19268 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) USASPENDING.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201101174449 20201025174449 38691 usaspending.gov. KefAhBLbDBmuz2Rbb+Ck7i6UTZb6ciDwUdbm/cX7jXTmcWl1bExf7fDuQzoB171/bv8Bm/yZM97b cQy8SaGTuwx523XNwelZhBZtCdp4aYYMcwamn5bPGN8uGMNG65kwxj8YEeYbyuJ5IiDll+c81opz O+AZfnelLR6yi4lUZ0g= ) ;; AUTHORITY SECTION (3 records) USASPENDING.GOV. 3600 IN NS ns1.treasury.GOV. USASPENDING.GOV. 3600 IN NS ns3.treasury.GOV. USASPENDING.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201101183312 20201025183312 38691 usaspending.gov. L42iAeBqCy4uiL6Hb++OKglFVTzFHAsGdLwogaqbg2nKFJAGgkAvEzrhAH945t2cZ59RXBQQn5HB 2VOhW+SW1YIqtEWJW08w7L5htx1yPCpR+xLud0aD23VgPBq/51smpB25MB1W5cLCh/AFVun3XmQb v9oYJm5NB3OPCZlqdgg= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101194307 20201025194307 13 treasury.gov. I4HYUwQhfnQsUK7o+9k9Z7Ktoi4bGGJK4kmHqHNds4l1HIJhozR8aJwUZW2WCOCC4xDrml/8NAYJ UppPa6P7fwv9gZTfaFOIAsxl/793UkK4hKzAZXUNeWinOjT0zOf1H5a5pIs18X+rM5ueys4GY9r7 7x4YgegRa6F7l/3pGd0= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101194118 20201025194118 13 treasury.gov. M194kEiXqoGhemY+t70UZh2CrKYEi2KFzgo93CLrijJKpPrMVNTwERhrrQICWGEY2/V8V5JBygnS p6cKmu7w+d3ybhukrAKX0OwG0DWmfXPexy64dpC2enOEI9YFx9oyOLMB8or1vVWFm/Nz2X/EdBHR OpQopPoyMFo6VNzxRdU= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101193610 20201025193610 13 treasury.gov. KyG4r86XQzadjWduBqmi/BiibHjhg9CpMO9cb2gw9ZJ30BZ989mJkI3pmC+F7vS4Y87SWyFXNOsW 2WB8RVCJqSvj5WdwXiKOECd9QT1/yp939wzLFPk9cafRJZX9ayUmaRuCrt84tEV9xcmBEtLuuxZk VrN+Sfd3PXWJ601pSo8= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101194812 20201025194812 13 treasury.gov. S51Wy2YuoW7QQgi2yE+htaYOxw6JARIMafW+v9eetNIJ8FcHYupOqva06OKHzY8Ovj/IjBY9MM51 oQv41MLD4Rp/frUnKUpvPXBzIwXg4qWWJ5e19AFxpLOP/Qw1/LLgHJzEzSqwEtA1NSKGaYQdgF2F p6SwGQJq3I6h9dRM1nA= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for USASPENDING.GOV/SOA
	Received 1270 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1270 bytes) ;; HEADER SECTION ;; id = 15544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN SOA ;; ANSWER SECTION (2 records) USASPENDING.GOV. 3600 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 19268 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) USASPENDING.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201101125952 20201025125952 38691 usaspending.gov. b4wDDruKT/cUwquGn6YWWvu1Ev9f8y34PRJRzeDgXxS2u2FUMISpaFBZDI1xntXZef+DRIsXSZN+ aR6ujsTe05Emq06/FHSwpQ1+TGJdoMTAilXIGmynV8IEJBKV9sxb3reo9K7Emu1VPaUyv+zxWnZp C3VbT78pnqXKhG4et3A= ) ;; AUTHORITY SECTION (3 records) USASPENDING.GOV. 3600 IN NS ns1.treasury.GOV. USASPENDING.GOV. 3600 IN NS ns3.treasury.GOV. USASPENDING.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201101170438 20201025170438 38691 usaspending.gov. MTiVvLSjW+8KD51VN+RrzNJj2d90FkIF/LAkmpforGmD5dmnrmVPXcMHFnS2oPRAgVjocZLUdeGw lPH1vmWCALOBq83RJ1IBRN0PVIkWhskXKBECmOXxuY1T9Lh+OibEfctQ9XR8zfJSNfXNCDz7iLVu H3d+BBXlBn+ewgKK6wk= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101171259 20201025171259 13 treasury.gov. TkrtzcKVnD/beBQI/zilMSEDFHcI4XDKWAIJOxjI4WdbC6PYZ74huc+TENLQCxgWHvhNFyPPjeMb j5uLKSb+juSCdVBac4UWqGvrYimW/zFrlewIYFBeE8eDJ8gTu6v4E93IUTeLBllBu8xIBxrxS7jw qrjqZLQA9ZzE2fNf11Q= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101171803 20201025171803 13 treasury.gov. Jvj0KvFmkjmHen0pMxK7z+toU/3tzizydX7/WIGGOEqYKk35NluRDVNyA1eeZszlPGi/L2kTivc5 UMlV81dHflncrfUzuNWsLacZOWJcJtYsv6E/vwMYkDdiuxgjvtxtdPmYaH8yx3ynF7w5rzC6exL8 y3+n7ExovyTLIg3rpLo= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101174214 20201025174214 13 treasury.gov. CSm14lgQFAcP4XJJQtMAXWWy9qNGPFvLCztHx+/d9bRedWyGjO0x6EwjAf36DcbzNPwzZ7Cz6t36 0JNQ0uKdySSnBvKORp3wl86iT2VOn/9oKbSrTClZoLHYeLqtKMT6OUcEvB0XhFvZ7+Is5CyM793s sU2oeHErUUqyhCo0IlA= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101172602 20201025172602 13 treasury.gov. hVW8OmqqX8qKRcwXtsyTjlvclpahKOJmEGMyeY+gnBz2EX1DR2jK9SkQDyJ21Yhzsv8WZ10e9/EU m9qKt4ozXbhEE5zUq/LpKT2s+j2aCFtyAqQz6WoY2vuzZucYenFHm+vtVEH1383N36uvKQgGXPPp g9ojNyvVyaYh4YYRcto= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.treasury.GOV for USASPENDING.GOV/A
	Received 1231 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1231 bytes) ;; HEADER SECTION ;; id = 59166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USASPENDING.GOV. IN A ;; ANSWER SECTION (2 records) USASPENDING.GOV. 900 IN A 166.123.218.220 USASPENDING.GOV. 900 IN RRSIG ( A 8 2 900 20201101204538 20201025204538 38691 usaspending.gov. FellF6OM8KAZ7gNWjNeuwZlSVzI8mmOV1DnOFzDiC17hVhQAiKYdmAmjKMF92rIr3na3zApwZdQA YXWtJ0U+6jm0zPUgDuri/LXBpXGvOX7pYePtDtfzfiP5Mt9gT1d5hFh+w/GIyOztaJK5xxRYOIU+ rmpdItYLMoFCVsJUNOs= ) ;; AUTHORITY SECTION (3 records) USASPENDING.GOV. 3600 IN NS ns1.treasury.GOV. USASPENDING.GOV. 3600 IN NS ns3.treasury.GOV. USASPENDING.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201101200227 20201025200227 38691 usaspending.gov. glmqu9Rnn97TdnkKu9Jtxvh8eZlJ12jOlJ47xz+rwYQfhbspkI7/CFR+BFRv2qq3ARn/xNfmjffx kQ7Og/q4yY0jMDk7Ef1GvX6FSUUXbIBHe0CamiB8iyCm+dX53BxOCskiFJDd6Lw0iN7BG0tlfmQ3 buFsF0vgbrE/aQBmWNY= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. XSakiVUAb8VJPPsy9/nwe1K0XlMG1xyyIAct1UEgyXYiVGx9LaaGVt6Rclct+Ku7ANJRtm8jT8dS 2XsvMDnwxkXqqkDsH+CdIwNcEGyhqtvQQ4evsAtE+ob0LphsM0bhJo+ItvpJhumouBMQI468UlFl EdubgvVY+znvfoKazl4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. VDldIoxOJKlEBL0dSKK1w6xEPszXp8QG7aZfnGg1l7n+MtZobyX8+X1fZD8+bzJUeF7Kh5uEma+S ls9VGU9YyKWAPfH4aU2/bry2EKjkVpq9o1kWWtJ4NQqLEdw6dGWo2fWqyp1VKu37MHrP4K3ru+Ub DupqruNU5yx3yAj5dKs= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. PhkXA0pnk5sLg8NAVu/SIeaDqOELN6/Vp2qmkwME4dgCOdIwJjn/j8sY7O8ZmXAqTpRz3gKvcp2J Gb688I8LHLz9bzOa+7m88O9axvtflujkpOzl7Jj6TP0muHp76QBRKoPh4c8nO8P32Cm6EHUTlojo L87FgTnnZ9t/yFsUNFY= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. F6Njj6l+SHzOzrPguR6gGw2GS8Rey+T8y3QP45CmqUUngB4ynt1/qSrHwvTVVs/xggc+BMnvVHXk evS+XLK6rJ4sm+R25e5n2GspnN39ycLO2kl7XCFAOxAAHW1jahXYkBN7ciHWXI6s826ZFPi7mhtT GUQPd4U19euylmWEacU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	USASPENDING.GOV A RR has value 166.123.218.220
	Found 1 RRSIGs over A RRset
	`USASPENDING.GOV. 900 IN RRSIG ( A 8 2 900 20201101204538 20201025204538 38691 usaspending.gov. FellF6OM8KAZ7gNWjNeuwZlSVzI8mmOV1DnOFzDiC17hVhQAiKYdmAmjKMF92rIr3na3zApwZdQA YXWtJ0U+6jm0zPUgDuri/LXBpXGvOX7pYePtDtfzfiP5Mt9gT1d5hFh+w/GIyOztaJK5xxRYOIU+ rmpdItYLMoFCVsJUNOs= )`
	RRSIG=38691 and DNSKEY=38691 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USASPENDING.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: