DNSSEC Debugger - USCG.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:28:49 UTC

Analyzing DNSSEC problems for USCG.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 53288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to l.root-servers.net for USCG.GOV/A
	Received 615 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 615 octets ;; HEADER SECTION ;; id = 13047 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 616 octets ;; HEADER SECTION ;; id = 38999 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 35157 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 48751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for USCG.GOV/A
	Received 292 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 292 octets ;; HEADER SECTION ;; id = 25477 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USCG.GOV. 10800 IN NS cgns1.USCG.GOV. USCG.GOV. 10800 IN NS cgns4.USCG.GOV. USCG.GOV. 10800 IN NS cgns5.USCG.GOV. USCG.GOV. 3600 IN DS ( 18949 8 2 df98a5275cdfa13385dc35779bafbc43f5471a7075e4a5c616315afdd2ce46ac ) USCG.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142849 20260420122849 35496 gov. /yw63J8Cem4FGTDZQKSCRAfk9a/nbhcLQgWyfVXkRIAR4hidGH5P0ECq8z+xyJVfIROy2zgU4cBO OCfnUD287Q== ) ;; ADDITIONAL SECTION (4 records) cgns1.USCG.GOV. 3600 IN A 152.121.2.19 cgns4.USCG.GOV. 3600 IN A 152.121.33.3 cgns5.USCG.GOV. 3600 IN A 152.121.50.3 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for USCG.GOV/DNSKEY
	Received 292 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 292 octets ;; HEADER SECTION ;; id = 36153 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USCG.GOV. 10800 IN NS cgns1.USCG.GOV. USCG.GOV. 10800 IN NS cgns4.USCG.GOV. USCG.GOV. 10800 IN NS cgns5.USCG.GOV. USCG.GOV. 3600 IN DS ( 18949 8 2 df98a5275cdfa13385dc35779bafbc43f5471a7075e4a5c616315afdd2ce46ac ) USCG.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142849 20260420122849 35496 gov. IbLKYBI3mCsRbBYE5CloTekwVEE3bRzM2bTD8RzRBG/zoL25a7yeUlSt0ZFJJSgw6jSSU7s1XwpR 2kSvX6h+hg== ) ;; ADDITIONAL SECTION (4 records) cgns1.USCG.GOV. 3600 IN A 152.121.2.19 cgns4.USCG.GOV. 3600 IN A 152.121.33.3 cgns5.USCG.GOV. 3600 IN A 152.121.50.3 ;; { "EDNS-VERSION": 0 }
	Found child zone USCG.GOV

USCG.GOV

	Checking DS between GOV and USCG.GOV
	Query to a.ns.gov for USCG.GOV/DS
	Received 184 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 184 octets ;; HEADER SECTION ;; id = 3679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN DS ;; ANSWER SECTION (2 records) USCG.GOV. 3600 IN DS ( 18949 8 2 df98a5275cdfa13385dc35779bafbc43f5471a7075e4a5c616315afdd2ce46ac ) USCG.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142849 20260420122849 35496 gov. QJDSeg7Qtbki4QtoHowQtHCc2yPB2lJYjf3WLAasNgxW0KgZl8DLLQyOlx+aiHZRLZeX+n+g7r/K r7I9Dq0qDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for USCG.GOV in the GOV zone
	DS=18949/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`USCG.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142849 20260420122849 35496 gov. QJDSeg7Qtbki4QtoHowQtHCc2yPB2lJYjf3WLAasNgxW0KgZl8DLLQyOlx+aiHZRLZeX+n+g7r/K r7I9Dq0qDg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=18949/SHA-256 is now in the chain-of-trust
	`USCG.GOV. 3600 IN DS ( 18949 8 2 df98a5275cdfa13385dc35779bafbc43f5471a7075e4a5c616315afdd2ce46ac )`
	Query to cgns1.USCG.GOV for USCG.GOV/DNSKEY
	Received 3289 bytes from 152.121.2.19
	;; Response received from [152.121.2.19] 3289 octets ;; HEADER SECTION ;; id = 24740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) USCG.GOV. 131663 IN DNSKEY ( 256 3 8 AwEAAYs4fA2O8Dc1VfOq5xZ7e/gtLfZEVObGL0WPnI0TLHzvOKnAle39DgmQxiBheVc1BUMIhniH A7539JOhwCJTT7tfqrtLM5C+hxwF2ABtXqwCTU3Feh0VY4FpwGQclMd+0iG3kC+N1FBUFAw8b+Ar yk/go/oGWkIw3znOsEEklDtXA6/uBNRMeW8BRp/PsYM+SPoV+FaUYlCUaddH0hiky0gYShWsOM0L gcyIwFSJKcgNraDSdeE+jVhBO3eQNLckuvko18P6PQi/jnO2oqEeKSqQTCqRPFpc1vpjNVLwL3I2 uRCehrP3N79UzKvtDK8cNhjjIrBfAmmHjnDzyFNf864pExPsxiWl6tpALS2enhwVk2de1V2jNBOE 8Jx1zpyGRCNrzSjQLL/OHWaFQXLMkHByIyMREaR67/PtnhZHbOD0o2cuBhl7Ilnvvasj8XqFizOc XLIxfB8gtE/kvFb3ugF40AztYIdNlSr/WYGZAl6pt00XjfijgUNMBoj8zcfCTq0Rr7qNKK8o/DLh J0SvXjhmetbmau6I+LCG69jSiTR4I9D32SrIFrgVxMgCZg5SwPbxrScHrnpiCiPxlylztN8Kp+oa PelT+tM2HdjS+Wop5eQ4SOxugq1EA1HdVr1mSsyF5XlDH8WMnJ7ZqQHxIKzi9VkZwNkms8s8C8/s H5Fp ) ; keytag 37879 USCG.GOV. 131663 IN DNSKEY ( 257 3 8 AwEAAb4cYDdgt9NgDWU3dWi7Tqc6ZtE/uLToN37RCLVribCJNFmQW6hjvRvvwV4uIv7rQ64Ga3vh 0PwScbqkCZP9LrkfaSuFdNyk8HGvOkHr8DJ+1RpAE2+H95YH3rGBV5bBlUy5UMM9rVmeiTiLIbMP WnN1LXjzUYoPU/f5fkai/y4k0c8VQGvVLZGL/58TDU27So9C4lNde2dB8lQEQQ/h/0mTlcJCZ98G u1IxW5o4/yZFypgAFfGS28Us5LsB5uHT5PEJDLAGUfHj5EUh48hRP+eKnEhEWckIM4UyuB3Wz78W 7/CqA5qeM1XzlmwvRZY3vKXjzYgVrTV0DR5jMf6OowfqW9w9aaxYVjP78Ic3ryFqTC9ycv9ze+f1 f5/qHdTNHGA+SUvdH20FiD58vi0HALl2j3Yt1b8dSJeaomeHjPzJ2fMTC/1T6zN+5Rx6MRpLSH82 0R1EBrKYIwgBhtrzT2g1r8ai5gxzPfSFD2ZaglD7YEGrspcsMo4ZwkP5LrI7GfCjgOYhjn1Q1Qgg bhBf4OFSJPnNnQhTXsYKdN9x3UEGjrVlUlOQ/SteSUuy6uG378W1LedOpxjvvbgrVmMiSitxMy4M bOnuRAXd8Z5Ju/KPPo6Kf/Rspjq4olx1f/wET7a5YKWsqQ0FkxoPG6l1oH7W+IEI3U/gb4bQVBLK ERJ5 ) ; keytag 18949 USCG.GOV. 131663 IN DNSKEY ( 256 3 8 AwEAAZI3W8B/Vhnz8t7u434kSBdzvsxuTSu/8vB9Ppwb0atYTWvVOOUjAHU8OxaY1aJLDglrEkHz oYIh0ugY4wFuPU98ZQsFu/PbEaQ8IKhML1Xb5l9jD6Lh7jDj7HJWMo+PmenK0ACaLaFNE/O90czE SYh+1e2OM2eau6Dh4p78qBn85Hrg/4W+X74dnrGsavA82xqRFDTC/7TlxU9R6oeAUBWqtsOigaLD lcHTwmLrPzTyKkcRY+vFVhU8q/9zu8NGd05INvDMoNiS2CjXoEp73Tlr8BLC3ptzqr6xhYsA1pvJ +MfrPo+LvHbR+H8xjXSbtfx4OcXVVxBX5VE5IMOhi2gV6ZN6qhp4iucxYoEDI/2jfZr2b/aFPfcN v5vnaPfmpBX5AvrRkxdKIBgCW+xn9izNilgazsS3Fg0Geabs13G0PAd6rRhrRzTjrM3/kHYqpbI5 EQWmWLXQHSvBs1ofIwkMGDWDTa8wLNvD1XrVT0RVE4lXSJCrsRsreSXa9pbUWKovGzQCu9p844L5 GILt1W6S+o31iHbjywfgk6lzQV8FzzajO2Mg0LjqlzzgsZKLzLRyhiwmoqCcmKbnz9t+ZbIO56cM KnOZZCPTHAL5Y0ESWHHSPJl1seI0XMHE0KA0HVUeHrgDkwqZB5kND3KnLTTui39hZPOhpzWVsJSF 7nmR ) ; keytag 51048 USCG.GOV. 131663 IN RRSIG ( DNSKEY 8 2 172800 20260424235635 20260420235445 18949 uscg.gov. Rq0sQBZ5w95v6xC2fNVFzaCXrN4nl66g5A8QmiVa7JEt/3QSmtn+oWeabaRDPV1eoZV6X6JEWCRf yrluVM7RkEibU7FjWWLYk7SH+ct8RgNFSpDNTOS2TnxUOAndPgBW0KNXStycwB8vOoxtN5SU0Pom mqSKbY9mPPyT3t/DYLQtWHfptRxa1YkTEiOq7QCZrp9IrxDETDRu4Dw4Q2aumPyzB4Q7qwElM1Cc kzGWN8pOJGotleifvCtwyMVXwNNBAr3Sf6qwDz6HJ9fQmS8IeaouqiY9FqpalyoI/En2bNH2+eZy ooVODGgMh1e34fHZsr4nU42HhCTS+8y1hRAKkyOZpG1j//u/uEZBFVLbXxteV1SzuclVBFuLtpJx zE8uWgl5ekIdTSFzi3Re6RmKIBAH/iV9FS2wVXnifIq2VhnfNkDAsuPiFjI/iLzQoE9yXBOx+E0p XcDmcNQ2YJaUaCbQrpuldVTlwTslPYrm5FH5+6pysn+ydZFORUznmTV0uUqSfzWXpP3CGff/bB3d wzH8K+ermpeiyhJXIygaKjA0RHqGREp3o/mdPCs82b04kwjqrHZo50tTUmCMsIH1eYknOT4qnVJ5 pbXX2EUsnGNpheWHKrUc9rgHjOuyunJDnCevBOSF12ZzlIPpzP/vheb6EB8Xvtr2C+Ba4W433ss= ) USCG.GOV. 131663 IN RRSIG ( DNSKEY 8 2 172800 20260424235635 20260420235445 37879 uscg.gov. TTr/G7yPM0OfFmMfbsE8JTBn1LMByWPAV7ugcTDhlHf2bZK8hHTa4tP+KjYtvvgIWJakSNqxWf3G dmaHcy85GtPh2b2TYrTPrm+Pue2f3u9pHirLgQXjMJpcyQLXkkAhIfkyI2MHm4XBJdC3HroCaVc6 qeA1ns91UeQ3x45wBWUqktRhANRVz+Ncs24bGd/LkExw6bBB3pWh1Ms3QayOB9cUQ8JdJ+u/r/8G +BwftnCdckOyPOIOTr4t8AuWUqp+Q1a0ETR0c4OCFo4o8U9UcVNLadTTb1YrGn1vbV2Ecbl6VPse N+vHdmJhFQWMO59P5jktf47aox3ARz7olFcanwSsf/y+rTMQMihUHbf5Lxi28mWeNJj8UjveMe3i IViyfSvfCj74L0UF1Y5L2czRtVNaPW2P2GnX6+NGQKVcPwuJQxC9Z5+9CoEGW7mwA8h3/OWnv1/D o/BRtfXtL6C4CIsXM6BxEHvyGe0Rb6ywQiE4ZouBWygBqe15hCR3o9obP14wGlPpJu21F0HLIfYI gfSn2uvfQn93fFbkEV0BOuw3rgNY/iTElJqSyHv6xzAQngKduNtkl27eHRw3Tek1xeKU3dv6Rnow 5cKWjrZgsDHVV7Xnew08pdjIVIR27fx0T3fFvkbBK5mg/fEi3pFtNcJ+Vhfj7X+79pg9L00l4m8= ) USCG.GOV. 131663 IN RRSIG ( DNSKEY 8 2 172800 20260424235635 20260420235445 51048 uscg.gov. M8htxr67dvyvubS+zhGJQko4DGpulrFE2ZUjDXMzyvWzxQAFnYSexRgAo8A35tbkjGILBnnxiz9A E8su3y7QyZ5McPsYlkOGY5P64Uua1aSxw9IKBp6+MCX/DtRPKl/fQgNvV5bjYu//HtUdHyYLmzhF IWFFIOLaFgkvG1EV9Q9sQy7k+LNRHg6sFImkkEVK5IFvd01OiyTNPVIexyt8MrumDb4L3b8nQHLR /kItlnY9AduEb/EzEYesIsZB8PSNdiQKqbZfqYvRGaXzkiihmyCvjb/J/6Ifeo56jtHdfhHrANtD iWsUVKRE0shPhZQ+NTw0CnDheSZgByhm6SF0TrBrg+wu7LvqXwUxFeJazZdRcPNJCWE5eezhIBqp RBpCEBISew3YjBm5POs+d5DVtnIKLdJ52r/++krPPJZiAcFCIRLMQ/eg++F59Co7R4lOFoUA+LbV tWktqSCWwuPB4HSQrG+gC3oY61r7nsYZ8cQ8+p94qpzJ9352dK8VFVQXvwZeoYEBR8SHF20sZMOg Ka3o+AJ1dj6PCgRe9ySPdYPpoWEWqHUrOOQ5GuE0UC5jcbAPZYEiDVQvnBppIXx27Ap7IS/TNbHX RDuCQrnxVQ3QE0btlZ+VhutHjzTZQZ/CREwKbzjHBDvAxnEmRP3u93Qedz8WKobZ4thxqxOKRHA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for USCG.GOV
	USCG.GOV. 131663 IN DNSKEY ( 256 3 8 AwEAAYs4fA2O8Dc1VfOq5xZ7e/gtLfZEVObGL0WPnI0TLHzvOKnAle39DgmQxiBheVc1BUMIhniH A7539JOhwCJTT7tfqrtLM5C+hxwF2ABtXqwCTU3Feh0VY4FpwGQclMd+0iG3kC+N1FBUFAw8b+Ar yk/go/oGWkIw3znOsEEklDtXA6/uBNRMeW8BRp/PsYM+SPoV+FaUYlCUaddH0hiky0gYShWsOM0L gcyIwFSJKcgNraDSdeE+jVhBO3eQNLckuvko18P6PQi/jnO2oqEeKSqQTCqRPFpc1vpjNVLwL3I2 uRCehrP3N79UzKvtDK8cNhjjIrBfAmmHjnDzyFNf864pExPsxiWl6tpALS2enhwVk2de1V2jNBOE 8Jx1zpyGRCNrzSjQLL/OHWaFQXLMkHByIyMREaR67/PtnhZHbOD0o2cuBhl7Ilnvvasj8XqFizOc XLIxfB8gtE/kvFb3ugF40AztYIdNlSr/WYGZAl6pt00XjfijgUNMBoj8zcfCTq0Rr7qNKK8o/DLh J0SvXjhmetbmau6I+LCG69jSiTR4I9D32SrIFrgVxMgCZg5SwPbxrScHrnpiCiPxlylztN8Kp+oa PelT+tM2HdjS+Wop5eQ4SOxugq1EA1HdVr1mSsyF5XlDH8WMnJ7ZqQHxIKzi9VkZwNkms8s8C8/s H5Fp ) ; keytag 37879
	USCG.GOV. 131663 IN DNSKEY ( 257 3 8 AwEAAb4cYDdgt9NgDWU3dWi7Tqc6ZtE/uLToN37RCLVribCJNFmQW6hjvRvvwV4uIv7rQ64Ga3vh 0PwScbqkCZP9LrkfaSuFdNyk8HGvOkHr8DJ+1RpAE2+H95YH3rGBV5bBlUy5UMM9rVmeiTiLIbMP WnN1LXjzUYoPU/f5fkai/y4k0c8VQGvVLZGL/58TDU27So9C4lNde2dB8lQEQQ/h/0mTlcJCZ98G u1IxW5o4/yZFypgAFfGS28Us5LsB5uHT5PEJDLAGUfHj5EUh48hRP+eKnEhEWckIM4UyuB3Wz78W 7/CqA5qeM1XzlmwvRZY3vKXjzYgVrTV0DR5jMf6OowfqW9w9aaxYVjP78Ic3ryFqTC9ycv9ze+f1 f5/qHdTNHGA+SUvdH20FiD58vi0HALl2j3Yt1b8dSJeaomeHjPzJ2fMTC/1T6zN+5Rx6MRpLSH82 0R1EBrKYIwgBhtrzT2g1r8ai5gxzPfSFD2ZaglD7YEGrspcsMo4ZwkP5LrI7GfCjgOYhjn1Q1Qgg bhBf4OFSJPnNnQhTXsYKdN9x3UEGjrVlUlOQ/SteSUuy6uG378W1LedOpxjvvbgrVmMiSitxMy4M bOnuRAXd8Z5Ju/KPPo6Kf/Rspjq4olx1f/wET7a5YKWsqQ0FkxoPG6l1oH7W+IEI3U/gb4bQVBLK ERJ5 ) ; keytag 18949
	USCG.GOV. 131663 IN DNSKEY ( 256 3 8 AwEAAZI3W8B/Vhnz8t7u434kSBdzvsxuTSu/8vB9Ppwb0atYTWvVOOUjAHU8OxaY1aJLDglrEkHz oYIh0ugY4wFuPU98ZQsFu/PbEaQ8IKhML1Xb5l9jD6Lh7jDj7HJWMo+PmenK0ACaLaFNE/O90czE SYh+1e2OM2eau6Dh4p78qBn85Hrg/4W+X74dnrGsavA82xqRFDTC/7TlxU9R6oeAUBWqtsOigaLD lcHTwmLrPzTyKkcRY+vFVhU8q/9zu8NGd05INvDMoNiS2CjXoEp73Tlr8BLC3ptzqr6xhYsA1pvJ +MfrPo+LvHbR+H8xjXSbtfx4OcXVVxBX5VE5IMOhi2gV6ZN6qhp4iucxYoEDI/2jfZr2b/aFPfcN v5vnaPfmpBX5AvrRkxdKIBgCW+xn9izNilgazsS3Fg0Geabs13G0PAd6rRhrRzTjrM3/kHYqpbI5 EQWmWLXQHSvBs1ofIwkMGDWDTa8wLNvD1XrVT0RVE4lXSJCrsRsreSXa9pbUWKovGzQCu9p844L5 GILt1W6S+o31iHbjywfgk6lzQV8FzzajO2Mg0LjqlzzgsZKLzLRyhiwmoqCcmKbnz9t+ZbIO56cM KnOZZCPTHAL5Y0ESWHHSPJl1seI0XMHE0KA0HVUeHrgDkwqZB5kND3KnLTTui39hZPOhpzWVsJSF 7nmR ) ; keytag 51048
	DNSKEY=18949/SEP is now in the chain-of-trust
	DS=18949/SHA-256 verifies DNSKEY=18949/SEP
	Found 3 RRSIGs over DNSKEY RRset
	USCG.GOV. 131663 IN RRSIG ( DNSKEY 8 2 172800 20260424235635 20260420235445 18949 uscg.gov. Rq0sQBZ5w95v6xC2fNVFzaCXrN4nl66g5A8QmiVa7JEt/3QSmtn+oWeabaRDPV1eoZV6X6JEWCRf yrluVM7RkEibU7FjWWLYk7SH+ct8RgNFSpDNTOS2TnxUOAndPgBW0KNXStycwB8vOoxtN5SU0Pom mqSKbY9mPPyT3t/DYLQtWHfptRxa1YkTEiOq7QCZrp9IrxDETDRu4Dw4Q2aumPyzB4Q7qwElM1Cc kzGWN8pOJGotleifvCtwyMVXwNNBAr3Sf6qwDz6HJ9fQmS8IeaouqiY9FqpalyoI/En2bNH2+eZy ooVODGgMh1e34fHZsr4nU42HhCTS+8y1hRAKkyOZpG1j//u/uEZBFVLbXxteV1SzuclVBFuLtpJx zE8uWgl5ekIdTSFzi3Re6RmKIBAH/iV9FS2wVXnifIq2VhnfNkDAsuPiFjI/iLzQoE9yXBOx+E0p XcDmcNQ2YJaUaCbQrpuldVTlwTslPYrm5FH5+6pysn+ydZFORUznmTV0uUqSfzWXpP3CGff/bB3d wzH8K+ermpeiyhJXIygaKjA0RHqGREp3o/mdPCs82b04kwjqrHZo50tTUmCMsIH1eYknOT4qnVJ5 pbXX2EUsnGNpheWHKrUc9rgHjOuyunJDnCevBOSF12ZzlIPpzP/vheb6EB8Xvtr2C+Ba4W433ss= )
	USCG.GOV. 131663 IN RRSIG ( DNSKEY 8 2 172800 20260424235635 20260420235445 37879 uscg.gov. TTr/G7yPM0OfFmMfbsE8JTBn1LMByWPAV7ugcTDhlHf2bZK8hHTa4tP+KjYtvvgIWJakSNqxWf3G dmaHcy85GtPh2b2TYrTPrm+Pue2f3u9pHirLgQXjMJpcyQLXkkAhIfkyI2MHm4XBJdC3HroCaVc6 qeA1ns91UeQ3x45wBWUqktRhANRVz+Ncs24bGd/LkExw6bBB3pWh1Ms3QayOB9cUQ8JdJ+u/r/8G +BwftnCdckOyPOIOTr4t8AuWUqp+Q1a0ETR0c4OCFo4o8U9UcVNLadTTb1YrGn1vbV2Ecbl6VPse N+vHdmJhFQWMO59P5jktf47aox3ARz7olFcanwSsf/y+rTMQMihUHbf5Lxi28mWeNJj8UjveMe3i IViyfSvfCj74L0UF1Y5L2czRtVNaPW2P2GnX6+NGQKVcPwuJQxC9Z5+9CoEGW7mwA8h3/OWnv1/D o/BRtfXtL6C4CIsXM6BxEHvyGe0Rb6ywQiE4ZouBWygBqe15hCR3o9obP14wGlPpJu21F0HLIfYI gfSn2uvfQn93fFbkEV0BOuw3rgNY/iTElJqSyHv6xzAQngKduNtkl27eHRw3Tek1xeKU3dv6Rnow 5cKWjrZgsDHVV7Xnew08pdjIVIR27fx0T3fFvkbBK5mg/fEi3pFtNcJ+Vhfj7X+79pg9L00l4m8= )
	USCG.GOV. 131663 IN RRSIG ( DNSKEY 8 2 172800 20260424235635 20260420235445 51048 uscg.gov. M8htxr67dvyvubS+zhGJQko4DGpulrFE2ZUjDXMzyvWzxQAFnYSexRgAo8A35tbkjGILBnnxiz9A E8su3y7QyZ5McPsYlkOGY5P64Uua1aSxw9IKBp6+MCX/DtRPKl/fQgNvV5bjYu//HtUdHyYLmzhF IWFFIOLaFgkvG1EV9Q9sQy7k+LNRHg6sFImkkEVK5IFvd01OiyTNPVIexyt8MrumDb4L3b8nQHLR /kItlnY9AduEb/EzEYesIsZB8PSNdiQKqbZfqYvRGaXzkiihmyCvjb/J/6Ifeo56jtHdfhHrANtD iWsUVKRE0shPhZQ+NTw0CnDheSZgByhm6SF0TrBrg+wu7LvqXwUxFeJazZdRcPNJCWE5eezhIBqp RBpCEBISew3YjBm5POs+d5DVtnIKLdJ52r/++krPPJZiAcFCIRLMQ/eg++F59Co7R4lOFoUA+LbV tWktqSCWwuPB4HSQrG+gC3oY61r7nsYZ8cQ8+p94qpzJ9352dK8VFVQXvwZeoYEBR8SHF20sZMOg Ka3o+AJ1dj6PCgRe9ySPdYPpoWEWqHUrOOQ5GuE0UC5jcbAPZYEiDVQvnBppIXx27Ap7IS/TNbHX RDuCQrnxVQ3QE0btlZ+VhutHjzTZQZ/CREwKbzjHBDvAxnEmRP3u93Qedz8WKobZ4thxqxOKRHA= )
	RRSIG=18949 and DNSKEY=18949/SEP verifies the DNSKEY RRset
	RRSIG=37879 and DNSKEY=37879 verifies the DNSKEY RRset
	RRSIG=51048 and DNSKEY=51048 verifies the DNSKEY RRset
	DNSKEY=37879 is now in the chain-of-trust
	DNSKEY=51048 is now in the chain-of-trust
	Query to cgns4.USCG.GOV for USCG.GOV/A
	Received 2387 bytes from 152.121.33.3
	;; Response received from [152.121.33.3] 2387 octets ;; HEADER SECTION ;; id = 58803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) USCG.GOV. 592 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012101191 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 592 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= ) USCG.GOV. 592 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 592 IN NSEC3 ( 1 0 10 1c qkqqj5he9no2ahgk5int0elh5qdciedd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 592 IN RRSIG ( NSEC3 8 3 600 20260424232330 20260420224647 37879 uscg.gov. ayWlIq7LAkvayF/VsJ2vFkLgvH7RqwjZ7dvbAi+x2nGiaAkZXVpppkNy6b/Z9N1fCHHhxd3SNJxj pUlT/xNJEyE5aQ803oS4nGLDoWeP9cMRI5dJOEmfl//lDE7JEto7FJJN8njX3SaI/D9Pgqnx7IQS xkc4Y1/AkfG1VCoOsM553l0pmLQ3pcjGmSRxV5qEwdaDGh12cq67Hcr1/eiHWIyDkN+mdhAtnOZS 0Hc8TME6sChpdlHpBqYpaDbsHehapIbmA/WjT78RP8fczCdSzMHGgk9sAK0BRzPpo5PYV8aBxvc4 Zb14FS9GZaJn5mryzne4s0NK3oiuISLd/ORSIzIuUCd2GelSIQ06AhQawF+wyjGD/2EWgyn7SKwq hooODsT0m5EUDaAj4ysNBkxpt0ofhCVvbLjtY821udVXA4deLZqGfeqxc7hVmCjUr6mSEte0kGdU lY5K8D1zItyd1w0O5v/x6T6WcIcACxUjQyjpx9YHTKK1JHxem6RCobii2SkjkLQ3CR0M4xrLXgY/ oqS5N8TUx8wQEh9CSJc3g3DsvO8Uyy9prl2cItv/s/J5qeEk/g5G9XFN17WXuS9579BBThYyPm6l M4MCl90azmoQwC6OeOWpGRNogs+rFE61eCwwOaTb3JxB7fnAKTs6pInNxcY9Vin+YbxWXOX/7P0= ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 592 IN RRSIG ( NSEC3 8 3 600 20260424232330 20260420224647 51048 uscg.gov. BZW8C0kz07Tg/uMJhY689cMm4wOK8/4Mdbip14pWwIMwMb/CYnYn4dmIoOtSfiQVROAzaUUllMrn w4z1/2/psSmLHialeZJZKI23oDuUUzEDdwkxZmGrGNbk0IxZ6Xdy7djA0UgNc74o+WfX1ll/uDia jylbZSuh5vc+8QNrv2X+ZQyjdnftfKOw4OEHVRZlRcRxCY5GHTcGmbjTVW9bfIJYupScc3wQifb6 +/UoCSaJmssGIY60nOhcm8dGy7iCvguoi5FWw4wl50usqMY48aCW/0xLbPwbayM0hVVx+DVH+I1Z 71U8RIaIZXZl7kKu8hw0WCpjFEjbkBEiB9CU0p2HIZvCyNPIOxjTrDi39RwR6TmlaHT7oqdBvtzN Kej8Oi2Xsdh0Vs1cZe8F9WnQg8EhU7VEfYcAGTguZWyfjNF1XxrnwjArV255ke6c4oYTfHaq2+Va xvFDCVwN4t88VrAP+T/sm4YjcgtKIx097Gc+zFuOvNW0eEMtMYllhMU0pi5VYOfSzOTbLsn/5BZc 3ldx5XXyaWzZJJjOat2AeyXYFt1MyafUhMFhgSbLXi5bi4Wfs/8X77RXA7v+phH3FRPQ2DebNo8y QRQSAZ9ua1lI0TIAmq5XPEVZG1FKJgTxxFM5C0lB/qouXxeHNUHkxdaiLe5hV//oZPytZW/LhxI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cgns4.USCG.GOV is authoritative for USCG.GOV
	Found RRSIG signed by uscg.gov zone
	Query to cgns5.USCG.GOV for USCG.GOV/SOA
	Received 1202 bytes from 152.121.50.3
	;; Response received from [152.121.50.3] 1202 octets ;; HEADER SECTION ;; id = 37146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN SOA ;; ANSWER SECTION (3 records) USCG.GOV. 114 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012101191 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 114 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= ) USCG.GOV. 114 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to cgns1.USCG.GOV for USCG.GOV/SOA
	Received 1202 bytes from 152.121.2.19
	;; Response received from [152.121.2.19] 1202 octets ;; HEADER SECTION ;; id = 13711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN SOA ;; ANSWER SECTION (3 records) USCG.GOV. 114 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012101191 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 114 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= ) USCG.GOV. 114 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to cgns4.USCG.GOV for USCG.GOV/A
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	USCG.GOV. 592 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= )
	USCG.GOV. 592 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= )
	RRSIG=37879 and DNSKEY=37879 verifies the SOA RRset
	RRSIG=51048 and DNSKEY=51048 verifies the SOA RRset

USCG.GOV

	Query to cgns5.USCG.GOV for USCG.GOV/A
	Received 2387 bytes from 152.121.50.3
	;; Response received from [152.121.50.3] 2387 octets ;; HEADER SECTION ;; id = 1864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) USCG.GOV. 558 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012101191 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= ) USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 504 IN NSEC3 ( 1 0 10 1c qkqqj5he9no2ahgk5int0elh5qdciedd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 504 IN RRSIG ( NSEC3 8 3 600 20260424232330 20260420224647 37879 uscg.gov. ayWlIq7LAkvayF/VsJ2vFkLgvH7RqwjZ7dvbAi+x2nGiaAkZXVpppkNy6b/Z9N1fCHHhxd3SNJxj pUlT/xNJEyE5aQ803oS4nGLDoWeP9cMRI5dJOEmfl//lDE7JEto7FJJN8njX3SaI/D9Pgqnx7IQS xkc4Y1/AkfG1VCoOsM553l0pmLQ3pcjGmSRxV5qEwdaDGh12cq67Hcr1/eiHWIyDkN+mdhAtnOZS 0Hc8TME6sChpdlHpBqYpaDbsHehapIbmA/WjT78RP8fczCdSzMHGgk9sAK0BRzPpo5PYV8aBxvc4 Zb14FS9GZaJn5mryzne4s0NK3oiuISLd/ORSIzIuUCd2GelSIQ06AhQawF+wyjGD/2EWgyn7SKwq hooODsT0m5EUDaAj4ysNBkxpt0ofhCVvbLjtY821udVXA4deLZqGfeqxc7hVmCjUr6mSEte0kGdU lY5K8D1zItyd1w0O5v/x6T6WcIcACxUjQyjpx9YHTKK1JHxem6RCobii2SkjkLQ3CR0M4xrLXgY/ oqS5N8TUx8wQEh9CSJc3g3DsvO8Uyy9prl2cItv/s/J5qeEk/g5G9XFN17WXuS9579BBThYyPm6l M4MCl90azmoQwC6OeOWpGRNogs+rFE61eCwwOaTb3JxB7fnAKTs6pInNxcY9Vin+YbxWXOX/7P0= ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 504 IN RRSIG ( NSEC3 8 3 600 20260424232330 20260420224647 51048 uscg.gov. BZW8C0kz07Tg/uMJhY689cMm4wOK8/4Mdbip14pWwIMwMb/CYnYn4dmIoOtSfiQVROAzaUUllMrn w4z1/2/psSmLHialeZJZKI23oDuUUzEDdwkxZmGrGNbk0IxZ6Xdy7djA0UgNc74o+WfX1ll/uDia jylbZSuh5vc+8QNrv2X+ZQyjdnftfKOw4OEHVRZlRcRxCY5GHTcGmbjTVW9bfIJYupScc3wQifb6 +/UoCSaJmssGIY60nOhcm8dGy7iCvguoi5FWw4wl50usqMY48aCW/0xLbPwbayM0hVVx+DVH+I1Z 71U8RIaIZXZl7kKu8hw0WCpjFEjbkBEiB9CU0p2HIZvCyNPIOxjTrDi39RwR6TmlaHT7oqdBvtzN Kej8Oi2Xsdh0Vs1cZe8F9WnQg8EhU7VEfYcAGTguZWyfjNF1XxrnwjArV255ke6c4oYTfHaq2+Va xvFDCVwN4t88VrAP+T/sm4YjcgtKIx097Gc+zFuOvNW0eEMtMYllhMU0pi5VYOfSzOTbLsn/5BZc 3ldx5XXyaWzZJJjOat2AeyXYFt1MyafUhMFhgSbLXi5bi4Wfs/8X77RXA7v+phH3FRPQ2DebNo8y QRQSAZ9ua1lI0TIAmq5XPEVZG1FKJgTxxFM5C0lB/qouXxeHNUHkxdaiLe5hV//oZPytZW/LhxI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cgns5.USCG.GOV is authoritative for USCG.GOV
	Found RRSIG signed by uscg.gov zone
	Query to cgns5.USCG.GOV for USCG.GOV/A
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= )
	USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= )
	RRSIG=37879 and DNSKEY=37879 verifies the SOA RRset
	RRSIG=51048 and DNSKEY=51048 verifies the SOA RRset

USCG.GOV

	Query to cgns1.USCG.GOV for USCG.GOV/A
	Received 2387 bytes from 152.121.2.19
	;; Response received from [152.121.2.19] 2387 octets ;; HEADER SECTION ;; id = 35821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) USCG.GOV. 558 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012101191 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= ) USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 504 IN NSEC3 ( 1 0 10 1c qkqqj5he9no2ahgk5int0elh5qdciedd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 504 IN RRSIG ( NSEC3 8 3 600 20260424232330 20260420224647 37879 uscg.gov. ayWlIq7LAkvayF/VsJ2vFkLgvH7RqwjZ7dvbAi+x2nGiaAkZXVpppkNy6b/Z9N1fCHHhxd3SNJxj pUlT/xNJEyE5aQ803oS4nGLDoWeP9cMRI5dJOEmfl//lDE7JEto7FJJN8njX3SaI/D9Pgqnx7IQS xkc4Y1/AkfG1VCoOsM553l0pmLQ3pcjGmSRxV5qEwdaDGh12cq67Hcr1/eiHWIyDkN+mdhAtnOZS 0Hc8TME6sChpdlHpBqYpaDbsHehapIbmA/WjT78RP8fczCdSzMHGgk9sAK0BRzPpo5PYV8aBxvc4 Zb14FS9GZaJn5mryzne4s0NK3oiuISLd/ORSIzIuUCd2GelSIQ06AhQawF+wyjGD/2EWgyn7SKwq hooODsT0m5EUDaAj4ysNBkxpt0ofhCVvbLjtY821udVXA4deLZqGfeqxc7hVmCjUr6mSEte0kGdU lY5K8D1zItyd1w0O5v/x6T6WcIcACxUjQyjpx9YHTKK1JHxem6RCobii2SkjkLQ3CR0M4xrLXgY/ oqS5N8TUx8wQEh9CSJc3g3DsvO8Uyy9prl2cItv/s/J5qeEk/g5G9XFN17WXuS9579BBThYyPm6l M4MCl90azmoQwC6OeOWpGRNogs+rFE61eCwwOaTb3JxB7fnAKTs6pInNxcY9Vin+YbxWXOX/7P0= ) PIJU9M6I40TES3NUCJEERLDFRP583MV7.USCG.GOV. 504 IN RRSIG ( NSEC3 8 3 600 20260424232330 20260420224647 51048 uscg.gov. BZW8C0kz07Tg/uMJhY689cMm4wOK8/4Mdbip14pWwIMwMb/CYnYn4dmIoOtSfiQVROAzaUUllMrn w4z1/2/psSmLHialeZJZKI23oDuUUzEDdwkxZmGrGNbk0IxZ6Xdy7djA0UgNc74o+WfX1ll/uDia jylbZSuh5vc+8QNrv2X+ZQyjdnftfKOw4OEHVRZlRcRxCY5GHTcGmbjTVW9bfIJYupScc3wQifb6 +/UoCSaJmssGIY60nOhcm8dGy7iCvguoi5FWw4wl50usqMY48aCW/0xLbPwbayM0hVVx+DVH+I1Z 71U8RIaIZXZl7kKu8hw0WCpjFEjbkBEiB9CU0p2HIZvCyNPIOxjTrDi39RwR6TmlaHT7oqdBvtzN Kej8Oi2Xsdh0Vs1cZe8F9WnQg8EhU7VEfYcAGTguZWyfjNF1XxrnwjArV255ke6c4oYTfHaq2+Va xvFDCVwN4t88VrAP+T/sm4YjcgtKIx097Gc+zFuOvNW0eEMtMYllhMU0pi5VYOfSzOTbLsn/5BZc 3ldx5XXyaWzZJJjOat2AeyXYFt1MyafUhMFhgSbLXi5bi4Wfs/8X77RXA7v+phH3FRPQ2DebNo8y QRQSAZ9ua1lI0TIAmq5XPEVZG1FKJgTxxFM5C0lB/qouXxeHNUHkxdaiLe5hV//oZPytZW/LhxI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cgns1.USCG.GOV is authoritative for USCG.GOV
	Found RRSIG signed by uscg.gov zone
	Query to cgns1.USCG.GOV for USCG.GOV/A
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 37879 uscg.gov. RMoiUUrwrjBM/F9yx5/3nnrlPNRuV9epAQtXdBk71la5Gj08kZK79iRTZqZiImOlVlGxbpJG9akx avGv5kNbenZVf86nJx/a8OtlVWpAmiPgLYk2ztKSze2tCnplw232nr5v8Vo6PO7AXzlzoKARE7rn p1JWJGF7mbSR+adoql63viXgIWGO6Pk4lwNBgu8JtExYQo4l/El3wcq/mB2qjJYwNaj3juQMfySx 4fsJPRy1RvAQv2rfj4wMYmDAKwg8XGD4SoYD3DfaieTBUCWn+xS39bROKtEP/tUVrf31+RvfZol1 QrDG5OkfUIjQaMOU2Vvn6WM8DK8zivusQQeWZw+WLeplhpOWmfZzxTv7FhiV1ypjkHQ/Zb9o6scr luJIko1sn5W4pxfHhjln/xZ1GcaDi9nRZLdpIhOSIciPVtJjoaq1TrjwmwmIo7Rl6Q6iTAORcbym RIPJJdrZ6xia/sxxUOg2jGam4Xho21yZfSXU65+sGFcp206uPEVc6DSYKNp4p0eCIea0/4Y1OWO9 OsNFSa1qv1YAPVYO5rm13LC1QdcYj3KbNKYBYmtpTAvdiQ8NWC5JsvtsbFfxNRWhvKC6WScVJa0H 6YNFFOaB0K5HrYn6rm45vz7NmnX9zIgx5ZCW9/gePx+nAPExPK75y7lntCvXZKMDN+3YY5qMI78= )
	USCG.GOV. 558 IN RRSIG ( SOA 8 2 600 20260425095713 20260421085713 51048 uscg.gov. TaHKNILil/XEAGGxaK/QRCmYvh/Am3pEpcdB4gVQx71IrS9RaBoWCyLEB5XegGlv0cSD3XRPc3vW r2CZOHN4mSwYrIq4CGT+G8+8W6cvohzCH6vgwWACBp0NrTwWhpIOrfwFXVz5vh5xCW+/ImKTeGwW JZxKJZZ0wuTB5V51V0OzmgfuDOckDQTvEvPYJEVUsqX1xPfR4NeKgrkU0BavEc4JnRmdBZiQ9Gc1 whpNhCYg9fp9LaicWWRmoq04Gc3c/82f0nhtAAgB1thcwQCz3unT0laEbmYv9kM3ogey4mxd8Ag0 DiZ/kMbdBcQkH/43p2SXWkK8ygKAGREqHdfEkfhbHTCXAK2RRhZ8l9rQuyT8ysXZ6QrUOHhbNfl4 fsv9O0pfONHEnyGNVwQjsJWJUgDmOZOD8/NbMDSnYnoDEJYi3QAJacmPsp+XSta6HuMe/tPc2mJ9 t6TzEEJkzAqXkFVALLlKR6qXnZOuC9xg7g7v++hM1wl7RsOt0lWzy3a8IqPf6M9QFIp1dKczF+dW THZuwcAzRme6ln3LSSZTvoi5Oj6QKaVe1+ITqf3KRUp1wypn0iqDl93SjxHhjVP3uUt5JwMD/w+r IFo5A5cftH2HkAT6RrlkwC4vD4l6ERsddIw2ZNeGt9yecFMOYajq7F1moXHtyUQuoePIwOdljNk= )
	RRSIG=37879 and DNSKEY=37879 verifies the SOA RRset
	RRSIG=51048 and DNSKEY=51048 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USCG.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: