DNSSEC Analyzer - USTREAS.GOV

Domain Name:

Time: 2020-05-29 04:24:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for USTREAS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 21010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	Query to j.root-servers.net for USTREAS.GOV/A
	Received 666 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (666 bytes) ;; HEADER SECTION ;; id = 32405 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 36184 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 403 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (403 bytes) ;; HEADER SECTION ;; id = 37379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 10005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40176 is now in the chain-of-trust
	Query to a.gov-servers.net for USTREAS.GOV/A
	Received 452 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (452 bytes) ;; HEADER SECTION ;; id = 13420 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USTREAS.GOV. 86400 IN NS ns3.treasury.GOV. USTREAS.GOV. 86400 IN NS ns1.treasury.GOV. USTREAS.GOV. 3600 IN DS 1011 7 1 182d073997d3fd00496af958e13bd029360913df USTREAS.GOV. 3600 IN DS ( 1011 7 2 e81a4c782e31af510a4fb4aa7c10739c93099e72bec95a41f8bbc82c48bb1b07 ) USTREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. QplO+cgWNeCLtymr+QmywL+hHOmlWVXQm4lP8SBhfmu15yw4cUXwq/AFthu1gfLZpnNNE82fuDcj 4+cKRigoqlIhfDz8RMUoeAWzqnLHJO/tIbbW3hsjHSAFUA7PoFB0/qus42ZifuC0fQi42FY/d6xV Rl0Yup92js3AD8WQtRxssQ0/vwCaZwAA1bCbNEEFNIMYlcj8NDv58OQ8RHW0kg== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for USTREAS.GOV/DNSKEY
	Received 452 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (452 bytes) ;; HEADER SECTION ;; id = 45786 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USTREAS.GOV. 86400 IN NS ns3.treasury.GOV. USTREAS.GOV. 86400 IN NS ns1.treasury.GOV. USTREAS.GOV. 3600 IN DS 1011 7 1 182d073997d3fd00496af958e13bd029360913df USTREAS.GOV. 3600 IN DS ( 1011 7 2 e81a4c782e31af510a4fb4aa7c10739c93099e72bec95a41f8bbc82c48bb1b07 ) USTREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. QplO+cgWNeCLtymr+QmywL+hHOmlWVXQm4lP8SBhfmu15yw4cUXwq/AFthu1gfLZpnNNE82fuDcj 4+cKRigoqlIhfDz8RMUoeAWzqnLHJO/tIbbW3hsjHSAFUA7PoFB0/qus42ZifuC0fQi42FY/d6xV Rl0Yup92js3AD8WQtRxssQ0/vwCaZwAA1bCbNEEFNIMYlcj8NDv58OQ8RHW0kg== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone USTREAS.GOV

USTREAS.GOV

	Checking DS between GOV and USTREAS.GOV
	Query to b.gov-servers.net for USTREAS.GOV/DS
	Received 319 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (319 bytes) ;; HEADER SECTION ;; id = 46951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN DS ;; ANSWER SECTION (3 records) USTREAS.GOV. 3600 IN DS 1011 7 1 182d073997d3fd00496af958e13bd029360913df USTREAS.GOV. 3600 IN DS ( 1011 7 2 e81a4c782e31af510a4fb4aa7c10739c93099e72bec95a41f8bbc82c48bb1b07 ) USTREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. QplO+cgWNeCLtymr+QmywL+hHOmlWVXQm4lP8SBhfmu15yw4cUXwq/AFthu1gfLZpnNNE82fuDcj 4+cKRigoqlIhfDz8RMUoeAWzqnLHJO/tIbbW3hsjHSAFUA7PoFB0/qus42ZifuC0fQi42FY/d6xV Rl0Yup92js3AD8WQtRxssQ0/vwCaZwAA1bCbNEEFNIMYlcj8NDv58OQ8RHW0kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for USTREAS.GOV in the GOV zone
	DS=1011/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=1011/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`USTREAS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. QplO+cgWNeCLtymr+QmywL+hHOmlWVXQm4lP8SBhfmu15yw4cUXwq/AFthu1gfLZpnNNE82fuDcj 4+cKRigoqlIhfDz8RMUoeAWzqnLHJO/tIbbW3hsjHSAFUA7PoFB0/qus42ZifuC0fQi42FY/d6xV Rl0Yup92js3AD8WQtRxssQ0/vwCaZwAA1bCbNEEFNIMYlcj8NDv58OQ8RHW0kg== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=1011/SHA-1 is now in the chain-of-trust
	`USTREAS.GOV. 3600 IN DS 1011 7 1 182d073997d3fd00496af958e13bd029360913df`
	`USTREAS.GOV. 3600 IN DS ( 1011 7 2 e81a4c782e31af510a4fb4aa7c10739c93099e72bec95a41f8bbc82c48bb1b07 )`
	Query to ns3.treasury.GOV for USTREAS.GOV/DNSKEY
	Received 997 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (997 bytes) ;; HEADER SECTION ;; id = 18627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) USTREAS.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbRlEEGaBSvYdmNldFi4MKERkP90Oxa+nQHG4JhOH7az4xhEBEYCbWq+BtN8Tzz6NJH/QleX GAR9KtGJOyC9GU+S0k4/qM9PQUfhz6r9nBPcFXpLiRP9H4ugIIiOmX4PE2qSdRPZz/p+IoZpzg/w c+Q7Uclryds7mLM/Tx5kk2qP ) ; Key ID = 1011 USTREAS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbnQfwsOLDleY3/4uGmo5vxarMsnZ4Y6YstRgyfg5Dmo9RZjitogPeoBb7Snn66XZdwxgCr+ 4iKhc7igVauzFlMv8xUrhW/fwiLgNIfn02UzrUsWjDXQM1RqHhawErSAkuF83TJZgPBk1HnyiGhX CRYSjikwOFlaG4YJ69+TML55 ) ; Key ID = 31097 USTREAS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbaFyouL1/f6IgLOUYmJRAGdL/1cEHhT9K+FYfq/pb0/LVN5pnBnaxFRBLMO67OHXrk1plgz Lj3PjgVQTHBkLtw3WOey62kZ5ysx+ZnL4ppC5KJIrTgtMv7Yj5A9IsX8O9edYyqD6yUtJvXvTrbx KkJ8hqbh9C9VNn4DunFCm4hT ) ; Key ID = 47618 USTREAS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603190650 20200527190650 1011 ustreas.gov. M7RiX5QCUhymaADxOhTiNoC5AzFp/qYHdH2+tcykIbCbiyEO8JnZ0yCgsvfbKKTQu0G9uKnkSNls Zvr/AHMV2mFXIIJnKbH8n98eM8g6qG8nCfp9ZXrNM0Hz+AnQzvYwsVB6I+SUC1yS3Qk3+i5i2xsA kdmJetuaPs9moZHxm9M= ) USTREAS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603190650 20200527190650 31097 ustreas.gov. shCJDY+gPiXY7SfHBTaFX/ODCsyPPeONMjU12OMu262favj/IvhpQM2YzXFckhvVnSecAy9OPyxS kUYKbJ3UYHWI5cbMqu4I/Dkwqo5z8gB1KNC0vFv/BN0NE6VUfch8+OlXkdTpknbOL7fLpkqoJanv /xAc1iEzjmHUdNINDqc= ) USTREAS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603190650 20200527190650 47618 ustreas.gov. bHdscJY5W80UqD/Pg1wjE8bNCB9oKbOdtWVWkxGqyU0HGA18IB9B/d29RWEwkWCfKvXhmGR/tzs/ NPTSNqrd+qToYjrzxX0hOcx9yYPlgwtmXK4ALuIB5yFM4uy7NZxief8KO8EcNrHe4DNjPEd0Cisj uf7rMkTtHiSaxlsiPMY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for USTREAS.GOV
	`USTREAS.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbRlEEGaBSvYdmNldFi4MKERkP90Oxa+nQHG4JhOH7az4xhEBEYCbWq+BtN8Tzz6NJH/QleX GAR9KtGJOyC9GU+S0k4/qM9PQUfhz6r9nBPcFXpLiRP9H4ugIIiOmX4PE2qSdRPZz/p+IoZpzg/w c+Q7Uclryds7mLM/Tx5kk2qP ) ; Key ID = 1011`
	`USTREAS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbnQfwsOLDleY3/4uGmo5vxarMsnZ4Y6YstRgyfg5Dmo9RZjitogPeoBb7Snn66XZdwxgCr+ 4iKhc7igVauzFlMv8xUrhW/fwiLgNIfn02UzrUsWjDXQM1RqHhawErSAkuF83TJZgPBk1HnyiGhX CRYSjikwOFlaG4YJ69+TML55 ) ; Key ID = 31097`
	`USTREAS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbaFyouL1/f6IgLOUYmJRAGdL/1cEHhT9K+FYfq/pb0/LVN5pnBnaxFRBLMO67OHXrk1plgz Lj3PjgVQTHBkLtw3WOey62kZ5ysx+ZnL4ppC5KJIrTgtMv7Yj5A9IsX8O9edYyqD6yUtJvXvTrbx KkJ8hqbh9C9VNn4DunFCm4hT ) ; Key ID = 47618`
	DNSKEY=1011/SEP is now in the chain-of-trust
	DS=1011/SHA-1 verifies DNSKEY=1011/SEP
	DS=1011/SHA-256 verifies DNSKEY=1011/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`USTREAS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603190650 20200527190650 1011 ustreas.gov. M7RiX5QCUhymaADxOhTiNoC5AzFp/qYHdH2+tcykIbCbiyEO8JnZ0yCgsvfbKKTQu0G9uKnkSNls Zvr/AHMV2mFXIIJnKbH8n98eM8g6qG8nCfp9ZXrNM0Hz+AnQzvYwsVB6I+SUC1yS3Qk3+i5i2xsA kdmJetuaPs9moZHxm9M= )`
	`USTREAS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603190650 20200527190650 31097 ustreas.gov. shCJDY+gPiXY7SfHBTaFX/ODCsyPPeONMjU12OMu262favj/IvhpQM2YzXFckhvVnSecAy9OPyxS kUYKbJ3UYHWI5cbMqu4I/Dkwqo5z8gB1KNC0vFv/BN0NE6VUfch8+OlXkdTpknbOL7fLpkqoJanv /xAc1iEzjmHUdNINDqc= )`
	`USTREAS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200603190650 20200527190650 47618 ustreas.gov. bHdscJY5W80UqD/Pg1wjE8bNCB9oKbOdtWVWkxGqyU0HGA18IB9B/d29RWEwkWCfKvXhmGR/tzs/ NPTSNqrd+qToYjrzxX0hOcx9yYPlgwtmXK4ALuIB5yFM4uy7NZxief8KO8EcNrHe4DNjPEd0Cisj uf7rMkTtHiSaxlsiPMY= )`
	RRSIG=1011 and DNSKEY=1011/SEP verifies the DNSKEY RRset
	RRSIG=31097 and DNSKEY=31097 verifies the DNSKEY RRset
	RRSIG=47618 and DNSKEY=47618 verifies the DNSKEY RRset
	DNSKEY=31097 is now in the chain-of-trust
	DNSKEY=47618 is now in the chain-of-trust
	Query to ns3.treasury.GOV for USTREAS.GOV/A
	Received 398 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (398 bytes) ;; HEADER SECTION ;; id = 40849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN A ;; ANSWER SECTION (3 records) USTREAS.GOV. 2 IN A 166.123.218.220 USTREAS.GOV. 2 IN RRSIG ( A 7 2 2 20200602071327 20200526071327 31097 ustreas.gov. VsfvRJJegdkmO+QMEksf7oRoFi7NO3y/klXmzVke6xCm2hVWPt4qv5zzs0ZA8CdKEu7b5YqLQFYm +gC96Pf9tyG24CSiFkOt71Ic1EFvX2JuXydxCEdsBnOzN/doAlJ+7UW0yduiLV1CkI1KIUend53n 3PsMrWJ1/zqMAjmwvdQ= ) USTREAS.GOV. 2 IN RRSIG ( A 7 2 2 20200604045005 20200528045005 47618 ustreas.gov. pRd9kVdNCZn0w81uwNe+TryUYe7dTGiu00itv5z7SOf3w39m6txGZ4PQC99YQGb8+hR/cr9O3IkO C6woUicF7LNIJfiVTpamc7PCVSpVqhRPv+/Hrey2oprppKcoPJaAkCRhSG+aoLihpu5tSTstcnOe NLreUJCc34sAR3eUYz0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	USTREAS.GOV is authoritative for USTREAS.GOV
	Found RRSIG signed by ustreas.gov zone
	Query to ns3.treasury.GOV for USTREAS.GOV/SOA
	Received 2288 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (2288 bytes) ;; HEADER SECTION ;; id = 63867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN SOA ;; ANSWER SECTION (3 records) USTREAS.GOV. 28800 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2010074175 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) USTREAS.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200603173250 20200527173250 31097 ustreas.gov. iw90Al03fyOWofxccOtv5vadvsHLQCJ9NiXQIm/TX1/xOPu4bgMLkCHbeV5H1P8Ak8WhH4Biiz0m 4/+BHpohgki41tw+ArOpdL+GuaSGmi1qhuQBqiU9OCy5PMm3emsbnfRTM/h+0SsHtWriZYfVJYsm cc6KmrYp4i1FUmFUm4A= ) USTREAS.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200604120920 20200528120920 47618 ustreas.gov. fewumgpUWcP0yCHSOzW+8Q9erTswOwBxY5BntKvlV73Xuh9Q9o2+VvI6L98vi/FtFdneNeVukU31 TfUy+5u/FwtXThiuyilCGAoUq4o4RvvGfIi7/xoJWD+a0w1VBCraRLz3tKalSqPiwmwcytQPPfP4 0PzfNoHFUHk5Mbk62Tg= ) ;; AUTHORITY SECTION (4 records) USTREAS.GOV. 28800 IN NS ns1.treasury.GOV. USTREAS.GOV. 28800 IN NS ns3.treasury.GOV. USTREAS.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200602074344 20200526074344 31097 ustreas.gov. QsBNWHij+pCikvXqwnD/V/NHRgr7ufMO716HWia9DyXVYarqGDUYZgEzV7mEgN3XNJMwhCM9kzVW fw6M9K9/6bobgsApPE8wMwgE+UIHjEUdMu6xmzr7wrsJdvEeLSEAr2bud+BnEidOs8H2XTfR7I3g 7CxgHZ/Y9FG0YkGp55c= ) USTREAS.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200604081419 20200528081419 47618 ustreas.gov. Chu9+P6H++slIXBXcSCPrXTsQD+kEr8xKg2Mv0E9SbMBPHKj2pRQAP7GMgf5VWYvWPi8p5CqPBF4 VXUAgt9+FmHrJifkpIOU4QqOOsefep0ITm+ngFpI4YdsSptEpvg4Pu4N4kFjXBjjxkBTein3j0gC moI83HwW8MFwBAHHSEI= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200603101248 20200527101248 47468 treasury.gov. IZ2IlofCwiSvAvcYsIEH5xMSzXK1D0p0jQQZcoSfaIcdJ8e9Dd/74qVLTK7b+c1zkkPi5fv7i5E2 3c0mV8I69xEs7Z4Mu+tzy12xwCGdnhR8P95z12NMoQpiL6J+Ip3gBy6DOULLAOTz7e+MZyeARmWX EN02XDvzESPyt0cl+No= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KDz6QKBsXIZwOaEt1uEMzA2sCucjRj+290BGiJnZYzgRPfz0N8yyqAMQfD+kiJKSEsVVRWEZSwbe TpmQw0S4MbW8ozYessjoPyo2L1qGbjxxScdDsp7VLJqwhKFdQwnnY9KVIWaUgDfaIVc6psQuMzVi 4Js4MMbeDwOfoclQ8GM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200603094137 20200527094137 47468 treasury.gov. EsV/euHSyOuI0vOr61WpsIzAKbeXTCNDOOGpNlQOjR/xstBAYcYN2yKPTRvAziFqA8bjhrKfyq7G PvpCrd/MCei7yWEwQBhr/hIzc59kvqIuO4KfyaWDgxg0jQCkZ+BWajlV9Kl9/cTFMR7CbUMdk+T6 T1vB7dXeSzfI6wRw8Zo= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KJH8EZ6pxrUSE75hf4HD3PZoUrA+m0bmqYP2xS5ceaIXHimM54HltexyzDrWSsETN2Nswl2XGZxC IApS4MQG52eRIfZxpqQ8n34/9XgTFHszEjJskKgFI48Yl66Zbbr4PQel4tRTBDjZYoUCVoJPPpri 171cXq+ExJEz2Bi7w30= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200605042357 20200529042357 47468 treasury.gov. JUj+rwA1cqr+1AYkZvHvs4mWbHifxD3q7T47qkRDMh1L5UcikyrxGwmZy1lvDNuuNdbjiI7DTzTj PMdEWysOyD1DMGiR9NSH8JIhkHJGq3uK5V3Olp+Zas3Z/gmiRIbNbnpbzE7zgZ8s+BFyrQ/03nxX NO3MUqUaUB5jocrt8Bk= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200605042357 20200529042357 40478 treasury.gov. YzuKDlKGV1sBS5bmjeKl1vUmnu88lH6MzFwIw1AAzcJCyJ+qgoEzP09DvAT044X7S2jYlo40IwvQ jf3XarEB9ZPGmeAGsr1wT+FBL50Il6PrA2vmRtNYC+404qSXDAlEgIIMylNLkNi9WXf+oFmmChtX lLfv1dKyITrt3rp6tYc= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200603115112 20200527115112 47468 treasury.gov. kGso/Z5+JeSMUX5/jpHsklYNzsk00aLqQVbX5xzLQlC9yilQ1VthpcIgyP0+X8xy95inHl2iwsLn r334x7+xFL0R0M2vLcxygWuj7qFzPeG6PHZXAwTBGZWBDr0JG6+ESWxJ/nTwkRADx4Tw3/4nUv+v M5AHUnQWz3cRRudo+zE= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Na+XSZsBV5WRkjBLLSyhOIPttgM4inlqDdOXdUPlgKMSUJoqTmiduKC0VB42wDpiMPuB8/8cpEXp /6fkR0/olgDp7QpFIZ9I3p8l4ce16cmnUoibbgWbuYyFIPl1xgjzfYSRzt9sFinR0MODcvSKEo+9 sGYqmqoKQaIWYIyrkxU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for USTREAS.GOV/SOA
	Received 2288 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (2288 bytes) ;; HEADER SECTION ;; id = 24553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN SOA ;; ANSWER SECTION (3 records) USTREAS.GOV. 28800 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2010074175 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) USTREAS.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200602000858 20200526000858 31097 ustreas.gov. poE7m+EKc0xhsNnCpAGjiIcQUx1k4DpsNaSL+SToQB/9ep856DnP6blT3NySXPDomUfS5ufEyfFI XxbnZk6JgQ27BkKd5n02ZoprP3f6hSX4zsrGRqtKXl8cQMlMxeRBTTjv/skX/PAcDnpm14x4T7fW kNAry2bhGUk+CZXH3iY= ) USTREAS.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200604090634 20200528090634 47618 ustreas.gov. otLk0aLC/hWCmroR7nTdgwjtCsFFgAfb8slKuDCX1S1hTrcBo5zrFlZlZYHEfMkwG9/I01PWamh0 MtRGQ6Ld1wBdEyeWHZ5s8bUnlfuHuCZ/DBVenVfH629vmLEQBATVYWQ5T0BREbDr6OYSAE6Un+Aw p3SbIb38m4MzHX60RPA= ) ;; AUTHORITY SECTION (4 records) USTREAS.GOV. 28800 IN NS ns1.treasury.GOV. USTREAS.GOV. 28800 IN NS ns3.treasury.GOV. USTREAS.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200603233531 20200527233531 31097 ustreas.gov. NHKN0wBYGObV+CAHiakVljbxntm2Hab8zsALZHA67phxmh23DQzEL8JWw9Hn2ibUE/BMwsnNOMq6 1lvB7okrtW96nc3wYqzkZcKGeBPPQGg4D3u1SqocM3KPxkrXhOFntnRs9Q8l/yumkkfDuwvOut25 gGLRMLyz4n+QDbVkVU0= ) USTREAS.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200603194422 20200527194422 47618 ustreas.gov. JJpd7xSg7Tf1QXlaePlMkumFU0nfyCPEy9qsNP0XoHGUx/j/2O4270H9HWKpq31mYL/W53xGvbLu krTBM/DCvdq3fNcBnPg+ex4pM94pThUuM5MAdcl+wvyc8tVT3R2b/Gq06JTDNG6MFb5UPKKVS4SW FzUMrH6A0NvxGkTiKu4= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200604102225 20200528102225 47468 treasury.gov. D4gx4nf8c8SaKnELaXbdzbrWOuLGf2T1xLpIxrqbxj08OnvxUIMyMoPiEE3zJtDT5E1gLwT8dcuN uIDAifmtI/tWwHVajMfBUsJsdKa3zjurHpMEeQ+SD95zsXgcJPLgK34iIWcnl32zLRjczgpiRdhx l6WdARSXn9NdIAsFHUU= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KDz6QKBsXIZwOaEt1uEMzA2sCucjRj+290BGiJnZYzgRPfz0N8yyqAMQfD+kiJKSEsVVRWEZSwbe TpmQw0S4MbW8ozYessjoPyo2L1qGbjxxScdDsp7VLJqwhKFdQwnnY9KVIWaUgDfaIVc6psQuMzVi 4Js4MMbeDwOfoclQ8GM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200604194418 20200528194418 47468 treasury.gov. BF/WSNOqFOyD+XVoYZCE019z2a8d4ja5nb0VuuJR07hjp5PVK8fjRXnQcFZq4adjDHhuVmCdtz9+ nlEU7AV5eEG9/17xFwobg6TmjG1WzJTPg9Q6p4hiOeCE7Sx2u9tGJQHYN7HyzV2iwsAnK7oDS5GE HefAPzkGrWgoTwWlGvk= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. KJH8EZ6pxrUSE75hf4HD3PZoUrA+m0bmqYP2xS5ceaIXHimM54HltexyzDrWSsETN2Nswl2XGZxC IApS4MQG52eRIfZxpqQ8n34/9XgTFHszEjJskKgFI48Yl66Zbbr4PQel4tRTBDjZYoUCVoJPPpri 171cXq+ExJEz2Bi7w30= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200605001455 20200529001455 47468 treasury.gov. FuYOzr4MzFDgkUyTSbARmaYTq1FflE3WHSJTMbAzaGSLF+agystXd6NaGOPsLvkYyNiFtSA/sWbA 4RB2v4AvaglLXFHcpe06GQWy+GBbDpHaNRMwHSZXCIYDLpCdOiIzN9uVpT1yGRbQ2fq88OBP3tG9 +WAEwdQz4DL0hcs++QQ= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200605001455 20200529001455 40478 treasury.gov. MGB0D4POtl/jVVtfBRLjwG1NDGaSCVGH/DS++Yi03BrKYHIv1YqmYgpPpampsqqqLW+GplPHe08H LdnLWo/+xlDGKF3C6FHdU6BPqoMX+4JJ6Rx6M02vL4JVzkdUnE3IZldt6KjQVscInWQuXaHI6fho Pc0xo2+Kzyh4HJF8ru8= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200601213929 20200525213929 47468 treasury.gov. ZE8AdJSawnRokAVdjw3peP7pq2XEiQzuU5rBxecuwwsKFHWr2oYngvQfGGKXFVDZcE1dBMna8pcH FTgsatiUanzoX9nQyB2+zemZ4dbOpMEpqEr0xPPYozyiUkLVwUUfvzK8vyBkrcxbsk8iVDWo6SsP BlRRZljwrjN/S2ww2DQ= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200602065936 20200526065936 40478 treasury.gov. Na+XSZsBV5WRkjBLLSyhOIPttgM4inlqDdOXdUPlgKMSUJoqTmiduKC0VB42wDpiMPuB8/8cpEXp /6fkR0/olgDp7QpFIZ9I3p8l4ce16cmnUoibbgWbuYyFIPl1xgjzfYSRzt9sFinR0MODcvSKEo+9 sGYqmqoKQaIWYIyrkxU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.treasury.GOV for USTREAS.GOV/A
	Received 398 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (398 bytes) ;; HEADER SECTION ;; id = 52367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USTREAS.GOV. IN A ;; ANSWER SECTION (3 records) USTREAS.GOV. 2 IN A 166.123.218.220 USTREAS.GOV. 2 IN RRSIG ( A 7 2 2 20200602082815 20200526082815 31097 ustreas.gov. e9XjHvY2q3EODRcPJ9TQJ6Zxi83CUU9tae4TDy0BAF+iCdTTsKRSdJ76kz7VKvPAvVN6Kl2v4h/V PIXHiCX+uZo0c/UYbvHdDDJacJynp/dJtKl+VNmepz0iidlOJ0Bqyjf+rrBifvPKMlHeeOo5u/h6 YgVqoR7vaFRWRdQoGgM= ) USTREAS.GOV. 2 IN RRSIG ( A 7 2 2 20200604070046 20200528070046 47618 ustreas.gov. hTHuHLsDC9vOwHBUhNxOgdVLcKBWksRy1AAG+dQ486sB9505VMhoUFpDynziKG5KwHdJXBhjRLIb va5QJ9z2pZGhFsO50Acf2/exoEsVRSaDl3p4Lefd1wshWL0GhWlYfTrTIaBQGMQCFgTlxNLnjncX LWgBG2WA7qZtfX6gEnE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	USTREAS.GOV A RR has value 166.123.218.220
	Found 2 RRSIGs over A RRset
	`USTREAS.GOV. 2 IN RRSIG ( A 7 2 2 20200602082815 20200526082815 31097 ustreas.gov. e9XjHvY2q3EODRcPJ9TQJ6Zxi83CUU9tae4TDy0BAF+iCdTTsKRSdJ76kz7VKvPAvVN6Kl2v4h/V PIXHiCX+uZo0c/UYbvHdDDJacJynp/dJtKl+VNmepz0iidlOJ0Bqyjf+rrBifvPKMlHeeOo5u/h6 YgVqoR7vaFRWRdQoGgM= )`
	`USTREAS.GOV. 2 IN RRSIG ( A 7 2 2 20200604070046 20200528070046 47618 ustreas.gov. hTHuHLsDC9vOwHBUhNxOgdVLcKBWksRy1AAG+dQ486sB9505VMhoUFpDynziKG5KwHdJXBhjRLIb va5QJ9z2pZGhFsO50Acf2/exoEsVRSaDl3p4Lefd1wshWL0GhWlYfTrTIaBQGMQCFgTlxNLnjncX LWgBG2WA7qZtfX6gEnE= )`
	RRSIG=31097 and DNSKEY=31097 verifies the A RRset
	RRSIG=47618 and DNSKEY=47618 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USTREAS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: