DNSSEC Debugger - america.gov

Domain Name:

Time: 2024-09-11 03:22:15 UTC

Analyzing DNSSEC problems for america.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 53392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to i.root-servers.net for america.gov/A
	Received 621 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 621 octets ;; HEADER SECTION ;; id = 56277 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 40995 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to g.root-servers.net for gov/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 52068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 10110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for america.gov/A
	Received 317 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 317 octets ;; HEADER SECTION ;; id = 59895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) america.gov. 10800 IN NS a1-63.akam.net. america.gov. 10800 IN NS a14-64.akam.net. america.gov. 10800 IN NS a26-65.akam.net. america.gov. 10800 IN NS a3-66.akam.net. america.gov. 10800 IN NS a8-67.akam.net. america.gov. 10800 IN NS a9-64.akam.net. america.gov. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c ) america.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042216 20240910022216 35496 gov. rJkKWE+yeCb2vawnI9nPU29fqZZNoUXBG0PSx2AeNl47NmYD64UOQo31J4l13P9NSjMf2OxDHtqY MW3Yo33BRg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for america.gov/DNSKEY
	Received 317 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 317 octets ;; HEADER SECTION ;; id = 37102 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) america.gov. 10800 IN NS a1-63.akam.net. america.gov. 10800 IN NS a14-64.akam.net. america.gov. 10800 IN NS a26-65.akam.net. america.gov. 10800 IN NS a3-66.akam.net. america.gov. 10800 IN NS a8-67.akam.net. america.gov. 10800 IN NS a9-64.akam.net. america.gov. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c ) america.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042216 20240910022216 35496 gov. NuWIMeZTLCq58i2+CGrhKVCDVYdL6DKxrSFUfLqUXP9LflKhdXgc/8ce5/psCnc3RSR+2kJ3GUj5 ELpdyvj5qQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone america.gov

america.gov

	Checking DS between gov and america.gov
	Query to b.ns.gov for america.gov/DS
	Received 187 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 187 octets ;; HEADER SECTION ;; id = 51111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN DS ;; ANSWER SECTION (2 records) america.gov. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c ) america.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042216 20240910022216 35496 gov. BNJjYbThghel/SvMsD37P0f+A8Z1H8od78yifGI8Zv3JpdPj2sCFjPtXLTcpeyrb8y8/je7rjieV g2R2fGsF8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for america.gov in the gov zone
	DS=9397/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`america.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042216 20240910022216 35496 gov. BNJjYbThghel/SvMsD37P0f+A8Z1H8od78yifGI8Zv3JpdPj2sCFjPtXLTcpeyrb8y8/je7rjieV g2R2fGsF8w== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=9397/SHA-256 is now in the chain-of-trust
	`america.gov. 3600 IN DS ( 9397 8 2 274b2b407da0c36bce5638be22245346cc91f8e68e7fe051de8e374c97b8e98c )`
	Query to a3-66.akam.net for america.gov/DNSKEY
	Received 1466 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 1466 octets ;; HEADER SECTION ;; id = 29605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN DNSKEY ;; ANSWER SECTION (5 records) america.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAbkF88vbWiHiW4LraIUk3rs+ZMG96btRVLDxq6eFAW5nYqH5Biy3rQwx0d0YiPB5IltX05JV cUFPynxcvXDpAInukx9rZkwH5+T6n3o3B0k/L8K8HRhE8feF/d/qRUZcIR4Pw7lM/yQzBshOZgRV LIg5863+nxJc9gLY0vw3RaQlK+wMNYpLCu6GHVscBhmg0ilgK5wA+h3oMgQLT+vxLYAaAEq1AO1Z uvn1IRXsLOHhgmcnu90Ro42t0aL3OH75uB+5pvtbTe7w/7Ed/mEmsG1cgJ4i8L9I5JirUgqo7Pil /V4VoMzopyF5s9EUXWqA52i9qkJ1zCuSwj0WwXHLa28= ) ; Key ID = 2646 america.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAd+ANxgUU6oj7nuSU/26m906rI2LeJv9IUN8UZ0/Tyv7C6H22CPhbl4rYWckZbGliHxRw3Q6 GFOew4fC+eIO9fLSrK6ImrCkiK4yBwB4NFXky5nOBrZ6vtxuljScWALlb/PMV5SsqhOE4ECVP4tS DKZLQmwzFX2FxtdvRwfdQFybzHUx6/TzmMjQlyqMng7BYB9Swba5KggTYeEmAMVd4jd5DKz2WMVh bk48Ox4TZN/BFMdzPr6c+U0dHmh6Xrj5unbKGbiUxIXr9aSJHmWBoIMz9WBpDLSm9kqS8VX30Cfi qNFtiGj/9w/8l4xIX2FlGmdBDKHAEPPKA2yndd8zHZc= ) ; Key ID = 9397 america.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAcq3Hn3V7nP6XAWIuLdKziD4IxXPYuNkr0OcJbSHJgMQyJWbQGZ2943zk3FV6xtxACRyS2xa Wh+blXGcCH1qhoJbzgIDS1t+NeporprSYN+JGU8NGtV/mNhKSwgXSXZH/wmpG7Gz5nN25gvhhugh huAA7BZmTx49CkWJlr+us798sXqMoLgTCxfGPa7WNJZbITEKN2Mk9gzx3eXI3V8j67XWtK+xyiir SBufi3bGdfIMoS8h7RGli+b262OMQxkY02ZO3lfWiO4iXamKEEcDekHogZSHQmwbv+l9HZXiNbMG LTQ90uOh/KskXl5k7j9ONyl94ZCXwKbzW3k11IBmOj8= ) ; Key ID = 14910 america.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20250830045419 20240830041312 9397 america.gov. MxWoXhn8QwO/J/iGb7+3blT4qNJGt9jYk/N2hFrDekXhpw1vkLYmFIl3yehqrYgJQTKUmK1SQ/XW deLSHB0nzUKXIaLOpXKn2Fb0AWGtoOJQyU3KStW8RYPgentotE4FFDYf2OxHUkxm+RsiH52dmWFL +TwclPVq4v+37eObC4QMcub+lxn+hfV8VpkXQ57fgc2ap9EJEnXCJL9A2basJlWm8oJaEQTgdM/g Pf/g54HraYZmQx+kd4RiwoNhvqvH3s+0EEpPec069DoC1MdJ1mwLDlgfuKGo8usIuCZuAiXBNhgp srGVCguoiIdeaVHE51SJDNoyrP98YxGLOi64oQ== ) america.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20250830045419 20240830041312 14910 america.gov. bOiEcyJl5DQFSn/S+Qxmx+lRNAWf/vgGft1gcPlj7py2aZsqfmg05+fuSbnWs9Wr3yzDKneXYBV3 0G9rJ0szZNCrMZJ0S79b2AnyHpGqYLSC4LyXNzf44f49Vr5CFIuKKXtN5l24hd5EMJtQwT2B6Fx+ jnW8kfoqRPjAdvRHcHc8fO2fOe+rMeStJPlXKnogeyDbSTWz9o6u2i+uZg90jjQyYepjytN+RJ1D I+/OfOto7bKF2n14ESAk/WuB8xK7JeW50rLhDkAM8+EtMeP3N3q3QGd+MU1iD8dof0i/xhqgv4AQ FuSch4SLFKa+SeZSFuFiS5XCRlnOICu3fInMGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for america.gov
	`america.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAbkF88vbWiHiW4LraIUk3rs+ZMG96btRVLDxq6eFAW5nYqH5Biy3rQwx0d0YiPB5IltX05JV cUFPynxcvXDpAInukx9rZkwH5+T6n3o3B0k/L8K8HRhE8feF/d/qRUZcIR4Pw7lM/yQzBshOZgRV LIg5863+nxJc9gLY0vw3RaQlK+wMNYpLCu6GHVscBhmg0ilgK5wA+h3oMgQLT+vxLYAaAEq1AO1Z uvn1IRXsLOHhgmcnu90Ro42t0aL3OH75uB+5pvtbTe7w/7Ed/mEmsG1cgJ4i8L9I5JirUgqo7Pil /V4VoMzopyF5s9EUXWqA52i9qkJ1zCuSwj0WwXHLa28= ) ; Key ID = 2646`
	`america.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAd+ANxgUU6oj7nuSU/26m906rI2LeJv9IUN8UZ0/Tyv7C6H22CPhbl4rYWckZbGliHxRw3Q6 GFOew4fC+eIO9fLSrK6ImrCkiK4yBwB4NFXky5nOBrZ6vtxuljScWALlb/PMV5SsqhOE4ECVP4tS DKZLQmwzFX2FxtdvRwfdQFybzHUx6/TzmMjQlyqMng7BYB9Swba5KggTYeEmAMVd4jd5DKz2WMVh bk48Ox4TZN/BFMdzPr6c+U0dHmh6Xrj5unbKGbiUxIXr9aSJHmWBoIMz9WBpDLSm9kqS8VX30Cfi qNFtiGj/9w/8l4xIX2FlGmdBDKHAEPPKA2yndd8zHZc= ) ; Key ID = 9397`
	`america.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAcq3Hn3V7nP6XAWIuLdKziD4IxXPYuNkr0OcJbSHJgMQyJWbQGZ2943zk3FV6xtxACRyS2xa Wh+blXGcCH1qhoJbzgIDS1t+NeporprSYN+JGU8NGtV/mNhKSwgXSXZH/wmpG7Gz5nN25gvhhugh huAA7BZmTx49CkWJlr+us798sXqMoLgTCxfGPa7WNJZbITEKN2Mk9gzx3eXI3V8j67XWtK+xyiir SBufi3bGdfIMoS8h7RGli+b262OMQxkY02ZO3lfWiO4iXamKEEcDekHogZSHQmwbv+l9HZXiNbMG LTQ90uOh/KskXl5k7j9ONyl94ZCXwKbzW3k11IBmOj8= ) ; Key ID = 14910`
	DNSKEY=9397/SEP is now in the chain-of-trust
	DS=9397/SHA-256 verifies DNSKEY=9397/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`america.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20250830045419 20240830041312 9397 america.gov. MxWoXhn8QwO/J/iGb7+3blT4qNJGt9jYk/N2hFrDekXhpw1vkLYmFIl3yehqrYgJQTKUmK1SQ/XW deLSHB0nzUKXIaLOpXKn2Fb0AWGtoOJQyU3KStW8RYPgentotE4FFDYf2OxHUkxm+RsiH52dmWFL +TwclPVq4v+37eObC4QMcub+lxn+hfV8VpkXQ57fgc2ap9EJEnXCJL9A2basJlWm8oJaEQTgdM/g Pf/g54HraYZmQx+kd4RiwoNhvqvH3s+0EEpPec069DoC1MdJ1mwLDlgfuKGo8usIuCZuAiXBNhgp srGVCguoiIdeaVHE51SJDNoyrP98YxGLOi64oQ== )`
	`america.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20250830045419 20240830041312 14910 america.gov. bOiEcyJl5DQFSn/S+Qxmx+lRNAWf/vgGft1gcPlj7py2aZsqfmg05+fuSbnWs9Wr3yzDKneXYBV3 0G9rJ0szZNCrMZJ0S79b2AnyHpGqYLSC4LyXNzf44f49Vr5CFIuKKXtN5l24hd5EMJtQwT2B6Fx+ jnW8kfoqRPjAdvRHcHc8fO2fOe+rMeStJPlXKnogeyDbSTWz9o6u2i+uZg90jjQyYepjytN+RJ1D I+/OfOto7bKF2n14ESAk/WuB8xK7JeW50rLhDkAM8+EtMeP3N3q3QGd+MU1iD8dof0i/xhqgv4AQ FuSch4SLFKa+SeZSFuFiS5XCRlnOICu3fInMGw== )`
	RRSIG=9397 and DNSKEY=9397/SEP verifies the DNSKEY RRset
	RRSIG=14910 and DNSKEY=14910 verifies the DNSKEY RRset
	DNSKEY=2646 is now in the chain-of-trust
	DNSKEY=14910 is now in the chain-of-trust
	Query to a1-63.akam.net for america.gov/A
	Received 355 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 355 octets ;; HEADER SECTION ;; id = 61104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-63.akam.net is authoritative for america.gov
	Found RRSIG signed by america.gov zone
	Query to a26-65.akam.net for america.gov/SOA
	Received 849 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 849 octets ;; HEADER SECTION ;; id = 56363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN SOA ;; ANSWER SECTION (2 records) america.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 8949 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) america.gov. 900 IN RRSIG ( SOA 8 2 900 20250831135845 20240831125845 14910 america.gov. FEJ/qmXeDyiNWEICp4KGJ1l9jMTtz2ANdkmXcd80uOyHjQDSA5cQNik8giIKKxJpjNh6V89Si6u6 /MPUqcGgNZcQ4sooJdfJRojcLWRxLhyM0RONn0Q1oIJt7Jje7KXimBK1wX8OgdeCGIwUvc+an/u+ wIwmhOWHBuV7lSosK3sexVHTSUhZgpvNqRqddmcxvy4cfOuEm7/BVYI0aV8FnUs279DuJkFvWXlz 0ec4s9TNTFyWevQcuMviob7Tixz6fOz5Jx2S9kab1REe6mJyYNtztFZur9olJ6bQH/UxSsj+79st HAP2XhoT4KqPmHwsqNE6Jdatw5mePYzbvY2dsQ== ) ;; AUTHORITY SECTION (7 records) america.gov. 900 IN NS a26-65.akam.net. america.gov. 900 IN NS a8-67.akam.net. america.gov. 900 IN NS a3-66.akam.net. america.gov. 900 IN NS a1-63.akam.net. america.gov. 900 IN NS a9-64.akam.net. america.gov. 900 IN NS a14-64.akam.net. america.gov. 900 IN RRSIG ( NS 8 2 900 20250831125127 20240831115221 14910 america.gov. sIvvQfA6LpEEcG/C/+AQsCLFwHCT2/6alh40jVnw9y69vQbqOWV1PGr7A4J0yz64oh00mG7UdlhQ IeVN2PZ+HHdzpjfk21iO/Dicnp2zOYYggcTmGL570v96h9hBb331rIyvpXyPZddoWnOPSr78O7U/ +UJajfkJzLjleGeNCSKDVWkW+v3DIm2gn31TeRtrNyIdUX4S5NvcJebKRECOU634aWt42Bq5nB3s EM99tAMbP7BBwmxSV5dHl3knasmmCefYGNWqUdTmXP63QiVDyRGfBdYY+hRFzlz0gWksG3z5+15j /E+x8Ak/qTdPfmTCTehnyXU2qLcEJ+rs3UisBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for america.gov/SOA
	Received 849 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 849 octets ;; HEADER SECTION ;; id = 50233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN SOA ;; ANSWER SECTION (2 records) america.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 8949 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) america.gov. 900 IN RRSIG ( SOA 8 2 900 20250831135845 20240831125845 14910 america.gov. FEJ/qmXeDyiNWEICp4KGJ1l9jMTtz2ANdkmXcd80uOyHjQDSA5cQNik8giIKKxJpjNh6V89Si6u6 /MPUqcGgNZcQ4sooJdfJRojcLWRxLhyM0RONn0Q1oIJt7Jje7KXimBK1wX8OgdeCGIwUvc+an/u+ wIwmhOWHBuV7lSosK3sexVHTSUhZgpvNqRqddmcxvy4cfOuEm7/BVYI0aV8FnUs279DuJkFvWXlz 0ec4s9TNTFyWevQcuMviob7Tixz6fOz5Jx2S9kab1REe6mJyYNtztFZur9olJ6bQH/UxSsj+79st HAP2XhoT4KqPmHwsqNE6Jdatw5mePYzbvY2dsQ== ) ;; AUTHORITY SECTION (7 records) america.gov. 900 IN NS a8-67.akam.net. america.gov. 900 IN NS a3-66.akam.net. america.gov. 900 IN NS a26-65.akam.net. america.gov. 900 IN NS a1-63.akam.net. america.gov. 900 IN NS a14-64.akam.net. america.gov. 900 IN NS a9-64.akam.net. america.gov. 900 IN RRSIG ( NS 8 2 900 20250831125127 20240831115221 14910 america.gov. sIvvQfA6LpEEcG/C/+AQsCLFwHCT2/6alh40jVnw9y69vQbqOWV1PGr7A4J0yz64oh00mG7UdlhQ IeVN2PZ+HHdzpjfk21iO/Dicnp2zOYYggcTmGL570v96h9hBb331rIyvpXyPZddoWnOPSr78O7U/ +UJajfkJzLjleGeNCSKDVWkW+v3DIm2gn31TeRtrNyIdUX4S5NvcJebKRECOU634aWt42Bq5nB3s EM99tAMbP7BBwmxSV5dHl3knasmmCefYGNWqUdTmXP63QiVDyRGfBdYY+hRFzlz0gWksG3z5+15j /E+x8Ak/qTdPfmTCTehnyXU2qLcEJ+rs3UisBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-66.akam.net for america.gov/SOA
	Received 849 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 849 octets ;; HEADER SECTION ;; id = 6034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN SOA ;; ANSWER SECTION (2 records) america.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 8949 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) america.gov. 900 IN RRSIG ( SOA 8 2 900 20250831135845 20240831125845 14910 america.gov. FEJ/qmXeDyiNWEICp4KGJ1l9jMTtz2ANdkmXcd80uOyHjQDSA5cQNik8giIKKxJpjNh6V89Si6u6 /MPUqcGgNZcQ4sooJdfJRojcLWRxLhyM0RONn0Q1oIJt7Jje7KXimBK1wX8OgdeCGIwUvc+an/u+ wIwmhOWHBuV7lSosK3sexVHTSUhZgpvNqRqddmcxvy4cfOuEm7/BVYI0aV8FnUs279DuJkFvWXlz 0ec4s9TNTFyWevQcuMviob7Tixz6fOz5Jx2S9kab1REe6mJyYNtztFZur9olJ6bQH/UxSsj+79st HAP2XhoT4KqPmHwsqNE6Jdatw5mePYzbvY2dsQ== ) ;; AUTHORITY SECTION (7 records) america.gov. 900 IN NS a1-63.akam.net. america.gov. 900 IN NS a8-67.akam.net. america.gov. 900 IN NS a14-64.akam.net. america.gov. 900 IN NS a9-64.akam.net. america.gov. 900 IN NS a26-65.akam.net. america.gov. 900 IN NS a3-66.akam.net. america.gov. 900 IN RRSIG ( NS 8 2 900 20250831125127 20240831115221 14910 america.gov. sIvvQfA6LpEEcG/C/+AQsCLFwHCT2/6alh40jVnw9y69vQbqOWV1PGr7A4J0yz64oh00mG7UdlhQ IeVN2PZ+HHdzpjfk21iO/Dicnp2zOYYggcTmGL570v96h9hBb331rIyvpXyPZddoWnOPSr78O7U/ +UJajfkJzLjleGeNCSKDVWkW+v3DIm2gn31TeRtrNyIdUX4S5NvcJebKRECOU634aWt42Bq5nB3s EM99tAMbP7BBwmxSV5dHl3knasmmCefYGNWqUdTmXP63QiVDyRGfBdYY+hRFzlz0gWksG3z5+15j /E+x8Ak/qTdPfmTCTehnyXU2qLcEJ+rs3UisBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for america.gov/SOA
	Received 849 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 849 octets ;; HEADER SECTION ;; id = 12664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN SOA ;; ANSWER SECTION (2 records) america.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 8949 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) america.gov. 900 IN RRSIG ( SOA 8 2 900 20250831135845 20240831125845 14910 america.gov. FEJ/qmXeDyiNWEICp4KGJ1l9jMTtz2ANdkmXcd80uOyHjQDSA5cQNik8giIKKxJpjNh6V89Si6u6 /MPUqcGgNZcQ4sooJdfJRojcLWRxLhyM0RONn0Q1oIJt7Jje7KXimBK1wX8OgdeCGIwUvc+an/u+ wIwmhOWHBuV7lSosK3sexVHTSUhZgpvNqRqddmcxvy4cfOuEm7/BVYI0aV8FnUs279DuJkFvWXlz 0ec4s9TNTFyWevQcuMviob7Tixz6fOz5Jx2S9kab1REe6mJyYNtztFZur9olJ6bQH/UxSsj+79st HAP2XhoT4KqPmHwsqNE6Jdatw5mePYzbvY2dsQ== ) ;; AUTHORITY SECTION (7 records) america.gov. 900 IN NS a3-66.akam.net. america.gov. 900 IN NS a26-65.akam.net. america.gov. 900 IN NS a8-67.akam.net. america.gov. 900 IN NS a1-63.akam.net. america.gov. 900 IN NS a14-64.akam.net. america.gov. 900 IN NS a9-64.akam.net. america.gov. 900 IN RRSIG ( NS 8 2 900 20250831125127 20240831115221 14910 america.gov. sIvvQfA6LpEEcG/C/+AQsCLFwHCT2/6alh40jVnw9y69vQbqOWV1PGr7A4J0yz64oh00mG7UdlhQ IeVN2PZ+HHdzpjfk21iO/Dicnp2zOYYggcTmGL570v96h9hBb331rIyvpXyPZddoWnOPSr78O7U/ +UJajfkJzLjleGeNCSKDVWkW+v3DIm2gn31TeRtrNyIdUX4S5NvcJebKRECOU634aWt42Bq5nB3s EM99tAMbP7BBwmxSV5dHl3knasmmCefYGNWqUdTmXP63QiVDyRGfBdYY+hRFzlz0gWksG3z5+15j /E+x8Ak/qTdPfmTCTehnyXU2qLcEJ+rs3UisBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-67.akam.net for america.gov/SOA
	Received 849 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 849 octets ;; HEADER SECTION ;; id = 44808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN SOA ;; ANSWER SECTION (2 records) america.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 8949 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) america.gov. 900 IN RRSIG ( SOA 8 2 900 20250831135845 20240831125845 14910 america.gov. FEJ/qmXeDyiNWEICp4KGJ1l9jMTtz2ANdkmXcd80uOyHjQDSA5cQNik8giIKKxJpjNh6V89Si6u6 /MPUqcGgNZcQ4sooJdfJRojcLWRxLhyM0RONn0Q1oIJt7Jje7KXimBK1wX8OgdeCGIwUvc+an/u+ wIwmhOWHBuV7lSosK3sexVHTSUhZgpvNqRqddmcxvy4cfOuEm7/BVYI0aV8FnUs279DuJkFvWXlz 0ec4s9TNTFyWevQcuMviob7Tixz6fOz5Jx2S9kab1REe6mJyYNtztFZur9olJ6bQH/UxSsj+79st HAP2XhoT4KqPmHwsqNE6Jdatw5mePYzbvY2dsQ== ) ;; AUTHORITY SECTION (7 records) america.gov. 900 IN NS a9-64.akam.net. america.gov. 900 IN NS a8-67.akam.net. america.gov. 900 IN NS a26-65.akam.net. america.gov. 900 IN NS a1-63.akam.net. america.gov. 900 IN NS a14-64.akam.net. america.gov. 900 IN NS a3-66.akam.net. america.gov. 900 IN RRSIG ( NS 8 2 900 20250831125127 20240831115221 14910 america.gov. sIvvQfA6LpEEcG/C/+AQsCLFwHCT2/6alh40jVnw9y69vQbqOWV1PGr7A4J0yz64oh00mG7UdlhQ IeVN2PZ+HHdzpjfk21iO/Dicnp2zOYYggcTmGL570v96h9hBb331rIyvpXyPZddoWnOPSr78O7U/ +UJajfkJzLjleGeNCSKDVWkW+v3DIm2gn31TeRtrNyIdUX4S5NvcJebKRECOU634aWt42Bq5nB3s EM99tAMbP7BBwmxSV5dHl3knasmmCefYGNWqUdTmXP63QiVDyRGfBdYY+hRFzlz0gWksG3z5+15j /E+x8Ak/qTdPfmTCTehnyXU2qLcEJ+rs3UisBA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-63.akam.net for america.gov/A
	Received 355 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 355 octets ;; HEADER SECTION ;; id = 24628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	america.gov A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== )`
	RRSIG=14910 and DNSKEY=14910 verifies the A RRset

america.gov

	Query to a9-64.akam.net for america.gov/A
	Received 355 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 355 octets ;; HEADER SECTION ;; id = 40949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for america.gov
	Found RRSIG signed by america.gov zone
	Query to a9-64.akam.net for america.gov/A
	Received 355 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 355 octets ;; HEADER SECTION ;; id = 58743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	america.gov A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== )`
	RRSIG=14910 and DNSKEY=14910 verifies the A RRset

america.gov

	Query to a3-66.akam.net for america.gov/A
	Received 355 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 355 octets ;; HEADER SECTION ;; id = 34091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-66.akam.net is authoritative for america.gov
	Found RRSIG signed by america.gov zone
	Query to a3-66.akam.net for america.gov/A
	Received 355 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 355 octets ;; HEADER SECTION ;; id = 19751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	america.gov A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== )`
	RRSIG=14910 and DNSKEY=14910 verifies the A RRset

america.gov

	Query to a26-65.akam.net for america.gov/A
	Received 355 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 355 octets ;; HEADER SECTION ;; id = 57445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-65.akam.net is authoritative for america.gov
	Found RRSIG signed by america.gov zone
	Query to a26-65.akam.net for america.gov/A
	Received 355 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 355 octets ;; HEADER SECTION ;; id = 12100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	america.gov A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== )`
	RRSIG=14910 and DNSKEY=14910 verifies the A RRset

america.gov

	Query to a14-64.akam.net for america.gov/A
	Received 355 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 355 octets ;; HEADER SECTION ;; id = 46508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for america.gov
	Found RRSIG signed by america.gov zone
	Query to a14-64.akam.net for america.gov/A
	Received 355 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 355 octets ;; HEADER SECTION ;; id = 36299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	america.gov A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== )`
	RRSIG=14910 and DNSKEY=14910 verifies the A RRset

america.gov

	Query to a8-67.akam.net for america.gov/A
	Received 355 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 355 octets ;; HEADER SECTION ;; id = 19196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for america.gov
	Found RRSIG signed by america.gov zone
	Query to a8-67.akam.net for america.gov/A
	Received 355 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 355 octets ;; HEADER SECTION ;; id = 63483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; america.gov. IN A ;; ANSWER SECTION (2 records) america.gov. 900 IN A 34.236.181.236 america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	america.gov A RR has value 34.236.181.236
	Found 1 RRSIGs over A RRset
	`america.gov. 900 IN RRSIG ( A 8 2 900 20250831125127 20240831115221 14910 america.gov. fA539OhOWP7tFRrXVjrTRgVxrGsUS2vAvR1Wm8cLfhmj0y1CWjPfKCMbG9PnRnfaH7HyFfX2MkvC ph4Af74pRrdlISGmovR7cHeIulmcwDdYDi9uAxSp7EXmS75q9HJNiFO7qZmQqNmjdQsuA+G5eAsH RD0UKqoT/jUjXgzj6zm8YO0IqjVSP9tu/jKbvo6AZwKQfWT4s6C5+CDha1bTthwN41l15RHSiyzg RxLA0Lphn1RauLyGRoWv/+LKVJMLC38OQrkbHaLWQkdVNViO2zHP1BV6g6I4/SNIc1FpciPqPoQ6 yMuL7/q9Vu44QuT+6iCIcc5/rCFZImnROPCPTA== )`
	RRSIG=14910 and DNSKEY=14910 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test america.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: