DNSSEC Debugger - arctic.gov

Domain Name:

Time: 2025-01-18 11:44:13 UTC

Analyzing DNSSEC problems for arctic.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 42990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for arctic.gov/A
	Received 617 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 617 octets ;; HEADER SECTION ;; id = 3312 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . Ju01scn/YLXaEQfBo5ABlvdrOW06BWjJWV/ZNJB0A0alSa0HyCxc+NMFP3uFDksCbWq8t04inrHH kxmfQDbzT/P9+ovZQ2KpDaJh3KuUOtHTMO5PCA/JYhQTrCTnVlYhaZbULQfamrOUfrKQ//3eIgXx ulHqnCQ2KOhuLNJu6+P/T47L/n/O8ue5QBVawFdCBsbERgSCKpYdVqCmC+XvC/zpOUmiw7gedYeU a6ofimrPKt7lC9Egc5taSFrjSuwASBWKW4vpRUnE8Ds1LWTzA3fsglluJThq/0kWtspnjRyDwa+F RUJdCDjnRZjzmJfm5FCr9WgTVhxwSJENOxgCgg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for gov/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 15615 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . Ju01scn/YLXaEQfBo5ABlvdrOW06BWjJWV/ZNJB0A0alSa0HyCxc+NMFP3uFDksCbWq8t04inrHH kxmfQDbzT/P9+ovZQ2KpDaJh3KuUOtHTMO5PCA/JYhQTrCTnVlYhaZbULQfamrOUfrKQ//3eIgXx ulHqnCQ2KOhuLNJu6+P/T47L/n/O8ue5QBVawFdCBsbERgSCKpYdVqCmC+XvC/zpOUmiw7gedYeU a6ofimrPKt7lC9Egc5taSFrjSuwASBWKW4vpRUnE8Ds1LWTzA3fsglluJThq/0kWtspnjRyDwa+F RUJdCDjnRZjzmJfm5FCr9WgTVhxwSJENOxgCgg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 11118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . Ju01scn/YLXaEQfBo5ABlvdrOW06BWjJWV/ZNJB0A0alSa0HyCxc+NMFP3uFDksCbWq8t04inrHH kxmfQDbzT/P9+ovZQ2KpDaJh3KuUOtHTMO5PCA/JYhQTrCTnVlYhaZbULQfamrOUfrKQ//3eIgXx ulHqnCQ2KOhuLNJu6+P/T47L/n/O8ue5QBVawFdCBsbERgSCKpYdVqCmC+XvC/zpOUmiw7gedYeU a6ofimrPKt7lC9Egc5taSFrjSuwASBWKW4vpRUnE8Ds1LWTzA3fsglluJThq/0kWtspnjRyDwa+F RUJdCDjnRZjzmJfm5FCr9WgTVhxwSJENOxgCgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . Ju01scn/YLXaEQfBo5ABlvdrOW06BWjJWV/ZNJB0A0alSa0HyCxc+NMFP3uFDksCbWq8t04inrHH kxmfQDbzT/P9+ovZQ2KpDaJh3KuUOtHTMO5PCA/JYhQTrCTnVlYhaZbULQfamrOUfrKQ//3eIgXx ulHqnCQ2KOhuLNJu6+P/T47L/n/O8ue5QBVawFdCBsbERgSCKpYdVqCmC+XvC/zpOUmiw7gedYeU a6ofimrPKt7lC9Egc5taSFrjSuwASBWKW4vpRUnE8Ds1LWTzA3fsglluJThq/0kWtspnjRyDwa+F RUJdCDjnRZjzmJfm5FCr9WgTVhxwSJENOxgCgg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 2690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250306110546 20250104110546 2536 gov. m7Wf/Mwg/wdPMgJRnycyP6u7la9wlYfnaiY5VCLXgFgpyvzlZawVkrwIk+1iYsNfXeo23H5+KJnR uAAajP2IHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250306110546 20250104110546 2536 gov. m7Wf/Mwg/wdPMgJRnycyP6u7la9wlYfnaiY5VCLXgFgpyvzlZawVkrwIk+1iYsNfXeo23H5+KJnR uAAajP2IHg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for arctic.gov/A
	Received 424 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 424 octets ;; HEADER SECTION ;; id = 62383 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) arctic.gov. 10800 IN NS ns1.nsf.gov. arctic.gov. 10800 IN NS ns2.nsf.gov. arctic.gov. 10800 IN NS ns3.nsf.gov. arctic.gov. 3600 IN DS ( 16744 5 2 0f3d8821e0b1decdc4b6f58501304ee138460ec038be82bd1715c009277ba430 ) arctic.gov. 3600 IN DS ( 31411 5 2 b8d53ba664cc3c6c34d265774168995c27d0c43ca993b4f5c65528a8217d64c1 ) arctic.gov. 3600 IN RRSIG ( DS 13 2 3600 20250119124413 20250117104413 35496 gov. gMApSmQAXgvEeIKMw3IECq5cq8B7Nd1/17oyrkNM6+vRGXaqqgknzOWlfZ8iZskBrU58xFZd/arT ubvdGuNRSw== ) ;; ADDITIONAL SECTION (7 records) ns1.nsf.gov. 3600 IN A 128.150.2.55 ns1.nsf.gov. 3600 IN AAAA 2620:10f:6001:2::55 ns2.nsf.gov. 3600 IN A 128.150.2.56 ns2.nsf.gov. 3600 IN AAAA 2620:10f:6001:2::56 ns3.nsf.gov. 3600 IN A 204.14.134.242 ns3.nsf.gov. 3600 IN AAAA 2607:f478:80:1::242 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for arctic.gov/DNSKEY
	Received 424 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 424 octets ;; HEADER SECTION ;; id = 16264 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) arctic.gov. 10800 IN NS ns1.nsf.gov. arctic.gov. 10800 IN NS ns2.nsf.gov. arctic.gov. 10800 IN NS ns3.nsf.gov. arctic.gov. 3600 IN DS ( 16744 5 2 0f3d8821e0b1decdc4b6f58501304ee138460ec038be82bd1715c009277ba430 ) arctic.gov. 3600 IN DS ( 31411 5 2 b8d53ba664cc3c6c34d265774168995c27d0c43ca993b4f5c65528a8217d64c1 ) arctic.gov. 3600 IN RRSIG ( DS 13 2 3600 20250119124413 20250117104413 35496 gov. n+btyfGXJuTvKkWDW6+igPrXUo4ufzLe6nmy8xEzQjEztLIdhybPKl5PbYs+IBg3ILXdyD/cdBTM jYxdAr77GQ== ) ;; ADDITIONAL SECTION (7 records) ns1.nsf.gov. 3600 IN A 128.150.2.55 ns1.nsf.gov. 3600 IN AAAA 2620:10f:6001:2::55 ns2.nsf.gov. 3600 IN A 128.150.2.56 ns2.nsf.gov. 3600 IN AAAA 2620:10f:6001:2::56 ns3.nsf.gov. 3600 IN A 204.14.134.242 ns3.nsf.gov. 3600 IN AAAA 2607:f478:80:1::242 ;; { "EDNS-VERSION": 0 }
	Found child zone arctic.gov

arctic.gov

	Checking DS between gov and arctic.gov
	Query to d.ns.gov for arctic.gov/DS
	Received 234 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 234 octets ;; HEADER SECTION ;; id = 32549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN DS ;; ANSWER SECTION (3 records) arctic.gov. 3600 IN DS ( 16744 5 2 0f3d8821e0b1decdc4b6f58501304ee138460ec038be82bd1715c009277ba430 ) arctic.gov. 3600 IN DS ( 31411 5 2 b8d53ba664cc3c6c34d265774168995c27d0c43ca993b4f5c65528a8217d64c1 ) arctic.gov. 3600 IN RRSIG ( DS 13 2 3600 20250119124413 20250117104413 35496 gov. dcQGa7Gh0SXRFVQ6Mq5yUvQHbEpjds8e86eZJgEvja5V7VaBHHGNAkdQYnPtS9gb1LFh+xqnNR3O pZAHmnrZyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for arctic.gov in the gov zone
	DS=16744/SHA-256 has algorithm RSASHA1
	DS=31411/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`arctic.gov. 3600 IN RRSIG ( DS 13 2 3600 20250119124413 20250117104413 35496 gov. dcQGa7Gh0SXRFVQ6Mq5yUvQHbEpjds8e86eZJgEvja5V7VaBHHGNAkdQYnPtS9gb1LFh+xqnNR3O pZAHmnrZyw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=16744/SHA-256 is now in the chain-of-trust
	DS=31411/SHA-256 is now in the chain-of-trust
	`arctic.gov. 3600 IN DS ( 16744 5 2 0f3d8821e0b1decdc4b6f58501304ee138460ec038be82bd1715c009277ba430 )`
	`arctic.gov. 3600 IN DS ( 31411 5 2 b8d53ba664cc3c6c34d265774168995c27d0c43ca993b4f5c65528a8217d64c1 )`
	Query to ns2.nsf.gov for arctic.gov/DNSKEY
	Received 1249 bytes from 128.150.2.56
	;; Response received from [128.150.2.56] 1249 octets ;; HEADER SECTION ;; id = 36411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN DNSKEY ;; ANSWER SECTION (6 records) arctic.gov. 172800 IN DNSKEY ( 256 3 5 AwEAAZ0NITfYCd5pVygwi0FQmnDmV+OabZNEpZN2SfGHutxdwTAfldT0rP6jrjOblsgsYcktl03J mFAml4PhdXcOtZEghF4cRKTz0fS/lv3UdPuFeMsv6lqYQCxplGrYoQSiqyQvIcxK5k9Ce3E2NqeY +Yiq56jZqxzSHPTlguETQJMh ) ; keytag 19032 arctic.gov. 172800 IN DNSKEY ( 256 3 5 AwEAAeyVf2zYrK3dknbD7GXaTnbGtw6pPSX2K/yWxWyPVP9bBG1aUWfEgMgvKTJw6ujwxwne72JM DggGAHxADKhCVfsj/RokVAlz0TGN0U9aBarxVUdDx7QLBJ2tWk7+BP1xpALff/7GGHxshzCjBCCm KLQ0c1sTiP+IdBgNqcDGpe8x ) ; keytag 37491 arctic.gov. 172800 IN DNSKEY ( 257 3 5 AwEAAbI3Pb8ZRFOPZMSI0cKG1n07ZKjY8B1i1qG+X5ekKKsfXEzGdv/pWp2ihIcN+iIgC/70x6w8 DHZYjHvmDqv7pNXivoRuDwGIihCbzNUeVXVofjRL3fl6iOGiO5Ov7ZAXB3ZeCaIk3JI3DPDMYnWp nnW5d4MZm9igT+nocqJ5Y32dN9f64NaGOLNbkpaU58bW2V8TRIDMjCH6BrNhKtchatfcVydVDgHr zDhKKTceoEiNGp4cB1c2zD+wBUEJ2/nO+jmjys8d07j0crnAQYFNGfVPwjeUkiOClvt50nVp14zf Q0LmD6QLv3Vk+8O2JBiserc/ba0Xg8tLe8R1quKAkzE= ) ; keytag 16744 arctic.gov. 172800 IN RRSIG ( DNSKEY 5 2 172800 20250122103117 20250118100943 16744 arctic.gov. TaeucEOQwHbbojgf5caJV6P3uZ8UBnwRkkh2z9qgafLWtaa3ywX6nsKCfCdPTnPn/+pyP6KCAkgf lGByVWl8/jMs0cfnAt2DGrWaK+UTwky4fWfiJQ4DcQX64C4xVgPnum0VgfNlDe9ZKmQfbVbs+tZ2 waSYKfodDdd/3DTF3uG2I9PKIN0UgDu/Kvikwg5yvyIin6iaHHG6Jb5/0QY1YHn37aGhzhkm7W2v YeNlYrpihWv+/J2BQygQE+SjV7mOWHkS0ggDPySlmAyIRE0AABGE9q3tbpLFWA0HTc9I69icgMoY v/JdTjnJfLW4OYlA2OeYVB/rlDIRqMK6TqjFwQ== ) arctic.gov. 172800 IN RRSIG ( DNSKEY 5 2 172800 20250122103117 20250118100943 19032 arctic.gov. cEOs+/BSzOcrm85lHrpn/rkS7tTJWe/gajDB+ux+lyFwyw2DFd4Pp3bW3WWVJe6uuT04RiKMN2ep gW15/bkyLBNcCZakldM+rv9Z2EldaUviHQOcN/qMzo5qxWqHuUg4BYv4Y24wL5mhRFSnmFMsEtOp 7705emzwAz8eHZ54ZTE= ) arctic.gov. 172800 IN RRSIG ( DNSKEY 5 2 172800 20250122103117 20250118100943 37491 arctic.gov. MSQv47oDVTeN3HNAoEjEPc3MPvoTlY2WlHUeJJCqDqDwXqbtHTOVsfEOgV/ZJ/VN2MtiYCeM6mwT Nz7Y7lUDkEm87QlvaTfjwxvoPGBc0WbmoUgV5hb3Ry8WrJ0vjGVqM4FKRx/JoAb4TQkZGoink7uN zNK+mwbLbJBcEBCQGZA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for arctic.gov
	`arctic.gov. 172800 IN DNSKEY ( 256 3 5 AwEAAZ0NITfYCd5pVygwi0FQmnDmV+OabZNEpZN2SfGHutxdwTAfldT0rP6jrjOblsgsYcktl03J mFAml4PhdXcOtZEghF4cRKTz0fS/lv3UdPuFeMsv6lqYQCxplGrYoQSiqyQvIcxK5k9Ce3E2NqeY +Yiq56jZqxzSHPTlguETQJMh ) ; keytag 19032`
	`arctic.gov. 172800 IN DNSKEY ( 256 3 5 AwEAAeyVf2zYrK3dknbD7GXaTnbGtw6pPSX2K/yWxWyPVP9bBG1aUWfEgMgvKTJw6ujwxwne72JM DggGAHxADKhCVfsj/RokVAlz0TGN0U9aBarxVUdDx7QLBJ2tWk7+BP1xpALff/7GGHxshzCjBCCm KLQ0c1sTiP+IdBgNqcDGpe8x ) ; keytag 37491`
	`arctic.gov. 172800 IN DNSKEY ( 257 3 5 AwEAAbI3Pb8ZRFOPZMSI0cKG1n07ZKjY8B1i1qG+X5ekKKsfXEzGdv/pWp2ihIcN+iIgC/70x6w8 DHZYjHvmDqv7pNXivoRuDwGIihCbzNUeVXVofjRL3fl6iOGiO5Ov7ZAXB3ZeCaIk3JI3DPDMYnWp nnW5d4MZm9igT+nocqJ5Y32dN9f64NaGOLNbkpaU58bW2V8TRIDMjCH6BrNhKtchatfcVydVDgHr zDhKKTceoEiNGp4cB1c2zD+wBUEJ2/nO+jmjys8d07j0crnAQYFNGfVPwjeUkiOClvt50nVp14zf Q0LmD6QLv3Vk+8O2JBiserc/ba0Xg8tLe8R1quKAkzE= ) ; keytag 16744`
	DNSKEY=16744/SEP is now in the chain-of-trust
	DS=16744/SHA-256 verifies DNSKEY=16744/SEP
	DS=31411/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`arctic.gov. 172800 IN RRSIG ( DNSKEY 5 2 172800 20250122103117 20250118100943 16744 arctic.gov. TaeucEOQwHbbojgf5caJV6P3uZ8UBnwRkkh2z9qgafLWtaa3ywX6nsKCfCdPTnPn/+pyP6KCAkgf lGByVWl8/jMs0cfnAt2DGrWaK+UTwky4fWfiJQ4DcQX64C4xVgPnum0VgfNlDe9ZKmQfbVbs+tZ2 waSYKfodDdd/3DTF3uG2I9PKIN0UgDu/Kvikwg5yvyIin6iaHHG6Jb5/0QY1YHn37aGhzhkm7W2v YeNlYrpihWv+/J2BQygQE+SjV7mOWHkS0ggDPySlmAyIRE0AABGE9q3tbpLFWA0HTc9I69icgMoY v/JdTjnJfLW4OYlA2OeYVB/rlDIRqMK6TqjFwQ== )`
	`arctic.gov. 172800 IN RRSIG ( DNSKEY 5 2 172800 20250122103117 20250118100943 19032 arctic.gov. cEOs+/BSzOcrm85lHrpn/rkS7tTJWe/gajDB+ux+lyFwyw2DFd4Pp3bW3WWVJe6uuT04RiKMN2ep gW15/bkyLBNcCZakldM+rv9Z2EldaUviHQOcN/qMzo5qxWqHuUg4BYv4Y24wL5mhRFSnmFMsEtOp 7705emzwAz8eHZ54ZTE= )`
	`arctic.gov. 172800 IN RRSIG ( DNSKEY 5 2 172800 20250122103117 20250118100943 37491 arctic.gov. MSQv47oDVTeN3HNAoEjEPc3MPvoTlY2WlHUeJJCqDqDwXqbtHTOVsfEOgV/ZJ/VN2MtiYCeM6mwT Nz7Y7lUDkEm87QlvaTfjwxvoPGBc0WbmoUgV5hb3Ry8WrJ0vjGVqM4FKRx/JoAb4TQkZGoink7uN zNK+mwbLbJBcEBCQGZA= )`
	RRSIG=16744 and DNSKEY=16744/SEP verifies the DNSKEY RRset
	RRSIG=19032 and DNSKEY=19032 verifies the DNSKEY RRset
	RRSIG=37491 and DNSKEY=37491 verifies the DNSKEY RRset
	DNSKEY=19032 is now in the chain-of-trust
	DNSKEY=37491 is now in the chain-of-trust
	Query to ns3.nsf.gov for arctic.gov/A
	Received 395 bytes from 204.14.134.242
	;; Response received from [204.14.134.242] 395 octets ;; HEADER SECTION ;; id = 2854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (3 records) arctic.gov. 300 IN A 34.120.165.5 arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= ) arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.nsf.gov is authoritative for arctic.gov
	Found RRSIG signed by arctic.gov zone
	Query to ns2.nsf.gov for arctic.gov/SOA
	Received 449 bytes from 128.150.2.56
	;; Response received from [128.150.2.56] 449 octets ;; HEADER SECTION ;; id = 28117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN SOA ;; ANSWER SECTION (3 records) arctic.gov. 300 IN SOA ( p-dns-i-gridmstr01.nsf.gov. postmaster.nsf.gov. 31721 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) arctic.gov. 300 IN RRSIG ( SOA 5 2 300 20250122112442 20250118102442 19032 arctic.gov. Ea2cXuB+DYtVruda9PFFZheZJFLgyP6St5vZYRg5qNYgc6oa1GhCnJCiU0a4rLgLxGv+/oHeWoEs 3Wl3FKY3nC5Zb5axA7C0D+u20XJbh6TQ+KR8K8JbaO47ewHb5NdXpSQlXkFKjLlSUr8Xn4zGvNiW 5S8gCLMIjzQAxRHvPws= ) arctic.gov. 300 IN RRSIG ( SOA 5 2 300 20250122112442 20250118102442 37491 arctic.gov. z9qFKfRPTZZR6D6lSd/403UnZl+6sefXSlJDp4KnPlxoFiE4JDwqfJ0BVozYJ7AUhviRlMw3rBxs Nf8CDegYB/LVkdlh+3BSWmqydcx+P1WyaY5p/3pc59Ymc3NLkL1x4mRtM16xK3QTWX6knmpu9QiS /YYHeZXQmfLrYU9IWUs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.nsf.gov for arctic.gov/SOA
	Received 449 bytes from 128.150.2.55
	;; Response received from [128.150.2.55] 449 octets ;; HEADER SECTION ;; id = 40765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN SOA ;; ANSWER SECTION (3 records) arctic.gov. 300 IN SOA ( p-dns-i-gridmstr01.nsf.gov. postmaster.nsf.gov. 31721 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) arctic.gov. 300 IN RRSIG ( SOA 5 2 300 20250122112442 20250118102442 19032 arctic.gov. Ea2cXuB+DYtVruda9PFFZheZJFLgyP6St5vZYRg5qNYgc6oa1GhCnJCiU0a4rLgLxGv+/oHeWoEs 3Wl3FKY3nC5Zb5axA7C0D+u20XJbh6TQ+KR8K8JbaO47ewHb5NdXpSQlXkFKjLlSUr8Xn4zGvNiW 5S8gCLMIjzQAxRHvPws= ) arctic.gov. 300 IN RRSIG ( SOA 5 2 300 20250122112442 20250118102442 37491 arctic.gov. z9qFKfRPTZZR6D6lSd/403UnZl+6sefXSlJDp4KnPlxoFiE4JDwqfJ0BVozYJ7AUhviRlMw3rBxs Nf8CDegYB/LVkdlh+3BSWmqydcx+P1WyaY5p/3pc59Ymc3NLkL1x4mRtM16xK3QTWX6knmpu9QiS /YYHeZXQmfLrYU9IWUs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.nsf.gov for arctic.gov/A
	Received 395 bytes from 204.14.134.242
	;; Response received from [204.14.134.242] 395 octets ;; HEADER SECTION ;; id = 14991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (3 records) arctic.gov. 300 IN A 34.120.165.5 arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= ) arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	arctic.gov A RR has value 34.120.165.5
	Found 2 RRSIGs over A RRset
	`arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= )`
	`arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= )`
	RRSIG=19032 and DNSKEY=19032 verifies the A RRset
	RRSIG=37491 and DNSKEY=37491 verifies the A RRset

arctic.gov

	Query to ns2.nsf.gov for arctic.gov/A
	Received 395 bytes from 128.150.2.56
	;; Response received from [128.150.2.56] 395 octets ;; HEADER SECTION ;; id = 62404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (3 records) arctic.gov. 300 IN A 34.120.165.5 arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= ) arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.nsf.gov is authoritative for arctic.gov
	Found RRSIG signed by arctic.gov zone
	Query to ns2.nsf.gov for arctic.gov/A
	Received 395 bytes from 128.150.2.56
	;; Response received from [128.150.2.56] 395 octets ;; HEADER SECTION ;; id = 48581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (3 records) arctic.gov. 300 IN A 34.120.165.5 arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= ) arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	arctic.gov A RR has value 34.120.165.5
	Found 2 RRSIGs over A RRset
	`arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= )`
	`arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= )`
	RRSIG=19032 and DNSKEY=19032 verifies the A RRset
	RRSIG=37491 and DNSKEY=37491 verifies the A RRset

arctic.gov

	Query to ns1.nsf.gov for arctic.gov/A
	Received 395 bytes from 128.150.2.55
	;; Response received from [128.150.2.55] 395 octets ;; HEADER SECTION ;; id = 151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (3 records) arctic.gov. 300 IN A 34.120.165.5 arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= ) arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.nsf.gov is authoritative for arctic.gov
	Found RRSIG signed by arctic.gov zone
	Query to ns1.nsf.gov for arctic.gov/A
	Received 395 bytes from 128.150.2.55
	;; Response received from [128.150.2.55] 395 octets ;; HEADER SECTION ;; id = 53 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arctic.gov. IN A ;; ANSWER SECTION (3 records) arctic.gov. 300 IN A 34.120.165.5 arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= ) arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	arctic.gov A RR has value 34.120.165.5
	Found 2 RRSIGs over A RRset
	`arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 19032 arctic.gov. RQjFYSPe65UT/g5Hc4ZNjjf0312G7N0uiwHdErsnhLMEuj46s3VAbkKtku9XrYAGSbcStbEAfQMg NClNeBqXMJYw1c4u6fQHKW45QifhIAyZKxyMcl46V7rZVIyNFIb16paeJewVnDB0vyeNA1aImcys x2pNe9GbrTfClMuSG7Y= )`
	`arctic.gov. 300 IN RRSIG ( A 5 2 300 20250122055636 20250118053848 37491 arctic.gov. GzLx/S8Q8twrcg6V84gYycvcXZKthXUVwcdt7+njrunLkg3fcIjm3rcHCP6SZM86gTPqKAqD5ObP jGKDIPTRxLVrcVuAiLk0O8rHVstRbThsH9mKa5WwvLcH3+vkTYq0XqSH5x7MneZ3qHjqP2WuDGB8 xcEtR7pWNHmSZomaaZk= )`
	RRSIG=19032 and DNSKEY=19032 verifies the A RRset
	RRSIG=37491 and DNSKEY=37491 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test arctic.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: