DNSSEC Analyzer

Domain Name:

Time: 2022-07-03 15:12:28 UTC, NTP stratum 16

Analyzing DNSSEC problems for arm.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (1139 octets) ;; HEADER SECTION ;; id = 8887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220722000000 20220701000000 20326 . UJgbj1GrmV4k6PQ8B2ZiwmYzhxvnYApuDVr278iu3U+uqpDs4JHQJCcs2xC2YJaZ1q2rBr9buUhe Tp+MDElUEk64Y2Xi9cSpbkQLMKEV+wUtHSDQKqbl5DHvtGqjgRF9844KZHYjCZ8bUHW7m6IQmC3Z aepHTykLoU6ZulGhfhJ0zLjTkwHA8SoQhqU20GUOy3j/fJz0HsnKxo9ZAkY0OF9DPOee099XpYfg H9i0uBQDWQ0IBSLd+dYW321FHr+hvPSKmtKQ6Z1EQPgWCcQYmhrOWrpVRhg3yCSHAmHEQhF1gVRc BBVMaiV5snYlQEVVsePg0/LUZk8ezsGhwHbH6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220722000000 20220701000000 20326 . UJgbj1GrmV4k6PQ8B2ZiwmYzhxvnYApuDVr278iu3U+uqpDs4JHQJCcs2xC2YJaZ1q2rBr9buUhe Tp+MDElUEk64Y2Xi9cSpbkQLMKEV+wUtHSDQKqbl5DHvtGqjgRF9844KZHYjCZ8bUHW7m6IQmC3Z aepHTykLoU6ZulGhfhJ0zLjTkwHA8SoQhqU20GUOy3j/fJz0HsnKxo9ZAkY0OF9DPOee099XpYfg H9i0uBQDWQ0IBSLd+dYW321FHr+hvPSKmtKQ6Z1EQPgWCcQYmhrOWrpVRhg3yCSHAmHEQhF1gVRc BBVMaiV5snYlQEVVsePg0/LUZk8ezsGhwHbH6A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	DNSKEY=20826 is now in the chain-of-trust
	Query to a.root-servers.net for arm.gov/A
	Received 626 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (626 octets) ;; HEADER SECTION ;; id = 36449 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220716050000 20220703040000 20826 . dJRm3uGo3+Px+o6AI0dCsCC0uVXzVe0+d8+rg4LD1eDSFCS9Ay+W9F3VVW2qzQSYT7InEbB5JQso 2ezFVOdN1J+MpBOe7hvr4CxOiUFAlwCVicXsXfA9HTXA2W1beb8tBu8Dhkcnx4liKh8ikrmZWNKy 3TZ2lgZl5/COYP7T4jzWsvaqcZ5elkJPKAOqj551HGmDYVSXvXt3zS30SVrYO5NXq+GZoROYBqpD kUuRzrYCXdgRjbruDUKOG1+nkt0KRzMzCcjUAmoO70rlZHb6wE08QrcajUgxD93K6QFu67iZMxYR l9QtbolWxDRkb81PSIby0zLXk5N5CZiv8CMztw== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (622 octets) ;; HEADER SECTION ;; id = 48802 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220716050000 20220703040000 20826 . dJRm3uGo3+Px+o6AI0dCsCC0uVXzVe0+d8+rg4LD1eDSFCS9Ay+W9F3VVW2qzQSYT7InEbB5JQso 2ezFVOdN1J+MpBOe7hvr4CxOiUFAlwCVicXsXfA9HTXA2W1beb8tBu8Dhkcnx4liKh8ikrmZWNKy 3TZ2lgZl5/COYP7T4jzWsvaqcZ5elkJPKAOqj551HGmDYVSXvXt3zS30SVrYO5NXq+GZoROYBqpD kUuRzrYCXdgRjbruDUKOG1+nkt0KRzMzCcjUAmoO70rlZHb6wE08QrcajUgxD93K6QFu67iZMxYR l9QtbolWxDRkb81PSIby0zLXk5N5CZiv8CMztw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (367 octets) ;; HEADER SECTION ;; id = 11841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220716050000 20220703040000 20826 . dJRm3uGo3+Px+o6AI0dCsCC0uVXzVe0+d8+rg4LD1eDSFCS9Ay+W9F3VVW2qzQSYT7InEbB5JQso 2ezFVOdN1J+MpBOe7hvr4CxOiUFAlwCVicXsXfA9HTXA2W1beb8tBu8Dhkcnx4liKh8ikrmZWNKy 3TZ2lgZl5/COYP7T4jzWsvaqcZ5elkJPKAOqj551HGmDYVSXvXt3zS30SVrYO5NXq+GZoROYBqpD kUuRzrYCXdgRjbruDUKOG1+nkt0KRzMzCcjUAmoO70rlZHb6wE08QrcajUgxD93K6QFu67iZMxYR l9QtbolWxDRkb81PSIby0zLXk5N5CZiv8CMztw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220716050000 20220703040000 20826 . dJRm3uGo3+Px+o6AI0dCsCC0uVXzVe0+d8+rg4LD1eDSFCS9Ay+W9F3VVW2qzQSYT7InEbB5JQso 2ezFVOdN1J+MpBOe7hvr4CxOiUFAlwCVicXsXfA9HTXA2W1beb8tBu8Dhkcnx4liKh8ikrmZWNKy 3TZ2lgZl5/COYP7T4jzWsvaqcZ5elkJPKAOqj551HGmDYVSXvXt3zS30SVrYO5NXq+GZoROYBqpD kUuRzrYCXdgRjbruDUKOG1+nkt0KRzMzCcjUAmoO70rlZHb6wE08QrcajUgxD93K6QFu67iZMxYR l9QtbolWxDRkb81PSIby0zLXk5N5CZiv8CMztw== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (777 octets) ;; HEADER SECTION ;; id = 29677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcMiSRWS8eP1lhmsxCp/xRqF4ywBpC8OZ8SlW3boQwaSUol5jFtTpTTM8uKNyNrI/6Vc1crn QWCCPAv+mZGHzMgDkpD3JpW4UhVvI8AkNvoT/LTxCmhC6nZUOTv7Njg+yBVLm4bMw9EaH18N+HVl uhHX1ZOjhnY7uBf1DC32L4ibJvgjiREljTH622fsAXwf9hTE2UdQ/P3SDNrooKswmWE= ) ; Key ID = 2706 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220713190254 20220628185754 7698 gov. nhbxgOSm4t7mrDuun+QvTNrGLD8ZQ7Bi3N2Y5FDGVPUHTTtKGWw1diH+kMxepKn3D7cZsCQMosHr GovJdXdVERJCwhZxfAMa9UAdU/YIKyqH0fPTnpVcSv8JEsY7rj3pfoVxkEtO7IJpvtSU/FYvMtik 9O87O7VAeqmhxKgjurzmxTfQ3qthzDNEvPUzgyZNJi9LkX4tiAFVoaaHrcIeQtpdPcWAEGpBXBde yGVbcarWSTk92KzcjbHrGYpPkHA8vVlTnKjS9rZevmGv1lPMjCtpjlrxVvyRZTKV6Rw7JK0y8XrD /tezpUk6HQlLAd4BVYQ0Xc4iQ6Cpu8dJfYDPFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcMiSRWS8eP1lhmsxCp/xRqF4ywBpC8OZ8SlW3boQwaSUol5jFtTpTTM8uKNyNrI/6Vc1crn QWCCPAv+mZGHzMgDkpD3JpW4UhVvI8AkNvoT/LTxCmhC6nZUOTv7Njg+yBVLm4bMw9EaH18N+HVl uhHX1ZOjhnY7uBf1DC32L4ibJvgjiREljTH622fsAXwf9hTE2UdQ/P3SDNrooKswmWE= ) ; Key ID = 2706`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220713190254 20220628185754 7698 gov. nhbxgOSm4t7mrDuun+QvTNrGLD8ZQ7Bi3N2Y5FDGVPUHTTtKGWw1diH+kMxepKn3D7cZsCQMosHr GovJdXdVERJCwhZxfAMa9UAdU/YIKyqH0fPTnpVcSv8JEsY7rj3pfoVxkEtO7IJpvtSU/FYvMtik 9O87O7VAeqmhxKgjurzmxTfQ3qthzDNEvPUzgyZNJi9LkX4tiAFVoaaHrcIeQtpdPcWAEGpBXBde yGVbcarWSTk92KzcjbHrGYpPkHA8vVlTnKjS9rZevmGv1lPMjCtpjlrxVvyRZTKV6Rw7JK0y8XrD /tezpUk6HQlLAd4BVYQ0Xc4iQ6Cpu8dJfYDPFA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=2706 is now in the chain-of-trust
	Query to b.gov-servers.net for arm.gov/A
	Received 561 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (561 octets) ;; HEADER SECTION ;; id = 9881 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac arm.gov. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b ) arm.gov. 3600 IN RRSIG ( DS 8 2 3600 20220710094021 20220703094021 2706 gov. LqkjMSBFZXmgRbCt0RDVDaz5vdFQLj9M8Vpn3/MYAkper7G+OXLB3NJx85J1mGI+K0QK+klPWCKK pS8aEOU+vb4FxdoHpmPZQrIhVuq+9dgP6iJKAIMCQzz1bk+UzRlOyGK2zhN5P19cK2hNphOBjnYc eAZ9a2bggIbCbQFI7MLGxJdVLlF5v52tAewLqJ3bnLDLtP5WQrZYvlCJdDfYug== ) ;; ADDITIONAL SECTION (7 records) nsx.lbl.gov. 86400 IN A 131.243.64.3 t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 nsx.lbl.gov. 86400 IN AAAA 2620:83:8000:140::3 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for arm.gov/DNSKEY
	Received 561 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (561 octets) ;; HEADER SECTION ;; id = 16338 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS nsx.lbl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac arm.gov. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b ) arm.gov. 3600 IN RRSIG ( DS 8 2 3600 20220710094021 20220703094021 2706 gov. LqkjMSBFZXmgRbCt0RDVDaz5vdFQLj9M8Vpn3/MYAkper7G+OXLB3NJx85J1mGI+K0QK+klPWCKK pS8aEOU+vb4FxdoHpmPZQrIhVuq+9dgP6iJKAIMCQzz1bk+UzRlOyGK2zhN5P19cK2hNphOBjnYc eAZ9a2bggIbCbQFI7MLGxJdVLlF5v52tAewLqJ3bnLDLtP5WQrZYvlCJdDfYug== ) ;; ADDITIONAL SECTION (7 records) nsx.lbl.gov. 86400 IN A 131.243.64.3 t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 nsx.lbl.gov. 86400 IN AAAA 2620:83:8000:140::3 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone arm.gov

arm.gov

	Checking DS between gov and arm.gov
	Query to d.gov-servers.net for arm.gov/DS
	Received 315 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (315 octets) ;; HEADER SECTION ;; id = 41130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN DS ;; ANSWER SECTION (3 records) arm.gov. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac arm.gov. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b ) arm.gov. 3600 IN RRSIG ( DS 8 2 3600 20220710094021 20220703094021 2706 gov. LqkjMSBFZXmgRbCt0RDVDaz5vdFQLj9M8Vpn3/MYAkper7G+OXLB3NJx85J1mGI+K0QK+klPWCKK pS8aEOU+vb4FxdoHpmPZQrIhVuq+9dgP6iJKAIMCQzz1bk+UzRlOyGK2zhN5P19cK2hNphOBjnYc eAZ9a2bggIbCbQFI7MLGxJdVLlF5v52tAewLqJ3bnLDLtP5WQrZYvlCJdDfYug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for arm.gov in the gov zone
	DS=15769/SHA-1 has algorithm RSASHA256
	DS=15769/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`arm.gov. 3600 IN RRSIG ( DS 8 2 3600 20220710094021 20220703094021 2706 gov. LqkjMSBFZXmgRbCt0RDVDaz5vdFQLj9M8Vpn3/MYAkper7G+OXLB3NJx85J1mGI+K0QK+klPWCKK pS8aEOU+vb4FxdoHpmPZQrIhVuq+9dgP6iJKAIMCQzz1bk+UzRlOyGK2zhN5P19cK2hNphOBjnYc eAZ9a2bggIbCbQFI7MLGxJdVLlF5v52tAewLqJ3bnLDLtP5WQrZYvlCJdDfYug== )`
	RRSIG=2706 and DNSKEY=2706 verifies the DS RRset
	DS=15769/SHA-1 is now in the chain-of-trust
	`arm.gov. 3600 IN DS 15769 8 1 a89845774a1b6f1acaac5366f8249b73812a25ac`
	`arm.gov. 3600 IN DS ( 15769 8 2 9a90611078c35e58f8df40174e01ef77188e1bd103040ca484566c3bdbeb062b )`
	Query to t1dns1.anl.gov for arm.gov/DNSKEY
	Received 1178 bytes from 130.202.101.6
	;; Response received from 130.202.101.6 (1178 octets) ;; HEADER SECTION ;; id = 44768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN DNSKEY ;; ANSWER SECTION (4 records) arm.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAa1jCAewph7Fz9ZnAoCQSaRgCaA2/AYQvvNXsAzr8Lc7oFv1tYFhlxBVEzrKJ2IMK+99sTWE dnnelfQigJxKD9SbCraQpPtWgBKnZJHoK2lrdceLaSWbDOEimgvmzYqwx9T5Nj7HaD0r/GvZXwyU zUfThA62Ay0poG4NTLGZjvtrqjcbCww9kUnZp95agVohNttfkJpTsgX7UPX64O6MYsiy2XMrNTAF TPqXIIQb2F9WHPvLUNBi/L+iBOPCeE9XW3GMGetCu/oCSX0hDVQG/aHh+D+/hcHhrSatBZVGxgWf IGa6qHDyqJwWJAmU6hjBDsOh4W0gPI8LAD1i2Pyvtz0= ) ; Key ID = 15769 arm.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcKfn6dTBzOontHFOnoR4V+n0FC6XUhnzi+9+YycT8zJRZJIsZwvMmC60sF6zMz9iJPS8mfk 0mi9XgVa/P2lnRSnKYzwf6CkVNgBcXjEWlG0/hgom6jx9bkCF8Pr0+w14tZHDhf3kUrCazDFvVHa bDk3pJ+G3vQWeCdMnIcKkhrVzgeCmhKG3+4tWSa7YJOw8h6zt3zGSpETIHcAgy2NqfCmDQJxjdLV t+pzDyFjyYU0BPiZIirA1bn1KFoiZn/Voie7xeUxln6oYheCaUwedySnc/HKjM4siW6T5iDBW8sg S7Pww3Rhpaul2LZGOwlIxYgsAZEzvo1qm91EF+5AGhU= ) ; Key ID = 44343 arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220729231449 20220629230911 15769 arm.gov. QMqBXuuQ9bpIVEpogn6jjn8hjUSe8XabyxU5bH+fY6d9cjiY44aOvbqOIU/yo3k1QgMt33AazVQi T/Qn3zeRRPWvyU7jyqzFUr3+g9K3pqT279/GyROvuWQaswqjfJeLpzPL8jzjLfX+JgPxKkvWqbYa zVj/+KnKrIVuTefsoi26m/vdazk9njeaXEipHEROXNXA+vOEqotJPmQSD7Jumtic5yg3jsXeu8iz KVxUY1G2PR4JUfgS7uuQ6dXbMcBKT/5VZtlwqYgesKFAsi51YqqcL02XI4NcREmctIid9iveAlBe RtMopOzmFEazWoq5xOp1bpiF8gKMU+QnlPJzGg== ) arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220729231449 20220629230911 44343 arm.gov. Do3WZdor4FHKUvuUkQ0f1uSeTGwYQZ43ju55MZoE3cSwFChYEW2yUqOOZ+pg2e+zrmAqDPFsUqEr Op3WYiGCsw51iJgrfIf+YfKHW3FsBwuIle1dtrwPA2GJ0A+htr4pLcCZNtFKVPQHsgI5He4M6VOZ 7/RzgJDFEclshFPoKRAiElv9rVfq3XDcmHOkt0KzofzhCEDHtFVoW71CsphE6yQtmjkyzkUgVv+A VUW2qWRSbZwyXaGQP2AGmWYID1bcLcS+0uR5jY5ix8k1E5qm3qT3WPzwtbOcphuTTHP+6DlQ8Vv+ yJ1L/cXSdJMOoySeZyamiTl5YYz3XEN7LOC96w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 2 DNSKEY records for arm.gov
	`arm.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAa1jCAewph7Fz9ZnAoCQSaRgCaA2/AYQvvNXsAzr8Lc7oFv1tYFhlxBVEzrKJ2IMK+99sTWE dnnelfQigJxKD9SbCraQpPtWgBKnZJHoK2lrdceLaSWbDOEimgvmzYqwx9T5Nj7HaD0r/GvZXwyU zUfThA62Ay0poG4NTLGZjvtrqjcbCww9kUnZp95agVohNttfkJpTsgX7UPX64O6MYsiy2XMrNTAF TPqXIIQb2F9WHPvLUNBi/L+iBOPCeE9XW3GMGetCu/oCSX0hDVQG/aHh+D+/hcHhrSatBZVGxgWf IGa6qHDyqJwWJAmU6hjBDsOh4W0gPI8LAD1i2Pyvtz0= ) ; Key ID = 15769`
	`arm.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcKfn6dTBzOontHFOnoR4V+n0FC6XUhnzi+9+YycT8zJRZJIsZwvMmC60sF6zMz9iJPS8mfk 0mi9XgVa/P2lnRSnKYzwf6CkVNgBcXjEWlG0/hgom6jx9bkCF8Pr0+w14tZHDhf3kUrCazDFvVHa bDk3pJ+G3vQWeCdMnIcKkhrVzgeCmhKG3+4tWSa7YJOw8h6zt3zGSpETIHcAgy2NqfCmDQJxjdLV t+pzDyFjyYU0BPiZIirA1bn1KFoiZn/Voie7xeUxln6oYheCaUwedySnc/HKjM4siW6T5iDBW8sg S7Pww3Rhpaul2LZGOwlIxYgsAZEzvo1qm91EF+5AGhU= ) ; Key ID = 44343`
	DNSKEY=15769/SEP is now in the chain-of-trust
	DS=15769/SHA-1 verifies DNSKEY=15769/SEP
	DS=15769/SHA-256 verifies DNSKEY=15769/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220729231449 20220629230911 15769 arm.gov. QMqBXuuQ9bpIVEpogn6jjn8hjUSe8XabyxU5bH+fY6d9cjiY44aOvbqOIU/yo3k1QgMt33AazVQi T/Qn3zeRRPWvyU7jyqzFUr3+g9K3pqT279/GyROvuWQaswqjfJeLpzPL8jzjLfX+JgPxKkvWqbYa zVj/+KnKrIVuTefsoi26m/vdazk9njeaXEipHEROXNXA+vOEqotJPmQSD7Jumtic5yg3jsXeu8iz KVxUY1G2PR4JUfgS7uuQ6dXbMcBKT/5VZtlwqYgesKFAsi51YqqcL02XI4NcREmctIid9iveAlBe RtMopOzmFEazWoq5xOp1bpiF8gKMU+QnlPJzGg== )`
	`arm.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220729231449 20220629230911 44343 arm.gov. Do3WZdor4FHKUvuUkQ0f1uSeTGwYQZ43ju55MZoE3cSwFChYEW2yUqOOZ+pg2e+zrmAqDPFsUqEr Op3WYiGCsw51iJgrfIf+YfKHW3FsBwuIle1dtrwPA2GJ0A+htr4pLcCZNtFKVPQHsgI5He4M6VOZ 7/RzgJDFEclshFPoKRAiElv9rVfq3XDcmHOkt0KzofzhCEDHtFVoW71CsphE6yQtmjkyzkUgVv+A VUW2qWRSbZwyXaGQP2AGmWYID1bcLcS+0uR5jY5ix8k1E5qm3qT3WPzwtbOcphuTTHP+6DlQ8Vv+ yJ1L/cXSdJMOoySeZyamiTl5YYz3XEN7LOC96w== )`
	RRSIG=15769 and DNSKEY=15769/SEP verifies the DNSKEY RRset
	RRSIG=44343 and DNSKEY=44343 verifies the DNSKEY RRset
	DNSKEY=44343 is now in the chain-of-trust
	Query to t1dns1.anl.gov for arm.gov/A
	Received 1140 bytes from 130.202.101.6
	;; Response received from 130.202.101.6 (1140 octets) ;; HEADER SECTION ;; id = 1984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20220724175213 20220624175003 11793 anl.gov. XZFZrKmB9bD2o71M60+ibZ6p/NZfFDUqQKchgS/FMPA7Ssu1FhzBk6YZlM8TiGxrIBM1nGmQoq8q OJ0bd4czT7VBrSj1UlxEYw+A/XvfVvNmJPphvL/zJ0g7skmFLyVXukxU2E200DjKgfItoiQYptgU M8eHZKQXHXG8oXaIaWuVzZrSu5QLhldU9omk7a1xFjaEHKO+ygX+QUsx4ZH3iKTpwvik5hJVQ1j1 +jy80ttHgsdofX+t8Fj9O8PHBgKKMRfU/bBTTcVAdh+4TwO5v2SXHyr9Zf54j8rU2CvqJEJOYuRI /FitbxO6CtTUj9JtQPwlRic4b0wiCg629yG4xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	t1dns1.anl.gov is authoritative for arm.gov
	Found RRSIG signed by arm.gov zone
	Query to sdns.lbl.gov for arm.gov/SOA
	Received 796 bytes from 131.243.5.53
	;; Response received from 131.243.5.53 (796 octets) ;; HEADER SECTION ;; id = 10322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2022061946 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20220802123142 20220703113142 44343 arm.gov. Cwm46DZTjntxaXHS6M0bXEZ2StLgl8yTlyunZ+7vU2+QrEN8ch1evXSL4eOiTMqziNC+1y18GK4z radk3fmtpzxUPvt6pbTMRvWaSIoXi+IaZfXmVYiBESo/v18w4lCZUdWT3VShM04+jXqNmZ9fZBI4 y0dXenpwB+IQjY2s1DJs/qpvnGdpG2kcLGy2df371WouUM7SpqGA4PSpCdLTS3AXUNzqZjJ1Qedn uTaTxaXCd1E+aXLF4PnfVCv36fAECSsAW0eHnBofSzj94INSC1nGY2i1W3tm+YlPmYa3mZ+MecZT Bg/Cy2vyBLsKEYw6BG67/4nthmTqED9Suvt1Pg== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nsx.lbl.gov for arm.gov/SOA
	nsx.lbl.gov returns REFUSED for arm.gov/SOA
	Query to adns1.es.net for arm.gov/SOA
	Received 387 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (387 octets) ;; HEADER SECTION ;; id = 21154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2022061946 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20220802123142 20220703113142 44343 arm.gov. Cwm46DZTjntxaXHS6M0bXEZ2StLgl8yTlyunZ+7vU2+QrEN8ch1evXSL4eOiTMqziNC+1y18GK4z radk3fmtpzxUPvt6pbTMRvWaSIoXi+IaZfXmVYiBESo/v18w4lCZUdWT3VShM04+jXqNmZ9fZBI4 y0dXenpwB+IQjY2s1DJs/qpvnGdpG2kcLGy2df371WouUM7SpqGA4PSpCdLTS3AXUNzqZjJ1Qedn uTaTxaXCd1E+aXLF4PnfVCv36fAECSsAW0eHnBofSzj94INSC1nGY2i1W3tm+YlPmYa3mZ+MecZT Bg/Cy2vyBLsKEYw6BG67/4nthmTqED9Suvt1Pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to t1dns2.anl.gov for arm.gov/SOA
	Received 1173 bytes from 130.202.101.37
	;; Response received from 130.202.101.37 (1173 octets) ;; HEADER SECTION ;; id = 45006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2022061946 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20220802123142 20220703113142 44343 arm.gov. Cwm46DZTjntxaXHS6M0bXEZ2StLgl8yTlyunZ+7vU2+QrEN8ch1evXSL4eOiTMqziNC+1y18GK4z radk3fmtpzxUPvt6pbTMRvWaSIoXi+IaZfXmVYiBESo/v18w4lCZUdWT3VShM04+jXqNmZ9fZBI4 y0dXenpwB+IQjY2s1DJs/qpvnGdpG2kcLGy2df371WouUM7SpqGA4PSpCdLTS3AXUNzqZjJ1Qedn uTaTxaXCd1E+aXLF4PnfVCv36fAECSsAW0eHnBofSzj94INSC1nGY2i1W3tm+YlPmYa3mZ+MecZT Bg/Cy2vyBLsKEYw6BG67/4nthmTqED9Suvt1Pg== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20220724175213 20220624175003 11793 anl.gov. XZFZrKmB9bD2o71M60+ibZ6p/NZfFDUqQKchgS/FMPA7Ssu1FhzBk6YZlM8TiGxrIBM1nGmQoq8q OJ0bd4czT7VBrSj1UlxEYw+A/XvfVvNmJPphvL/zJ0g7skmFLyVXukxU2E200DjKgfItoiQYptgU M8eHZKQXHXG8oXaIaWuVzZrSu5QLhldU9omk7a1xFjaEHKO+ygX+QUsx4ZH3iKTpwvik5hJVQ1j1 +jy80ttHgsdofX+t8Fj9O8PHBgKKMRfU/bBTTcVAdh+4TwO5v2SXHyr9Zf54j8rU2CvqJEJOYuRI /FitbxO6CtTUj9JtQPwlRic4b0wiCg629yG4xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to adns2.es.net for arm.gov/SOA
	Received 796 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (796 octets) ;; HEADER SECTION ;; id = 31109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN SOA ;; ANSWER SECTION (2 records) arm.gov. 86400 IN SOA ( dns0.anl.gov. acrfdns.arm.gov. 2022061946 ;serial 3600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) arm.gov. 86400 IN RRSIG ( SOA 8 2 86400 20220802123142 20220703113142 44343 arm.gov. Cwm46DZTjntxaXHS6M0bXEZ2StLgl8yTlyunZ+7vU2+QrEN8ch1evXSL4eOiTMqziNC+1y18GK4z radk3fmtpzxUPvt6pbTMRvWaSIoXi+IaZfXmVYiBESo/v18w4lCZUdWT3VShM04+jXqNmZ9fZBI4 y0dXenpwB+IQjY2s1DJs/qpvnGdpG2kcLGy2df371WouUM7SpqGA4PSpCdLTS3AXUNzqZjJ1Qedn uTaTxaXCd1E+aXLF4PnfVCv36fAECSsAW0eHnBofSzj94INSC1nGY2i1W3tm+YlPmYa3mZ+MecZT Bg/Cy2vyBLsKEYw6BG67/4nthmTqED9Suvt1Pg== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to t1dns1.anl.gov for arm.gov/A
	Received 1140 bytes from 130.202.101.6
	;; Response received from 130.202.101.6 (1140 octets) ;; HEADER SECTION ;; id = 19693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20220724175213 20220624175003 11793 anl.gov. XZFZrKmB9bD2o71M60+ibZ6p/NZfFDUqQKchgS/FMPA7Ssu1FhzBk6YZlM8TiGxrIBM1nGmQoq8q OJ0bd4czT7VBrSj1UlxEYw+A/XvfVvNmJPphvL/zJ0g7skmFLyVXukxU2E200DjKgfItoiQYptgU M8eHZKQXHXG8oXaIaWuVzZrSu5QLhldU9omk7a1xFjaEHKO+ygX+QUsx4ZH3iKTpwvik5hJVQ1j1 +jy80ttHgsdofX+t8Fj9O8PHBgKKMRfU/bBTTcVAdh+4TwO5v2SXHyr9Zf54j8rU2CvqJEJOYuRI /FitbxO6CtTUj9JtQPwlRic4b0wiCg629yG4xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	arm.gov A RR has value 128.219.248.38
	Found 1 RRSIGs over A RRset
	`arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== )`
	RRSIG=44343 and DNSKEY=44343 verifies the A RRset

arm.gov

	Query to t1dns2.anl.gov for arm.gov/A
	Received 1140 bytes from 130.202.101.37
	;; Response received from 130.202.101.37 (1140 octets) ;; HEADER SECTION ;; id = 12565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20220724175213 20220624175003 11793 anl.gov. XZFZrKmB9bD2o71M60+ibZ6p/NZfFDUqQKchgS/FMPA7Ssu1FhzBk6YZlM8TiGxrIBM1nGmQoq8q OJ0bd4czT7VBrSj1UlxEYw+A/XvfVvNmJPphvL/zJ0g7skmFLyVXukxU2E200DjKgfItoiQYptgU M8eHZKQXHXG8oXaIaWuVzZrSu5QLhldU9omk7a1xFjaEHKO+ygX+QUsx4ZH3iKTpwvik5hJVQ1j1 +jy80ttHgsdofX+t8Fj9O8PHBgKKMRfU/bBTTcVAdh+4TwO5v2SXHyr9Zf54j8rU2CvqJEJOYuRI /FitbxO6CtTUj9JtQPwlRic4b0wiCg629yG4xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	t1dns2.anl.gov is authoritative for arm.gov
	Found RRSIG signed by arm.gov zone
	Query to t1dns2.anl.gov for arm.gov/A
	Received 1140 bytes from 130.202.101.37
	;; Response received from 130.202.101.37 (1140 octets) ;; HEADER SECTION ;; id = 63093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20220724175213 20220624175003 11793 anl.gov. XZFZrKmB9bD2o71M60+ibZ6p/NZfFDUqQKchgS/FMPA7Ssu1FhzBk6YZlM8TiGxrIBM1nGmQoq8q OJ0bd4czT7VBrSj1UlxEYw+A/XvfVvNmJPphvL/zJ0g7skmFLyVXukxU2E200DjKgfItoiQYptgU M8eHZKQXHXG8oXaIaWuVzZrSu5QLhldU9omk7a1xFjaEHKO+ygX+QUsx4ZH3iKTpwvik5hJVQ1j1 +jy80ttHgsdofX+t8Fj9O8PHBgKKMRfU/bBTTcVAdh+4TwO5v2SXHyr9Zf54j8rU2CvqJEJOYuRI /FitbxO6CtTUj9JtQPwlRic4b0wiCg629yG4xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	arm.gov A RR has value 128.219.248.38
	Found 1 RRSIGs over A RRset
	`arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== )`
	RRSIG=44343 and DNSKEY=44343 verifies the A RRset

arm.gov

	Query to adns2.es.net for arm.gov/A
	Received 763 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (763 octets) ;; HEADER SECTION ;; id = 56871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns2.es.net is authoritative for arm.gov
	Found RRSIG signed by arm.gov zone
	Query to adns2.es.net for arm.gov/A
	Received 763 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (763 octets) ;; HEADER SECTION ;; id = 50773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	arm.gov A RR has value 128.219.248.38
	Found 1 RRSIGs over A RRset
	`arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== )`
	RRSIG=44343 and DNSKEY=44343 verifies the A RRset

arm.gov

	Query to sdns.lbl.gov for arm.gov/A
	Received 763 bytes from 131.243.5.53
	;; Response received from 131.243.5.53 (763 octets) ;; HEADER SECTION ;; id = 56860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sdns.lbl.gov is authoritative for arm.gov
	Found RRSIG signed by arm.gov zone
	Query to sdns.lbl.gov for arm.gov/A
	Received 763 bytes from 131.243.5.53
	;; Response received from 131.243.5.53 (763 octets) ;; HEADER SECTION ;; id = 12054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (6 records) arm.gov. 86400 IN NS t1dns1.anl.gov. arm.gov. 86400 IN NS adns1.es.net. arm.gov. 86400 IN NS adns2.es.net. arm.gov. 86400 IN NS sdns.lbl.gov. arm.gov. 86400 IN NS t1dns2.anl.gov. arm.gov. 86400 IN RRSIG ( NS 8 2 86400 20220718195421 20220618194849 44343 arm.gov. IxXZU1p2DjuJZJOxrCoH8jYigDO5MsYsRKtUgdrqBd1Urm3gMDw0YelMfurFP7TNvitw3YTUzJzd sB/SO/hU8S1RzjOmSQtXtWc8ESIM7EOuo8Ke+cHVoVJLQDLQ6Od4KCXZe0wRsK5yYfKRkuOEBZAa ead76ELQ3rivuVaEgsk79gYyUzHprs7tHaRcEME4aPjIdOBjpMzNVjjhqu566TCnXT0X8xkYmsEQ Z9Vn7zhGLrHYdwW2YwIjpMHl1i8wGwxm1VZKJ1RjXkgjBJJWIfwO3ZfJenemSK4oZHoQMwytT3S+ q/EvjL6pa5kU8CxwIqsl94u40DkvDjSnc0mHTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	arm.gov A RR has value 128.219.248.38
	Found 1 RRSIGs over A RRset
	`arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== )`
	RRSIG=44343 and DNSKEY=44343 verifies the A RRset

arm.gov

	Query to adns1.es.net for arm.gov/A
	Received 347 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (347 octets) ;; HEADER SECTION ;; id = 62629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns1.es.net is authoritative for arm.gov
	Found RRSIG signed by arm.gov zone
	Query to adns1.es.net for arm.gov/A
	Received 347 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (347 octets) ;; HEADER SECTION ;; id = 63231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arm.gov. IN A ;; ANSWER SECTION (2 records) arm.gov. 86400 IN A 128.219.248.38 arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	arm.gov A RR has value 128.219.248.38
	Found 1 RRSIGs over A RRset
	`arm.gov. 86400 IN RRSIG ( A 8 2 86400 20220722045912 20220622041150 44343 arm.gov. HqsybrFCsW+nk85hp9ZsSaGtr53+7OTa4298IwCzKcT+XiSAfiI86AntF2Ahmo9muKLCBu4oENfb 1If4vTHQ8gTLxYm0V6LCcO+EgZFwL7QxE7SLAF5X4UuYYq9NKgZnGlVIMZdbdJ3MG2WGQRAtYQyw 6YGdRPDDCF+HaPhgDnzonUVm8ucT4+LR1+EnkseBNfVluHDmDzyyyVYWep+tvGoAMJtfmBojVTAJ mxT+HRrd2SoGSTqaE52UsI9u+IhFdDAuF/i9kEngQCbz59k5aj42hrHl+vj5LVUV/W2DQc9VrZdw f/0W5276k8bYfN/yA/vqOGQvpa0a43Wa7rq85w== )`
	RRSIG=44343 and DNSKEY=44343 verifies the A RRset

arm.gov

No response from arm.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test arm.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: