DNSSEC Analyzer - arpah.gov

Domain Name:

Time: 2023-06-08 15:48:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for arpah.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 45114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to i.root-servers.net for arpah.gov/A
	Received 628 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (628 octets) ;; HEADER SECTION ;; id = 57351 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.root-servers.net for gov/DNSKEY
	Received 622 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (622 octets) ;; HEADER SECTION ;; id = 10872 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (367 octets) ;; HEADER SECTION ;; id = 64371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 16079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaen33ykQc2mftedkqBYoKG6Ni0XhefpgJAxBb5+4fQfuWfxtgIVTx4vg6i22adMe59Dgi8a QlIkAvv9Ln0ERfwibemV82ry8dIpLzz8E2dXMjG4eMZOxaykZf3sIC7Ttdg/M2k8xMvnnmJb0/uk FOZXq4DDEdkT4KglkPYGJQSPRME5bdbyarcoFWBculS6gm4S8VVuT0w6PzbaenCtk/c= ) ; Key ID = 50011 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230618190254 20230603185754 7698 gov. E1QAIr+IhgDaO93Z1q1Q6GDHkTc2/VdRb/B3SYdjNHxPSJ2to9uTJSp+r61OjtWJvtoJbV0MeBy8 rndtCsaGdQ1SNaSgabjSyJY+ZaebnIfwmsEA4bMjE+iQSVPiGvdkwO0MYCRPhr2JA9qmTfNVw17/ 89cg0k7aEQkdStbUaCyCIBmHo1ZtwSWnKfgvqS8pun6sfC1PSeP0QMTdNY9DkdSwTKs3RX4IIYDw YJbe6XPbA70WIfh0EsGd+Cdc/xNZvNouNS6hOz1nAGTA2c+HZLoPtXgRQc6wMfdWqS+NcAOX6FEP zkk7cPowDiXc1FEWh5cDtw9kmenGwx7KOJ77GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaen33ykQc2mftedkqBYoKG6Ni0XhefpgJAxBb5+4fQfuWfxtgIVTx4vg6i22adMe59Dgi8a QlIkAvv9Ln0ERfwibemV82ry8dIpLzz8E2dXMjG4eMZOxaykZf3sIC7Ttdg/M2k8xMvnnmJb0/uk FOZXq4DDEdkT4KglkPYGJQSPRME5bdbyarcoFWBculS6gm4S8VVuT0w6PzbaenCtk/c= ) ; Key ID = 50011`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230618190254 20230603185754 7698 gov. E1QAIr+IhgDaO93Z1q1Q6GDHkTc2/VdRb/B3SYdjNHxPSJ2to9uTJSp+r61OjtWJvtoJbV0MeBy8 rndtCsaGdQ1SNaSgabjSyJY+ZaebnIfwmsEA4bMjE+iQSVPiGvdkwO0MYCRPhr2JA9qmTfNVw17/ 89cg0k7aEQkdStbUaCyCIBmHo1ZtwSWnKfgvqS8pun6sfC1PSeP0QMTdNY9DkdSwTKs3RX4IIYDw YJbe6XPbA70WIfh0EsGd+Cdc/xNZvNouNS6hOz1nAGTA2c+HZLoPtXgRQc6wMfdWqS+NcAOX6FEP zkk7cPowDiXc1FEWh5cDtw9kmenGwx7KOJ77GA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=50011 is now in the chain-of-trust
	Query to b.gov-servers.net for arpah.gov/A
	Received 422 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (422 octets) ;; HEADER SECTION ;; id = 35213 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) arpah.gov. 86400 IN NS ns3.nih.gov. arpah.gov. 86400 IN NS ns.nih.gov. arpah.gov. 86400 IN NS ns2.nih.gov. arpah.gov. 3600 IN DS 8389 8 1 b25567661366921cbeff85b877d235c6640c6884 arpah.gov. 3600 IN DS ( 8389 8 2 578245149f90a97ff9b5475c82e9b5c97039e31ee304d23a6768f5b484557e2a ) arpah.gov. 3600 IN RRSIG ( DS 8 2 3600 20230613014047 20230606014047 50011 gov. OnR7FXMKYNf9Ld1SU9g9jQaHyuCoSC92ygajkRz7k1/gTHSKj03JY0Bmr43Nxa3R4A3JbzGaZRsG 8lbmZh5FtPKwyosJQ/cDPu+43khx1wncMisKHDt8PpPtyWQS5Xzu6ULIiWr7GGgk8npImeOoicOi djhQVQ0r0tfgNKjXlu7wMJxxN3IVDOOlOM8sU1zXwumkSeWdpATm+JqvSpbEdA== ) ;; ADDITIONAL SECTION (4 records) ns.nih.gov. 86400 IN A 128.231.128.251 ns2.nih.gov. 86400 IN A 128.231.64.1 ns3.nih.gov. 86400 IN A 165.112.4.230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for arpah.gov/DNSKEY
	Received 422 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (422 octets) ;; HEADER SECTION ;; id = 35351 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) arpah.gov. 86400 IN NS ns2.nih.gov. arpah.gov. 86400 IN NS ns3.nih.gov. arpah.gov. 86400 IN NS ns.nih.gov. arpah.gov. 3600 IN DS 8389 8 1 b25567661366921cbeff85b877d235c6640c6884 arpah.gov. 3600 IN DS ( 8389 8 2 578245149f90a97ff9b5475c82e9b5c97039e31ee304d23a6768f5b484557e2a ) arpah.gov. 3600 IN RRSIG ( DS 8 2 3600 20230613014047 20230606014047 50011 gov. OnR7FXMKYNf9Ld1SU9g9jQaHyuCoSC92ygajkRz7k1/gTHSKj03JY0Bmr43Nxa3R4A3JbzGaZRsG 8lbmZh5FtPKwyosJQ/cDPu+43khx1wncMisKHDt8PpPtyWQS5Xzu6ULIiWr7GGgk8npImeOoicOi djhQVQ0r0tfgNKjXlu7wMJxxN3IVDOOlOM8sU1zXwumkSeWdpATm+JqvSpbEdA== ) ;; ADDITIONAL SECTION (4 records) ns.nih.gov. 86400 IN A 128.231.128.251 ns2.nih.gov. 86400 IN A 128.231.64.1 ns3.nih.gov. 86400 IN A 165.112.4.230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone arpah.gov

arpah.gov

	Checking DS between gov and arpah.gov
	Query to c.gov-servers.net for arpah.gov/DS
	Received 317 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (317 octets) ;; HEADER SECTION ;; id = 34415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN DS ;; ANSWER SECTION (3 records) arpah.gov. 3600 IN DS 8389 8 1 b25567661366921cbeff85b877d235c6640c6884 arpah.gov. 3600 IN DS ( 8389 8 2 578245149f90a97ff9b5475c82e9b5c97039e31ee304d23a6768f5b484557e2a ) arpah.gov. 3600 IN RRSIG ( DS 8 2 3600 20230613014047 20230606014047 50011 gov. OnR7FXMKYNf9Ld1SU9g9jQaHyuCoSC92ygajkRz7k1/gTHSKj03JY0Bmr43Nxa3R4A3JbzGaZRsG 8lbmZh5FtPKwyosJQ/cDPu+43khx1wncMisKHDt8PpPtyWQS5Xzu6ULIiWr7GGgk8npImeOoicOi djhQVQ0r0tfgNKjXlu7wMJxxN3IVDOOlOM8sU1zXwumkSeWdpATm+JqvSpbEdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for arpah.gov in the gov zone
	DS=8389/SHA-1 has algorithm RSASHA256
	DS=8389/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`arpah.gov. 3600 IN RRSIG ( DS 8 2 3600 20230613014047 20230606014047 50011 gov. OnR7FXMKYNf9Ld1SU9g9jQaHyuCoSC92ygajkRz7k1/gTHSKj03JY0Bmr43Nxa3R4A3JbzGaZRsG 8lbmZh5FtPKwyosJQ/cDPu+43khx1wncMisKHDt8PpPtyWQS5Xzu6ULIiWr7GGgk8npImeOoicOi djhQVQ0r0tfgNKjXlu7wMJxxN3IVDOOlOM8sU1zXwumkSeWdpATm+JqvSpbEdA== )`
	RRSIG=50011 and DNSKEY=50011 verifies the DS RRset
	DS=8389/SHA-1 is now in the chain-of-trust
	`arpah.gov. 3600 IN DS 8389 8 1 b25567661366921cbeff85b877d235c6640c6884`
	`arpah.gov. 3600 IN DS ( 8389 8 2 578245149f90a97ff9b5475c82e9b5c97039e31ee304d23a6768f5b484557e2a )`
	Query to ns2.nih.gov for arpah.gov/DNSKEY
	Received 1224 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (1224 octets) ;; HEADER SECTION ;; id = 17141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN DNSKEY ;; ANSWER SECTION (6 records) arpah.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbpxNhW00jvRkYCbfbz67SUPGLEzqVhmJirXjCgISul8PwuraBVrGs+YwmynLL1uLp8mrhga 0C7pxXD0JVqCjc7ttXXxBSiYyaows8fTIhR1ZQjZyAGIaxSl7pg4qZmNi3EkZuHeJLFh31wS+Wpe Yp8IHQn9bJLJn4YYD5vfYv7cpj3BgVaUffdC45x/yAnwu4voXSrwBANWoQ2k4bmTtoN6NX7f/sZ6 dmVeUIh031NH0PBkCGJwdEj6OQfcXpFT8tFqBhcA25qvwQdF0i4MM3BFWE2s6vdKkvcBH3s582G4 lMDSIkBboR/7/NmWOpQ1h8gHCY/DshUC/IcoDdc3CCM= ) ; Key ID = 8389 arpah.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbXD54ieySn7pcLgJHaHuCKljOeqBFVrZZo4Kndsq10rYGxCju2XFkRRGZvgERSNi5I0lOh3 gSumASFd89KlY0UzIfvaunZHMMD6brEl1RIIqmngXc/Q2WAoD/F+n8FhExVtEIL8AF0JNo18Jcwm 2O2AeeW+GWDF+faTGMx2k/Bh ) ; Key ID = 47115 arpah.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAb7piKovBn9zgy2pFEOAI/SN8LUi953cC+i+XhfsLrTIHjXHQlbXuT1TLkw0Pqb8C6CvzfWn V8t/7gDpx2WNYCNoOhSfWf9BRqoWXp5ElZBPEVuaiPYgfKu20nrg8vkX73pP47TRH6t+lAHEGhbw T/TaI49NpWOFiMP9dJOqpuIr ) ; Key ID = 8796 arpah.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAeMmW+nWhxMSRAMZ3VwAYR7kdyWcAG8x7l+LnPzTzfqIhTb+fhYbcPfWtEq5TgY8o01ylSKb B7V4rVu/HkEwGsyS3zZTmEe+BgO/v/JRiP+tVvemFfPOZSu9U/P4EJ8cdEyubHmOzT+DR82TzpCQ bb2lUnsJR8ByieOhpEM9ZJ4l ) ; Key ID = 3255 arpah.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230612005204 20230608001715 8389 arpah.gov. F2Bfa8srLoXmBxzcr19IAJvM+kF1j+XrW99+6DF7h5mt6XvqiJRY4YFC8V5sl3xN6YMn1ojA3YfM r9yHpQ9WsYv4Zh59YMhuYiqvlRBIFF78rwF7rMZnF9xedpIGScUDm5osriD5owV2IIPQ7RD3CPhL fZ1f9GTECnjnkLgS/vs0ZhgVjMD0WQ/T7d2zp8ZKWz21BsLDrAR8o5CHBZnWkihJQ6x02fZE2A5S 4+wd96NPXunNj/+dqmauvg4nQc7DO6ixzmuwQ73sV9413/c6ufkH8XioSN05/qcNiMhbljPONT1J aOBx9vXEgNdjvLPNBpZQ0tEnnfHTbLU6jqcBgg== ) arpah.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230612005204 20230608001715 8796 arpah.gov. AcgFoCCJHu6intAP8sMe4UxVmeYT5frADNxCCcPwc7mJt2LgBJb1MEi5+9SRGnXMoeVkQ2psq6vj D8sl3YXut0xaS1pP65MP5SFKe/RKrGi5s7sidzqYpoH4hI67G2nLV77Nbn7V7E+fxic/JctF/K4i /GWvi3JvNOXofyLvy8I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 4 DNSKEY records for arpah.gov
	`arpah.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbpxNhW00jvRkYCbfbz67SUPGLEzqVhmJirXjCgISul8PwuraBVrGs+YwmynLL1uLp8mrhga 0C7pxXD0JVqCjc7ttXXxBSiYyaows8fTIhR1ZQjZyAGIaxSl7pg4qZmNi3EkZuHeJLFh31wS+Wpe Yp8IHQn9bJLJn4YYD5vfYv7cpj3BgVaUffdC45x/yAnwu4voXSrwBANWoQ2k4bmTtoN6NX7f/sZ6 dmVeUIh031NH0PBkCGJwdEj6OQfcXpFT8tFqBhcA25qvwQdF0i4MM3BFWE2s6vdKkvcBH3s582G4 lMDSIkBboR/7/NmWOpQ1h8gHCY/DshUC/IcoDdc3CCM= ) ; Key ID = 8389`
	`arpah.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbXD54ieySn7pcLgJHaHuCKljOeqBFVrZZo4Kndsq10rYGxCju2XFkRRGZvgERSNi5I0lOh3 gSumASFd89KlY0UzIfvaunZHMMD6brEl1RIIqmngXc/Q2WAoD/F+n8FhExVtEIL8AF0JNo18Jcwm 2O2AeeW+GWDF+faTGMx2k/Bh ) ; Key ID = 47115`
	`arpah.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAb7piKovBn9zgy2pFEOAI/SN8LUi953cC+i+XhfsLrTIHjXHQlbXuT1TLkw0Pqb8C6CvzfWn V8t/7gDpx2WNYCNoOhSfWf9BRqoWXp5ElZBPEVuaiPYgfKu20nrg8vkX73pP47TRH6t+lAHEGhbw T/TaI49NpWOFiMP9dJOqpuIr ) ; Key ID = 8796`
	`arpah.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAeMmW+nWhxMSRAMZ3VwAYR7kdyWcAG8x7l+LnPzTzfqIhTb+fhYbcPfWtEq5TgY8o01ylSKb B7V4rVu/HkEwGsyS3zZTmEe+BgO/v/JRiP+tVvemFfPOZSu9U/P4EJ8cdEyubHmOzT+DR82TzpCQ bb2lUnsJR8ByieOhpEM9ZJ4l ) ; Key ID = 3255`
	DNSKEY=8389/SEP is now in the chain-of-trust
	DS=8389/SHA-1 verifies DNSKEY=8389/SEP
	DS=8389/SHA-256 verifies DNSKEY=8389/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`arpah.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230612005204 20230608001715 8389 arpah.gov. F2Bfa8srLoXmBxzcr19IAJvM+kF1j+XrW99+6DF7h5mt6XvqiJRY4YFC8V5sl3xN6YMn1ojA3YfM r9yHpQ9WsYv4Zh59YMhuYiqvlRBIFF78rwF7rMZnF9xedpIGScUDm5osriD5owV2IIPQ7RD3CPhL fZ1f9GTECnjnkLgS/vs0ZhgVjMD0WQ/T7d2zp8ZKWz21BsLDrAR8o5CHBZnWkihJQ6x02fZE2A5S 4+wd96NPXunNj/+dqmauvg4nQc7DO6ixzmuwQ73sV9413/c6ufkH8XioSN05/qcNiMhbljPONT1J aOBx9vXEgNdjvLPNBpZQ0tEnnfHTbLU6jqcBgg== )`
	`arpah.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230612005204 20230608001715 8796 arpah.gov. AcgFoCCJHu6intAP8sMe4UxVmeYT5frADNxCCcPwc7mJt2LgBJb1MEi5+9SRGnXMoeVkQ2psq6vj D8sl3YXut0xaS1pP65MP5SFKe/RKrGi5s7sidzqYpoH4hI67G2nLV77Nbn7V7E+fxic/JctF/K4i /GWvi3JvNOXofyLvy8I= )`
	RRSIG=8389 and DNSKEY=8389/SEP verifies the DNSKEY RRset
	RRSIG=8796 and DNSKEY=8796 verifies the DNSKEY RRset
	DNSKEY=47115 is now in the chain-of-trust
	DNSKEY=8796 is now in the chain-of-trust
	DNSKEY=3255 is now in the chain-of-trust
	Query to ns3.nih.gov for arpah.gov/A
	Received 223 bytes from 165.112.4.230
	;; Response received from 165.112.4.230 (223 octets) ;; HEADER SECTION ;; id = 28447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN A 156.40.212.210 arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns3.nih.gov is authoritative for arpah.gov
	Found RRSIG signed by arpah.gov zone
	Query to ns.nih.gov for arpah.gov/SOA
	Received 267 bytes from 128.231.128.251
	;; Response received from 128.231.128.251 (267 octets) ;; HEADER SECTION ;; id = 32151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN SOA ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN SOA ( nihblox5.nih.gov. hostmaster.nih.gov. 1327 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) arpah.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230612011715 20230608001715 8796 arpah.gov. b8EddACH/+DT2Pxxjq0rXSl3sfAXFKnC9WxCk+hxg0TqvOSk1mm7SE/GloCn1mDq/UmbjS92if9y 8/G/XV1KAJrwofcZDWEdFGhalqtN9lL/MUzFrfujEbRrFUEpi3Zzu2M6y2tBeZmeD87CfaCYRKwF UZjUIi4c6KTAxQoseiQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns2.nih.gov for arpah.gov/SOA
	Received 267 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (267 octets) ;; HEADER SECTION ;; id = 30785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN SOA ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN SOA ( nihblox5.nih.gov. hostmaster.nih.gov. 1327 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) arpah.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230612011715 20230608001715 8796 arpah.gov. b8EddACH/+DT2Pxxjq0rXSl3sfAXFKnC9WxCk+hxg0TqvOSk1mm7SE/GloCn1mDq/UmbjS92if9y 8/G/XV1KAJrwofcZDWEdFGhalqtN9lL/MUzFrfujEbRrFUEpi3Zzu2M6y2tBeZmeD87CfaCYRKwF UZjUIi4c6KTAxQoseiQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns3.nih.gov for arpah.gov/A
	Received 223 bytes from 165.112.4.230
	;; Response received from 165.112.4.230 (223 octets) ;; HEADER SECTION ;; id = 21634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN A 156.40.212.210 arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	arpah.gov A RR has value 156.40.212.210
	Found 1 RRSIGs over A RRset
	`arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= )`
	RRSIG=8796 and DNSKEY=8796 verifies the A RRset

arpah.gov

	Query to ns2.nih.gov for arpah.gov/A
	Received 223 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (223 octets) ;; HEADER SECTION ;; id = 3027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN A 156.40.212.210 arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns2.nih.gov is authoritative for arpah.gov
	Found RRSIG signed by arpah.gov zone
	Query to ns2.nih.gov for arpah.gov/A
	Received 223 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (223 octets) ;; HEADER SECTION ;; id = 49337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN A 156.40.212.210 arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	arpah.gov A RR has value 156.40.212.210
	Found 1 RRSIGs over A RRset
	`arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= )`
	RRSIG=8796 and DNSKEY=8796 verifies the A RRset

arpah.gov

	Query to ns.nih.gov for arpah.gov/A
	Received 223 bytes from 128.231.128.251
	;; Response received from 128.231.128.251 (223 octets) ;; HEADER SECTION ;; id = 9938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN A 156.40.212.210 arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns.nih.gov is authoritative for arpah.gov
	Found RRSIG signed by arpah.gov zone
	Query to ns.nih.gov for arpah.gov/A
	Received 223 bytes from 128.231.128.251
	;; Response received from 128.231.128.251 (223 octets) ;; HEADER SECTION ;; id = 39941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; arpah.gov. IN A ;; ANSWER SECTION (2 records) arpah.gov. 28800 IN A 156.40.212.210 arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	arpah.gov A RR has value 156.40.212.210
	Found 1 RRSIGs over A RRset
	`arpah.gov. 28800 IN RRSIG ( A 8 2 28800 20230611233009 20230607232531 8796 arpah.gov. EZhl+yakm3MfE3teLHafRqi3g+/EgGoWY2Z6gps9dYke7MJJy2ie4AC6QJHprTZeiYncOBeRGgsZ lC9F6/ZwRSWWHE/iLVtYogXBxtL5e4lhyPGOn5JutyLb/EIN4E0W/N7cd3P+qX003qqSGsB0EDCU VJZll6XWM1UWxgNg26k= )`
	RRSIG=8796 and DNSKEY=8796 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test arpah.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: