DNSSEC Analyzer - capital.gov

Domain Name:

Time: 2021-09-22 11:24:32 UTC, NTP stratum 16

Analyzing DNSSEC problems for capital.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1139 octets) ;; HEADER SECTION ;; id = 39294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	DNSKEY=26838 is now in the chain-of-trust
	Query to j.root-servers.net for capital.gov/A
	Received 630 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (630 octets) ;; HEADER SECTION ;; id = 63465 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (622 octets) ;; HEADER SECTION ;; id = 24615 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to h.root-servers.net for gov/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (367 octets) ;; HEADER SECTION ;; id = 9991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 44234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211001190254 20210916185754 7698 gov. MqQ7a3miv210c0eU01hhTvQxhNgn1alx1sm3ma1NOY0U1k6uY5IKrCYjLHvlUIsqbSijtXwhbDal Omy6osEEDGBXuQL0zIHeVZhDLXINyH/FWdp99ctgG2P3o+xpkt5oDBLjwnr2WnQIrYb4rI/Yoexl ghPQFBVbTvxDbDjL6UY8ZCdLGvOiqL15i1wg4tf0GJwoFgtgLrPSZ36AuT4K64f+LzsW8u0fcKt8 fC8Mjp+DCeFj/lWpJdE34pRl1YV+w5yhXWunXBZFhYsXeBc9Hqv//BV5HE7bj3Lo6Xq5lHjTm1OZ /tyQRvctosbKce3vDn3Yo+BNCmLjebLL7tg9YQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211001190254 20210916185754 7698 gov. MqQ7a3miv210c0eU01hhTvQxhNgn1alx1sm3ma1NOY0U1k6uY5IKrCYjLHvlUIsqbSijtXwhbDal Omy6osEEDGBXuQL0zIHeVZhDLXINyH/FWdp99ctgG2P3o+xpkt5oDBLjwnr2WnQIrYb4rI/Yoexl ghPQFBVbTvxDbDjL6UY8ZCdLGvOiqL15i1wg4tf0GJwoFgtgLrPSZ36AuT4K64f+LzsW8u0fcKt8 fC8Mjp+DCeFj/lWpJdE34pRl1YV+w5yhXWunXBZFhYsXeBc9Hqv//BV5HE7bj3Lo6Xq5lHjTm1OZ /tyQRvctosbKce3vDn3Yo+BNCmLjebLL7tg9YQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=57735 is now in the chain-of-trust
	Query to d.gov-servers.net for capital.gov/A
	Received 584 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (584 octets) ;; HEADER SECTION ;; id = 49446 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) capital.gov. 86400 IN NS authns1.centurylink.net. capital.gov. 86400 IN NS ns1.aoc.gov. capital.gov. 86400 IN NS auth111.ns.uu.net. capital.gov. 86400 IN NS authns2.centurylink.net. capital.gov. 86400 IN NS ns2.aoc.gov. capital.gov. 86400 IN NS auth120.ns.uu.net. capital.gov. 3600 IN DS 56122 8 1 06f3368d0f52e4612d284e818ded5196fe7f8d2d capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 ) capital.gov. 3600 IN DS ( 56122 8 2 358715e3e6c398ae21730fd473e32dc4fd47821977c3e100240e15e34f317dcd ) capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2 capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034125 20210922034125 57735 gov. GWt0hRFs1uI6fWYJKt97zzXXcOpCoS2OW4i8XMcFbYiYYI7m/Nbf28NFEX4QnM2orS8coHZP//Yb Iqrlnw8nfczj+nHf/HwWKMKCm9byuWc251AfUwzocpnCFZHhymOaP90RLHVWTT8tjRuVVWsrIweg CoxRy0vkV8D1Ilvt7vqGOYCK65sOjK8HCRbPtgm829YkrtO/47FoeQoXTT0jFQ== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 86400 IN A 161.197.102.14 ns2.aoc.gov. 86400 IN A 161.197.100.14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for capital.gov/DNSKEY
	Received 584 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (584 octets) ;; HEADER SECTION ;; id = 1340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) capital.gov. 86400 IN NS authns1.centurylink.net. capital.gov. 86400 IN NS ns1.aoc.gov. capital.gov. 86400 IN NS auth111.ns.uu.net. capital.gov. 86400 IN NS authns2.centurylink.net. capital.gov. 86400 IN NS ns2.aoc.gov. capital.gov. 86400 IN NS auth120.ns.uu.net. capital.gov. 3600 IN DS 56122 8 1 06f3368d0f52e4612d284e818ded5196fe7f8d2d capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 ) capital.gov. 3600 IN DS ( 56122 8 2 358715e3e6c398ae21730fd473e32dc4fd47821977c3e100240e15e34f317dcd ) capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2 capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034125 20210922034125 57735 gov. GWt0hRFs1uI6fWYJKt97zzXXcOpCoS2OW4i8XMcFbYiYYI7m/Nbf28NFEX4QnM2orS8coHZP//Yb Iqrlnw8nfczj+nHf/HwWKMKCm9byuWc251AfUwzocpnCFZHhymOaP90RLHVWTT8tjRuVVWsrIweg CoxRy0vkV8D1Ilvt7vqGOYCK65sOjK8HCRbPtgm829YkrtO/47FoeQoXTT0jFQ== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 86400 IN A 161.197.102.14 ns2.aoc.gov. 86400 IN A 161.197.100.14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone capital.gov

capital.gov

	Checking DS between gov and capital.gov
	Query to a.gov-servers.net for capital.gov/DS
	Received 403 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (403 octets) ;; HEADER SECTION ;; id = 14556 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN DS ;; ANSWER SECTION (5 records) capital.gov. 3600 IN DS 56122 8 1 06f3368d0f52e4612d284e818ded5196fe7f8d2d capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 ) capital.gov. 3600 IN DS ( 56122 8 2 358715e3e6c398ae21730fd473e32dc4fd47821977c3e100240e15e34f317dcd ) capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2 capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034125 20210922034125 57735 gov. GWt0hRFs1uI6fWYJKt97zzXXcOpCoS2OW4i8XMcFbYiYYI7m/Nbf28NFEX4QnM2orS8coHZP//Yb Iqrlnw8nfczj+nHf/HwWKMKCm9byuWc251AfUwzocpnCFZHhymOaP90RLHVWTT8tjRuVVWsrIweg CoxRy0vkV8D1Ilvt7vqGOYCK65sOjK8HCRbPtgm829YkrtO/47FoeQoXTT0jFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for capital.gov in the gov zone
	DS=56122/SHA-1 has algorithm RSASHA256
	DS=63964/SHA-256 has algorithm RSASHA256
	DS=56122/SHA-256 has algorithm RSASHA256
	DS=63964/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034125 20210922034125 57735 gov. GWt0hRFs1uI6fWYJKt97zzXXcOpCoS2OW4i8XMcFbYiYYI7m/Nbf28NFEX4QnM2orS8coHZP//Yb Iqrlnw8nfczj+nHf/HwWKMKCm9byuWc251AfUwzocpnCFZHhymOaP90RLHVWTT8tjRuVVWsrIweg CoxRy0vkV8D1Ilvt7vqGOYCK65sOjK8HCRbPtgm829YkrtO/47FoeQoXTT0jFQ== )`
	RRSIG=57735 and DNSKEY=57735 verifies the DS RRset
	DS=56122/SHA-1 is now in the chain-of-trust
	DS=63964/SHA-256 is now in the chain-of-trust
	`capital.gov. 3600 IN DS 56122 8 1 06f3368d0f52e4612d284e818ded5196fe7f8d2d`
	`capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 )`
	`capital.gov. 3600 IN DS ( 56122 8 2 358715e3e6c398ae21730fd473e32dc4fd47821977c3e100240e15e34f317dcd )`
	`capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2`
	Query to authns1.centurylink.net for capital.gov/DNSKEY
	Received 1657 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (1657 octets) ;; HEADER SECTION ;; id = 12274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN DNSKEY ;; ANSWER SECTION (7 records) capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAaC9Ec4xhvncowb04wYUBRZtEopVdF/9+hNfyMyAQYMgRxRZRyPQLMyaePHifjXT/UI/QJoI T6F+rsT7xNY8h2pt9jL4i9kn8L1Kw19IEzJrN42XNpfuCO5kXDm8a1gqcrCMEyPZktlI2DV0Sl34 OLejWIkqmgHKOHTECJdTUEx/ ) ; Key ID = 53445 capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAZqUXZe/uTt04Grf+DTz2eHZjn1lhYzmhLhOoLos0RpaZ5UJSs5OJIX8K3h8A33+cWDVpwNf 9wxXsuzqNEP44sHzzulVKGSp9LtzipYpXbr8nVEndm64hoxQ8J8JKML7qrB3Nppnz5LWDGDMaf78 ZBCjqTBGnK1MG49jaqBbBHd5 ) ; Key ID = 36420 capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAan9CmmW+07n7JNwdaB5aT2mWJqbfjaJ0IfKe43fu1XoOtTVYdwUC1jcZVLtGZp/n77PhQ4I DaODZwQekhkVeZJSjxVW8TV2T+GQGszNfsQooMkL3aFAPlx0k5i8Qv6/UAOQ8gZqOTEDnB1np/Hr zLMhd5TQqzdQHKGLatGj36+XtpGePIeetTPiV8Ltl+0WJkaY8p8o5VUGy4sz8AAMKRNL30RI0bDx Gydb94N6HFhACwcWlpKHaXrXmqW1NIq78RZ3PZgyDIaKYBEfsDfvCu2IKSb6qrF5zc20RAbAs91t s72IO4Als0ksYCJv4cRsdEJVBWk8OWCZ3jUaUSXFU5M= ) ; Key ID = 63964 capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAeYujphUB1dQoge1vESbtzwYDoO4De5sgXMch0VcjtAvT827/KRpkSvMVjcUHYhvE+Z5aziB hm1R3LeZJNnqopOhZG3ejXg4yKmmM0DraTBOh5LzBAm+ai798mWvuO15xDimLfyj50lyse4tPVHg hXDDD/P9t+451zXAd2lfOF2EXOIB44s8+1DyXyGX97kkhfFGNWBOLqVwJ7jDZLsxy76cYrIGoD5y kepXHF0ZeeCAYF0qaPap9isjXiDo0PpRL0Si10qwIEl7voHqOhFfGYeUbpK5OJWEp8I57xnz5X5v PAWGC+K4EwSi5UGW+eCVI0ZLoibPfQZmGHGBsjKZJTk= ) ; Key ID = 56122 capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210925191655 20210921183003 53445 capital.gov. bHQki5qSuJXf2hMKk+yC8KcBxkr518GqxWtAMMLO+LlaynZn9VuB95E0oNYlBmX4ICqg9kH0e23K 9TO3LYGNoCz2XaLKdlThSDs0Lo4HoAHib9sKJLrmakgxylSGeVfhrn0uqCYz3MM+UIczNNdiuERB 9b5EgiZawIXJMUJQgQc= ) capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210925191655 20210921183003 56122 capital.gov. qLq6w0Z4Y1wzwapEuz5HOde3stoF0GjPfRgA50eFWKT4AwPHn8/7zKHEws1hXYGT3Fz5/FF4JBc3 zL9uhF6WF79fzQ10sFxiLKueRDCDqQpUAqKu0/P5y3ayUNsfPQKf/LxyVRlYUmcSCPXzKnpsCx5e Q/2nPTA4AJGTOtAvrnFAS1e2O7GY8nGbBg1/xenc9mBaEGtG0LUDo8/wkfcImAlveq/xSy1EJXd5 edk67ZJ2H/PzrgBEWZw8eWI76BqatggcG4N4a5zzDKgktWQKNURMEnWjZp1b6Y2gOWzPRdEGE3X2 fEEWClp/FFtelXz+sPMNuQKbRt9hxfz3Fh4RxA== ) capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210925191655 20210921183003 63964 capital.gov. SPsbUcf0xQ1/2Gke0FExV+mm7IJXG2dnpXifkiM+V7d/TEX2aelkPPLa6HQrxinExVRiY2Pv5QwR GAaXkFyC8yu278CaTpIe2eX4Gg2s0UGWRRphO0FeNUDI4/yImBLFDlGk9osF5u3BALEK/sD2HLSc 4Ow1p+we0RkoW7GpWwtlTV3x8Wy8fbweJI4phpAd8rZ5At5+L3kdIHPHqqcUPnes6NH75CkXk/Ls fznV08cH7nqdIN4KalRwO2SwaFQcnK5X48k9G1UQuvQ12UGSSkwv7VNvG+ovOLuEITklFi2ovVlP ZPQuW7aLBUH8bmrcf7xhwN4ZAh7Vdl+VyJY4OQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for capital.gov
	`capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAaC9Ec4xhvncowb04wYUBRZtEopVdF/9+hNfyMyAQYMgRxRZRyPQLMyaePHifjXT/UI/QJoI T6F+rsT7xNY8h2pt9jL4i9kn8L1Kw19IEzJrN42XNpfuCO5kXDm8a1gqcrCMEyPZktlI2DV0Sl34 OLejWIkqmgHKOHTECJdTUEx/ ) ; Key ID = 53445`
	`capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAZqUXZe/uTt04Grf+DTz2eHZjn1lhYzmhLhOoLos0RpaZ5UJSs5OJIX8K3h8A33+cWDVpwNf 9wxXsuzqNEP44sHzzulVKGSp9LtzipYpXbr8nVEndm64hoxQ8J8JKML7qrB3Nppnz5LWDGDMaf78 ZBCjqTBGnK1MG49jaqBbBHd5 ) ; Key ID = 36420`
	`capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAan9CmmW+07n7JNwdaB5aT2mWJqbfjaJ0IfKe43fu1XoOtTVYdwUC1jcZVLtGZp/n77PhQ4I DaODZwQekhkVeZJSjxVW8TV2T+GQGszNfsQooMkL3aFAPlx0k5i8Qv6/UAOQ8gZqOTEDnB1np/Hr zLMhd5TQqzdQHKGLatGj36+XtpGePIeetTPiV8Ltl+0WJkaY8p8o5VUGy4sz8AAMKRNL30RI0bDx Gydb94N6HFhACwcWlpKHaXrXmqW1NIq78RZ3PZgyDIaKYBEfsDfvCu2IKSb6qrF5zc20RAbAs91t s72IO4Als0ksYCJv4cRsdEJVBWk8OWCZ3jUaUSXFU5M= ) ; Key ID = 63964`
	`capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAeYujphUB1dQoge1vESbtzwYDoO4De5sgXMch0VcjtAvT827/KRpkSvMVjcUHYhvE+Z5aziB hm1R3LeZJNnqopOhZG3ejXg4yKmmM0DraTBOh5LzBAm+ai798mWvuO15xDimLfyj50lyse4tPVHg hXDDD/P9t+451zXAd2lfOF2EXOIB44s8+1DyXyGX97kkhfFGNWBOLqVwJ7jDZLsxy76cYrIGoD5y kepXHF0ZeeCAYF0qaPap9isjXiDo0PpRL0Si10qwIEl7voHqOhFfGYeUbpK5OJWEp8I57xnz5X5v PAWGC+K4EwSi5UGW+eCVI0ZLoibPfQZmGHGBsjKZJTk= ) ; Key ID = 56122`
	DNSKEY=63964/SEP is now in the chain-of-trust
	DS=63964/SHA-256 verifies DNSKEY=63964/SEP
	DS=63964/SHA-1 verifies DNSKEY=63964/SEP
	DNSKEY=56122/SEP is now in the chain-of-trust
	DS=56122/SHA-1 verifies DNSKEY=56122/SEP
	DS=56122/SHA-256 verifies DNSKEY=56122/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210925191655 20210921183003 53445 capital.gov. bHQki5qSuJXf2hMKk+yC8KcBxkr518GqxWtAMMLO+LlaynZn9VuB95E0oNYlBmX4ICqg9kH0e23K 9TO3LYGNoCz2XaLKdlThSDs0Lo4HoAHib9sKJLrmakgxylSGeVfhrn0uqCYz3MM+UIczNNdiuERB 9b5EgiZawIXJMUJQgQc= )`
	`capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210925191655 20210921183003 56122 capital.gov. qLq6w0Z4Y1wzwapEuz5HOde3stoF0GjPfRgA50eFWKT4AwPHn8/7zKHEws1hXYGT3Fz5/FF4JBc3 zL9uhF6WF79fzQ10sFxiLKueRDCDqQpUAqKu0/P5y3ayUNsfPQKf/LxyVRlYUmcSCPXzKnpsCx5e Q/2nPTA4AJGTOtAvrnFAS1e2O7GY8nGbBg1/xenc9mBaEGtG0LUDo8/wkfcImAlveq/xSy1EJXd5 edk67ZJ2H/PzrgBEWZw8eWI76BqatggcG4N4a5zzDKgktWQKNURMEnWjZp1b6Y2gOWzPRdEGE3X2 fEEWClp/FFtelXz+sPMNuQKbRt9hxfz3Fh4RxA== )`
	`capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210925191655 20210921183003 63964 capital.gov. SPsbUcf0xQ1/2Gke0FExV+mm7IJXG2dnpXifkiM+V7d/TEX2aelkPPLa6HQrxinExVRiY2Pv5QwR GAaXkFyC8yu278CaTpIe2eX4Gg2s0UGWRRphO0FeNUDI4/yImBLFDlGk9osF5u3BALEK/sD2HLSc 4Ow1p+we0RkoW7GpWwtlTV3x8Wy8fbweJI4phpAd8rZ5At5+L3kdIHPHqqcUPnes6NH75CkXk/Ls fznV08cH7nqdIN4KalRwO2SwaFQcnK5X48k9G1UQuvQ12UGSSkwv7VNvG+ovOLuEITklFi2ovVlP ZPQuW7aLBUH8bmrcf7xhwN4ZAh7Vdl+VyJY4OQ== )`
	RRSIG=53445 and DNSKEY=53445 verifies the DNSKEY RRset
	RRSIG=56122 and DNSKEY=56122/SEP verifies the DNSKEY RRset
	RRSIG=63964 and DNSKEY=63964/SEP verifies the DNSKEY RRset
	DNSKEY=53445 is now in the chain-of-trust
	DNSKEY=36420 is now in the chain-of-trust
	Query to authns2.centurylink.net for capital.gov/A
	Received 1001 bytes from 208.44.130.120
	;; Response received from 208.44.130.120 (1001 octets) ;; HEADER SECTION ;; id = 50005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20210925114528 20210921113200 53445 capital.gov. jWmjw/E5rEwLzOChgwIyx1kcbYeKuGHToRFcLJerdKj1ShL1PDvFIaZ+U2gfuT4xdd+rPIA5ShL3 uzTa44oCnR4Hnv2A8It4ik36d0gunecaXENc6PtQBxqCWq2iC9kxcBlkzhpB4DI9OedBmw/P3rLU DshA3H9Fkljt76c2zpo= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210925124636 20210921115617 7233 aoc.gov. dJaJNpONjc2WmPEXADc2E6mCmNivFBTC3PFTRzeUtj1P2dBAdsQSjCzynZN8VRSiGAsRKrAD6t42 cgN7IT4I94bateZVcM/w6uuNCUW8n2ZlaIexxWcBn+pVz8s0daj8zwisCWBQ663qAPG75f83w77k DWFSpL4ZHV01/Twvxh0= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210926103443 20210922093639 7233 aoc.gov. MJTu7eh96flvNfeeBtRqbYU2aTYt2zXGtSrPaSz0S4aAW8je1rsdKixBLkb0LGQdA6GPDiSm1JZU BUmxnwkAELjCeU7tRD2U/2raMUNC1N28NK6tXYOi/9j54bnIWVm1+7UcXWU+qbNlxzFauJKq/kWL FYAMB5kZlRXtW8SMIo0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	authns2.centurylink.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to auth120.ns.uu.net for capital.gov/SOA
	Received 266 bytes from 198.6.1.154
	;; Response received from 198.6.1.154 (266 octets) ;; HEADER SECTION ;; id = 63118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 3066 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210925193003 20210921183003 53445 capital.gov. XI0T7WYV+elLNI1X+41K0BSKkLmtof2WokdMs1973owhe4K2cz6Xn18kVC+WfPA5UZHE3LKeph+9 4jrnvuwMJqitFI0VY9HdX9clDiE471I9M61H0s1QcUBn3D/UuR9V7p1gOCkLKtp2OT5ytTnPAnHc tXxRvAmhzLV19dq6NdE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.aoc.gov for capital.gov/SOA
	Received 266 bytes from 161.197.100.14
	;; Response received from 161.197.100.14 (266 octets) ;; HEADER SECTION ;; id = 33897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 3066 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210925193003 20210921183003 53445 capital.gov. XI0T7WYV+elLNI1X+41K0BSKkLmtof2WokdMs1973owhe4K2cz6Xn18kVC+WfPA5UZHE3LKeph+9 4jrnvuwMJqitFI0VY9HdX9clDiE471I9M61H0s1QcUBn3D/UuR9V7p1gOCkLKtp2OT5ytTnPAnHc tXxRvAmhzLV19dq6NdE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to authns1.centurylink.net for capital.gov/SOA
	Received 1032 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (1032 octets) ;; HEADER SECTION ;; id = 15122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 3066 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210925193003 20210921183003 53445 capital.gov. XI0T7WYV+elLNI1X+41K0BSKkLmtof2WokdMs1973owhe4K2cz6Xn18kVC+WfPA5UZHE3LKeph+9 4jrnvuwMJqitFI0VY9HdX9clDiE471I9M61H0s1QcUBn3D/UuR9V7p1gOCkLKtp2OT5ytTnPAnHc tXxRvAmhzLV19dq6NdE= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20210925114528 20210921113200 53445 capital.gov. jWmjw/E5rEwLzOChgwIyx1kcbYeKuGHToRFcLJerdKj1ShL1PDvFIaZ+U2gfuT4xdd+rPIA5ShL3 uzTa44oCnR4Hnv2A8It4ik36d0gunecaXENc6PtQBxqCWq2iC9kxcBlkzhpB4DI9OedBmw/P3rLU DshA3H9Fkljt76c2zpo= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210925124636 20210921115617 7233 aoc.gov. dJaJNpONjc2WmPEXADc2E6mCmNivFBTC3PFTRzeUtj1P2dBAdsQSjCzynZN8VRSiGAsRKrAD6t42 cgN7IT4I94bateZVcM/w6uuNCUW8n2ZlaIexxWcBn+pVz8s0daj8zwisCWBQ663qAPG75f83w77k DWFSpL4ZHV01/Twvxh0= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210926103443 20210922093639 7233 aoc.gov. MJTu7eh96flvNfeeBtRqbYU2aTYt2zXGtSrPaSz0S4aAW8je1rsdKixBLkb0LGQdA6GPDiSm1JZU BUmxnwkAELjCeU7tRD2U/2raMUNC1N28NK6tXYOi/9j54bnIWVm1+7UcXWU+qbNlxzFauJKq/kWL FYAMB5kZlRXtW8SMIo0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth111.ns.uu.net for capital.gov/SOA
	Received 266 bytes from 198.6.1.115
	;; Response received from 198.6.1.115 (266 octets) ;; HEADER SECTION ;; id = 40614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 3066 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210925193003 20210921183003 53445 capital.gov. XI0T7WYV+elLNI1X+41K0BSKkLmtof2WokdMs1973owhe4K2cz6Xn18kVC+WfPA5UZHE3LKeph+9 4jrnvuwMJqitFI0VY9HdX9clDiE471I9M61H0s1QcUBn3D/UuR9V7p1gOCkLKtp2OT5ytTnPAnHc tXxRvAmhzLV19dq6NdE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.aoc.gov for capital.gov/SOA
	Received 266 bytes from 161.197.102.14
	;; Response received from 161.197.102.14 (266 octets) ;; HEADER SECTION ;; id = 58656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 3066 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210925193003 20210921183003 53445 capital.gov. XI0T7WYV+elLNI1X+41K0BSKkLmtof2WokdMs1973owhe4K2cz6Xn18kVC+WfPA5UZHE3LKeph+9 4jrnvuwMJqitFI0VY9HdX9clDiE471I9M61H0s1QcUBn3D/UuR9V7p1gOCkLKtp2OT5ytTnPAnHc tXxRvAmhzLV19dq6NdE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to authns2.centurylink.net for capital.gov/A
	Received 1001 bytes from 208.44.130.120
	;; Response received from 208.44.130.120 (1001 octets) ;; HEADER SECTION ;; id = 21610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20210925114528 20210921113200 53445 capital.gov. jWmjw/E5rEwLzOChgwIyx1kcbYeKuGHToRFcLJerdKj1ShL1PDvFIaZ+U2gfuT4xdd+rPIA5ShL3 uzTa44oCnR4Hnv2A8It4ik36d0gunecaXENc6PtQBxqCWq2iC9kxcBlkzhpB4DI9OedBmw/P3rLU DshA3H9Fkljt76c2zpo= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210925124636 20210921115617 7233 aoc.gov. dJaJNpONjc2WmPEXADc2E6mCmNivFBTC3PFTRzeUtj1P2dBAdsQSjCzynZN8VRSiGAsRKrAD6t42 cgN7IT4I94bateZVcM/w6uuNCUW8n2ZlaIexxWcBn+pVz8s0daj8zwisCWBQ663qAPG75f83w77k DWFSpL4ZHV01/Twvxh0= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210926103443 20210922093639 7233 aoc.gov. MJTu7eh96flvNfeeBtRqbYU2aTYt2zXGtSrPaSz0S4aAW8je1rsdKixBLkb0LGQdA6GPDiSm1JZU BUmxnwkAELjCeU7tRD2U/2raMUNC1N28NK6tXYOi/9j54bnIWVm1+7UcXWU+qbNlxzFauJKq/kWL FYAMB5kZlRXtW8SMIo0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	capital.gov A RR has value 72.32.58.217
	Found 1 RRSIGs over A RRset
	`capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= )`
	RRSIG=53445 and DNSKEY=53445 verifies the A RRset

capital.gov

	Query to ns1.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.102.14
	;; Response received from 161.197.102.14 (227 octets) ;; HEADER SECTION ;; id = 19533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns1.aoc.gov is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to ns1.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.102.14
	;; Response received from 161.197.102.14 (227 octets) ;; HEADER SECTION ;; id = 7989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	capital.gov A RR has value 72.32.58.217
	Found 1 RRSIGs over A RRset
	`capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= )`
	RRSIG=53445 and DNSKEY=53445 verifies the A RRset

capital.gov

	Query to authns1.centurylink.net for capital.gov/A
	Received 1001 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (1001 octets) ;; HEADER SECTION ;; id = 42113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20210925114528 20210921113200 53445 capital.gov. jWmjw/E5rEwLzOChgwIyx1kcbYeKuGHToRFcLJerdKj1ShL1PDvFIaZ+U2gfuT4xdd+rPIA5ShL3 uzTa44oCnR4Hnv2A8It4ik36d0gunecaXENc6PtQBxqCWq2iC9kxcBlkzhpB4DI9OedBmw/P3rLU DshA3H9Fkljt76c2zpo= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210925124636 20210921115617 7233 aoc.gov. dJaJNpONjc2WmPEXADc2E6mCmNivFBTC3PFTRzeUtj1P2dBAdsQSjCzynZN8VRSiGAsRKrAD6t42 cgN7IT4I94bateZVcM/w6uuNCUW8n2ZlaIexxWcBn+pVz8s0daj8zwisCWBQ663qAPG75f83w77k DWFSpL4ZHV01/Twvxh0= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210926103443 20210922093639 7233 aoc.gov. MJTu7eh96flvNfeeBtRqbYU2aTYt2zXGtSrPaSz0S4aAW8je1rsdKixBLkb0LGQdA6GPDiSm1JZU BUmxnwkAELjCeU7tRD2U/2raMUNC1N28NK6tXYOi/9j54bnIWVm1+7UcXWU+qbNlxzFauJKq/kWL FYAMB5kZlRXtW8SMIo0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	authns1.centurylink.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to authns1.centurylink.net for capital.gov/A
	Received 1001 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (1001 octets) ;; HEADER SECTION ;; id = 22855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20210925114528 20210921113200 53445 capital.gov. jWmjw/E5rEwLzOChgwIyx1kcbYeKuGHToRFcLJerdKj1ShL1PDvFIaZ+U2gfuT4xdd+rPIA5ShL3 uzTa44oCnR4Hnv2A8It4ik36d0gunecaXENc6PtQBxqCWq2iC9kxcBlkzhpB4DI9OedBmw/P3rLU DshA3H9Fkljt76c2zpo= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210925124636 20210921115617 7233 aoc.gov. dJaJNpONjc2WmPEXADc2E6mCmNivFBTC3PFTRzeUtj1P2dBAdsQSjCzynZN8VRSiGAsRKrAD6t42 cgN7IT4I94bateZVcM/w6uuNCUW8n2ZlaIexxWcBn+pVz8s0daj8zwisCWBQ663qAPG75f83w77k DWFSpL4ZHV01/Twvxh0= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20210926103443 20210922093639 7233 aoc.gov. MJTu7eh96flvNfeeBtRqbYU2aTYt2zXGtSrPaSz0S4aAW8je1rsdKixBLkb0LGQdA6GPDiSm1JZU BUmxnwkAELjCeU7tRD2U/2raMUNC1N28NK6tXYOi/9j54bnIWVm1+7UcXWU+qbNlxzFauJKq/kWL FYAMB5kZlRXtW8SMIo0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	capital.gov A RR has value 72.32.58.217
	Found 1 RRSIGs over A RRset
	`capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= )`
	RRSIG=53445 and DNSKEY=53445 verifies the A RRset

capital.gov

	Query to ns2.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.100.14
	;; Response received from 161.197.100.14 (227 octets) ;; HEADER SECTION ;; id = 15983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns2.aoc.gov is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to ns2.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.100.14
	;; Response received from 161.197.100.14 (227 octets) ;; HEADER SECTION ;; id = 20477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	capital.gov A RR has value 72.32.58.217
	Found 1 RRSIGs over A RRset
	`capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= )`
	RRSIG=53445 and DNSKEY=53445 verifies the A RRset

capital.gov

	Query to auth111.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.115
	;; Response received from 198.6.1.115 (227 octets) ;; HEADER SECTION ;; id = 32236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	auth111.ns.uu.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to auth111.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.115
	;; Response received from 198.6.1.115 (227 octets) ;; HEADER SECTION ;; id = 13100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	capital.gov A RR has value 72.32.58.217
	Found 1 RRSIGs over A RRset
	`capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= )`
	RRSIG=53445 and DNSKEY=53445 verifies the A RRset

capital.gov

	Query to auth120.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.154
	;; Response received from 198.6.1.154 (227 octets) ;; HEADER SECTION ;; id = 53631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	auth120.ns.uu.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to auth120.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.154
	;; Response received from 198.6.1.154 (227 octets) ;; HEADER SECTION ;; id = 26781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 86400 IN A 72.32.58.217 capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	capital.gov A RR has value 72.32.58.217
	Found 1 RRSIGs over A RRset
	`capital.gov. 86400 IN RRSIG ( A 8 2 86400 20210925114528 20210921113200 53445 capital.gov. cfCWT14Tk8eAMPdc8a0W9paSK4dN1TMn+dVPiSIkGhNxZ5JcTpPaE+ofkFymYFxefD/C1hVyHGzC 8iUYvuvZBhU12TXUcPNSEJo75CtFjdrxHdEU17WJyphgK8XzHIF/tROV8DApOKo5eqmF3OU4wDc7 vp6FBBg+Gbs8vaMZe94= )`
	RRSIG=53445 and DNSKEY=53445 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test capital.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: