DNSSEC Debugger

Domain Name:

Time: 2025-07-10 14:59:20 UTC

Analyzing DNSSEC problems for dea.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 54320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to h.root-servers.net for dea.gov/A
	Received 614 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 614 octets ;; HEADER SECTION ;; id = 63466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . tMW2l1WalZouxxv7dLZk1jZz8TCYnATI2oirdsem1Q/TJr4zhZ/A0xmShcEfdNz5fuULlsIgUr3U AsXidquRU/E59zMrjEc/EqEtNB4iGuOBT2ySbCiqer2dafVosKhiXGSgxUL/SEsBf/DJhzHPpLT6 0gh5KJJlilBg+PSV42cvGf9aKnmdkFlbnAGwMO2XFZMx93ydq2aU6ETfTtDOR9HoFT6xTVYlWQnJ IUFH6D2pbvc6Pih1f9eeNxLmSYq7cTZxH4LII5ZeWEr0/DlNQ1faZypDveDT1W/bqtGzsfkJQSGI lyYkTuF4gO/PJaK5IJprlmt82TWDJG/p6uHTTw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 36112 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . tMW2l1WalZouxxv7dLZk1jZz8TCYnATI2oirdsem1Q/TJr4zhZ/A0xmShcEfdNz5fuULlsIgUr3U AsXidquRU/E59zMrjEc/EqEtNB4iGuOBT2ySbCiqer2dafVosKhiXGSgxUL/SEsBf/DJhzHPpLT6 0gh5KJJlilBg+PSV42cvGf9aKnmdkFlbnAGwMO2XFZMx93ydq2aU6ETfTtDOR9HoFT6xTVYlWQnJ IUFH6D2pbvc6Pih1f9eeNxLmSYq7cTZxH4LII5ZeWEr0/DlNQ1faZypDveDT1W/bqtGzsfkJQSGI lyYkTuF4gO/PJaK5IJprlmt82TWDJG/p6uHTTw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 30985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . tMW2l1WalZouxxv7dLZk1jZz8TCYnATI2oirdsem1Q/TJr4zhZ/A0xmShcEfdNz5fuULlsIgUr3U AsXidquRU/E59zMrjEc/EqEtNB4iGuOBT2ySbCiqer2dafVosKhiXGSgxUL/SEsBf/DJhzHPpLT6 0gh5KJJlilBg+PSV42cvGf9aKnmdkFlbnAGwMO2XFZMx93ydq2aU6ETfTtDOR9HoFT6xTVYlWQnJ IUFH6D2pbvc6Pih1f9eeNxLmSYq7cTZxH4LII5ZeWEr0/DlNQ1faZypDveDT1W/bqtGzsfkJQSGI lyYkTuF4gO/PJaK5IJprlmt82TWDJG/p6uHTTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . tMW2l1WalZouxxv7dLZk1jZz8TCYnATI2oirdsem1Q/TJr4zhZ/A0xmShcEfdNz5fuULlsIgUr3U AsXidquRU/E59zMrjEc/EqEtNB4iGuOBT2ySbCiqer2dafVosKhiXGSgxUL/SEsBf/DJhzHPpLT6 0gh5KJJlilBg+PSV42cvGf9aKnmdkFlbnAGwMO2XFZMx93ydq2aU6ETfTtDOR9HoFT6xTVYlWQnJ IUFH6D2pbvc6Pih1f9eeNxLmSYq7cTZxH4LII5ZeWEr0/DlNQ1faZypDveDT1W/bqtGzsfkJQSGI lyYkTuF4gO/PJaK5IJprlmt82TWDJG/p6uHTTw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 44582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for dea.gov/A
	Received 314 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 314 octets ;; HEADER SECTION ;; id = 50235 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dea.gov. 10800 IN NS a1-61.akam.net. dea.gov. 10800 IN NS a10-66.akam.net. dea.gov. 10800 IN NS a12-67.akam.net. dea.gov. 10800 IN NS a13-64.akam.net. dea.gov. 10800 IN NS a7-65.akam.net. dea.gov. 10800 IN NS a8-66.akam.net. dea.gov. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) dea.gov. 3600 IN RRSIG ( DS 13 2 3600 20250711155920 20250709135920 35496 gov. zmg/POT4LK+8FmIq3ORK6n7nSA+bBTS4Sye9iqTiTtcAQBeXruE+120fEQiC2QDD9TOEsN/Y2yIf dFEnMoNrAA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for dea.gov/DNSKEY
	Received 314 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 314 octets ;; HEADER SECTION ;; id = 39708 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dea.gov. 10800 IN NS a1-61.akam.net. dea.gov. 10800 IN NS a10-66.akam.net. dea.gov. 10800 IN NS a12-67.akam.net. dea.gov. 10800 IN NS a13-64.akam.net. dea.gov. 10800 IN NS a7-65.akam.net. dea.gov. 10800 IN NS a8-66.akam.net. dea.gov. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) dea.gov. 3600 IN RRSIG ( DS 13 2 3600 20250711155920 20250709135920 35496 gov. pIJYAXOaFJ0Ctkt3H2LLVXCh4ibV1e6w3BD6fudmyBTaM+W2zT+amo3RLFk6+wbX7G14olYm9MkX rK4jwxJrWw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone dea.gov

dea.gov

	Checking DS between gov and dea.gov
	Query to a.ns.gov for dea.gov/DS
	Received 183 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 183 octets ;; HEADER SECTION ;; id = 11302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN DS ;; ANSWER SECTION (2 records) dea.gov. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 ) dea.gov. 3600 IN RRSIG ( DS 13 2 3600 20250711155920 20250709135920 35496 gov. PqCWiBScaFf2ptig8F1sCIM5o7o53H/0wqbVlAipdstg2jLtIEPt6JofH2mHxHWANH6MeqlcUMkM q5H0Zxv1cw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for dea.gov in the gov zone
	DS=6809/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dea.gov. 3600 IN RRSIG ( DS 13 2 3600 20250711155920 20250709135920 35496 gov. PqCWiBScaFf2ptig8F1sCIM5o7o53H/0wqbVlAipdstg2jLtIEPt6JofH2mHxHWANH6MeqlcUMkM q5H0Zxv1cw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=6809/SHA-256 is now in the chain-of-trust
	`dea.gov. 3600 IN DS ( 6809 8 2 adcc62f54181f431aac2900376c75f79fc68bed483574fbca246d4a3a415a803 )`
	Query to a13-64.akam.net for dea.gov/DNSKEY
	Received 1474 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 1474 octets ;; HEADER SECTION ;; id = 38089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN DNSKEY ;; ANSWER SECTION (6 records) dea.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAZwPqEeQab4yZvheninDHrCYftlWvnvdK+JyGe0u/uqczWYaVlwmL2egRDzh9bZtzi0HOd4C hdJY4BX8oZlfs3+LOT9nw6i18kSE171kYDK+svtv6pGvAZ/gB3aVf/nuJai/1BxJennlGUIoyNEx P893s5bGXngyhyH8L186xKPCL1QKJjS5BjWkRY7f77qoT3yacmbZEElCWlp0Y+Sc0rq9JAbH0J8u iycpgAk0Pk3AX4fiFPIal/cAwC2Oe2r7/7YswUnPFLp+DLVhbIl7SB84lO+m0aHIahpaYcIRB2e8 IplxqO4gkavwuRu8nHuL26JrMRij9SDCXVxZbC2W8ec= ) ; keytag 40447 dea.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAeNWDF9cYKb3tp1sP1KYx+cdWR1GTIiAWZCmWRytFMTuycEzsXJ6Pho8UUC97szsxos/UscW ikKvE5O/x92QXWgClETRmrkTtcbVhJyHiHbS/DDTp8vC7mch1ytzez+6q4/Wc+NR5ABQiFoH4Im1 kCrD3L9stEmdxL7e6HOxrZsQi1CkfdCRWn3iewp6+VL6/yRRjMrbCY51Mt4oVD83Je1cXGzn/dEm hT92zIJVgX2rJEKdFcAlXiTF6o+IqOt0LSwCh4GPtqt0r/llp7o56MluFycmCyso2WMLeJ09mF4F NbhXYiuOfykfYQ/7+AZQHAmFvRiNccRGxQg+AjC6BAE= ) ; keytag 6809 dea.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAcnWU/RgglsJDLFrYaX83S45mRpy710yyMRzKj7gbu/sOjM2DlUGz+bpYJlhuhLfRxcPCt9W 631V8iTWpr1xb18a3qtU54Sp4jt3z66smictXcj1wOeuMGKXiT4dKGbnh+nM2TOuqS74DZ4uQraZ Wl7qEsmpIkIooS5a+QoT/8CJ ) ; keytag 7606 dea.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAcN3uk/SPLaSzlJBd6DT4lga4D6/gBRcSoG/awRDgjoJI9bSvxvHNmCpp4JhQjlo83mqRSZz ABDi1Jmq1GG/UizUeFfdzTpfSA826pKgU1smLdHssoZZjZGLpFTOPy/WPbMNPaYmO1ML4HplB7gf +OiadlLf77pCQOifXRy72+k3 ) ; keytag 46071 dea.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250713033624 20250710023624 6809 dea.gov. OzODPB+QSFam3q4D4KNG3zooGgwhdRXCZnwZL3Lxc+wUSnP0JaWpluXwxZhLG4hySbEUCRFwo2cK zN+qyYP/yzP6tPtejfIlD/q8wb4wpgm2a/4qW8+kw6yDS9Bd3mZPYxck5hq7e0I4u5HI47FOgfbA JJV6fZzz89fb0jySCOajOn697Kls56/IIZX7I1FaYb6Mqweo6sbEWfFQz4EC7IQHCBLlDF4rfSGA bFz0BEbaq4dBXIThCDZ8bJKyBpZXttQV4gVu40oKR3tqP8hdvwl6kfkjDxJHz0piB7+ujALiWrrc mOg3m2FSrQbNYC0hj5dvVR49K1sIcWCVs0MmEQ== ) dea.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250713033624 20250710023624 40447 dea.gov. Gsur54/zjs+2J1be65D9uXSSR+jPFlbQD1zGWxB8Buxab8FifHhege+7+uNgVTKCgp3jOHU7Bmcf 3Gqv6Tmn5xnYhOXAHNUsnkg+et3ZOimBLKpjfmpLtYgzOnDtjMXx7gDIDMeDSFSSuTqUCCPMGo1Y 9cum2D9OullvjHXJdndW9kogswevNL+MAKN+xx9DSey/DgTbTuiF1xQwmCJd4pV0cXhLDFPWiVyI 1rEEycT+jmwPWpqv04yyKhgv0flwVzMIMQU7whLhnS2A8WgBK95XMncI8czIMXcoyl460kYjH9a5 DcPBXyRX+p217Hyn63J4blTnTF6Bl1SHQRxlvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for dea.gov
	`dea.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAZwPqEeQab4yZvheninDHrCYftlWvnvdK+JyGe0u/uqczWYaVlwmL2egRDzh9bZtzi0HOd4C hdJY4BX8oZlfs3+LOT9nw6i18kSE171kYDK+svtv6pGvAZ/gB3aVf/nuJai/1BxJennlGUIoyNEx P893s5bGXngyhyH8L186xKPCL1QKJjS5BjWkRY7f77qoT3yacmbZEElCWlp0Y+Sc0rq9JAbH0J8u iycpgAk0Pk3AX4fiFPIal/cAwC2Oe2r7/7YswUnPFLp+DLVhbIl7SB84lO+m0aHIahpaYcIRB2e8 IplxqO4gkavwuRu8nHuL26JrMRij9SDCXVxZbC2W8ec= ) ; keytag 40447`
	`dea.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAeNWDF9cYKb3tp1sP1KYx+cdWR1GTIiAWZCmWRytFMTuycEzsXJ6Pho8UUC97szsxos/UscW ikKvE5O/x92QXWgClETRmrkTtcbVhJyHiHbS/DDTp8vC7mch1ytzez+6q4/Wc+NR5ABQiFoH4Im1 kCrD3L9stEmdxL7e6HOxrZsQi1CkfdCRWn3iewp6+VL6/yRRjMrbCY51Mt4oVD83Je1cXGzn/dEm hT92zIJVgX2rJEKdFcAlXiTF6o+IqOt0LSwCh4GPtqt0r/llp7o56MluFycmCyso2WMLeJ09mF4F NbhXYiuOfykfYQ/7+AZQHAmFvRiNccRGxQg+AjC6BAE= ) ; keytag 6809`
	`dea.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAcnWU/RgglsJDLFrYaX83S45mRpy710yyMRzKj7gbu/sOjM2DlUGz+bpYJlhuhLfRxcPCt9W 631V8iTWpr1xb18a3qtU54Sp4jt3z66smictXcj1wOeuMGKXiT4dKGbnh+nM2TOuqS74DZ4uQraZ Wl7qEsmpIkIooS5a+QoT/8CJ ) ; keytag 7606`
	`dea.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAcN3uk/SPLaSzlJBd6DT4lga4D6/gBRcSoG/awRDgjoJI9bSvxvHNmCpp4JhQjlo83mqRSZz ABDi1Jmq1GG/UizUeFfdzTpfSA826pKgU1smLdHssoZZjZGLpFTOPy/WPbMNPaYmO1ML4HplB7gf +OiadlLf77pCQOifXRy72+k3 ) ; keytag 46071`
	DNSKEY=6809/SEP is now in the chain-of-trust
	DS=6809/SHA-256 verifies DNSKEY=6809/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dea.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250713033624 20250710023624 6809 dea.gov. OzODPB+QSFam3q4D4KNG3zooGgwhdRXCZnwZL3Lxc+wUSnP0JaWpluXwxZhLG4hySbEUCRFwo2cK zN+qyYP/yzP6tPtejfIlD/q8wb4wpgm2a/4qW8+kw6yDS9Bd3mZPYxck5hq7e0I4u5HI47FOgfbA JJV6fZzz89fb0jySCOajOn697Kls56/IIZX7I1FaYb6Mqweo6sbEWfFQz4EC7IQHCBLlDF4rfSGA bFz0BEbaq4dBXIThCDZ8bJKyBpZXttQV4gVu40oKR3tqP8hdvwl6kfkjDxJHz0piB7+ujALiWrrc mOg3m2FSrQbNYC0hj5dvVR49K1sIcWCVs0MmEQ== )`
	`dea.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20250713033624 20250710023624 40447 dea.gov. Gsur54/zjs+2J1be65D9uXSSR+jPFlbQD1zGWxB8Buxab8FifHhege+7+uNgVTKCgp3jOHU7Bmcf 3Gqv6Tmn5xnYhOXAHNUsnkg+et3ZOimBLKpjfmpLtYgzOnDtjMXx7gDIDMeDSFSSuTqUCCPMGo1Y 9cum2D9OullvjHXJdndW9kogswevNL+MAKN+xx9DSey/DgTbTuiF1xQwmCJd4pV0cXhLDFPWiVyI 1rEEycT+jmwPWpqv04yyKhgv0flwVzMIMQU7whLhnS2A8WgBK95XMncI8czIMXcoyl460kYjH9a5 DcPBXyRX+p217Hyn63J4blTnTF6Bl1SHQRxlvg== )`
	RRSIG=6809 and DNSKEY=6809/SEP verifies the DNSKEY RRset
	RRSIG=40447 and DNSKEY=40447/SEP verifies the DNSKEY RRset
	DNSKEY=40447/SEP is now in the chain-of-trust
	DNSKEY=7606 is now in the chain-of-trust
	DNSKEY=46071 is now in the chain-of-trust
	Query to a10-66.akam.net for dea.gov/A
	Received 219 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 219 octets ;; HEADER SECTION ;; id = 60961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 23.65.18.135 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. RFvdAoH2i76SOlNpN6Yt94iYtqQhX//0jbxiGX01mhjuPhrPS/SE3B/jYqSEfWbO1td+Zic5q8Xc +Bt+CEnXIZEWfKh8NJFkflpjA9plfMW3U8PGw8+Zjd/1Qs8wvvWCo7+IDgWQVpW9x2B04ESytEqr YVsGoDB4N1EggVYe0jw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-66.akam.net is authoritative for dea.gov
	Found RRSIG signed by dea.gov zone
	Query to a13-64.akam.net for dea.gov/SOA
	Received 558 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 558 octets ;; HEADER SECTION ;; id = 52924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN SOA ;; ANSWER SECTION (2 records) dea.gov. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) dea.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250713033624 20250710023624 7606 dea.gov. ajN121fCBK/AzYNppW8eiik6WLM4P/i4yf5MrmqwTYAIFM+U9kDaxRHzDNEoJqeH3sLQtjUwwYQ/ 4+pFDqJ6hclknpK9Swjo18XEV9cw3UMqtaJlvvIy9jehKQeWUozM0PsqnGbzQEjqfScaFnsXCitj 2C6CdYeD5ea5LJ913H0= ) ;; AUTHORITY SECTION (7 records) dea.gov. 86400 IN NS a13-64.akam.net. dea.gov. 86400 IN NS a12-67.akam.net. dea.gov. 86400 IN NS a10-66.akam.net. dea.gov. 86400 IN NS a8-66.akam.net. dea.gov. 86400 IN NS a7-65.akam.net. dea.gov. 86400 IN NS a1-61.akam.net. dea.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713033624 20250710023624 7606 dea.gov. i5AF06JcFETs4PUTa+AiHo23L+PkdRQzaAAUOPmp0RxT7/KuCrUAgkswBosORn3iJSKVPrGh1g58 Rj5bUnsmohfJpUFNBO6aobpWgk2EwmvCR4EytlYoOxa1ORypUbOA+JLgN8s1uL3doGa3KFuCtpBR doWgYJGeJTWVCiV1bww= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-65.akam.net for dea.gov/SOA
	Received 558 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 558 octets ;; HEADER SECTION ;; id = 27745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN SOA ;; ANSWER SECTION (2 records) dea.gov. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) dea.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250713033624 20250710023624 7606 dea.gov. ajN121fCBK/AzYNppW8eiik6WLM4P/i4yf5MrmqwTYAIFM+U9kDaxRHzDNEoJqeH3sLQtjUwwYQ/ 4+pFDqJ6hclknpK9Swjo18XEV9cw3UMqtaJlvvIy9jehKQeWUozM0PsqnGbzQEjqfScaFnsXCitj 2C6CdYeD5ea5LJ913H0= ) ;; AUTHORITY SECTION (7 records) dea.gov. 86400 IN NS a13-64.akam.net. dea.gov. 86400 IN NS a10-66.akam.net. dea.gov. 86400 IN NS a1-61.akam.net. dea.gov. 86400 IN NS a7-65.akam.net. dea.gov. 86400 IN NS a8-66.akam.net. dea.gov. 86400 IN NS a12-67.akam.net. dea.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713033624 20250710023624 7606 dea.gov. i5AF06JcFETs4PUTa+AiHo23L+PkdRQzaAAUOPmp0RxT7/KuCrUAgkswBosORn3iJSKVPrGh1g58 Rj5bUnsmohfJpUFNBO6aobpWgk2EwmvCR4EytlYoOxa1ORypUbOA+JLgN8s1uL3doGa3KFuCtpBR doWgYJGeJTWVCiV1bww= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-67.akam.net for dea.gov/SOA
	Received 558 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 558 octets ;; HEADER SECTION ;; id = 10173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN SOA ;; ANSWER SECTION (2 records) dea.gov. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) dea.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250713033624 20250710023624 7606 dea.gov. ajN121fCBK/AzYNppW8eiik6WLM4P/i4yf5MrmqwTYAIFM+U9kDaxRHzDNEoJqeH3sLQtjUwwYQ/ 4+pFDqJ6hclknpK9Swjo18XEV9cw3UMqtaJlvvIy9jehKQeWUozM0PsqnGbzQEjqfScaFnsXCitj 2C6CdYeD5ea5LJ913H0= ) ;; AUTHORITY SECTION (7 records) dea.gov. 86400 IN NS a1-61.akam.net. dea.gov. 86400 IN NS a8-66.akam.net. dea.gov. 86400 IN NS a13-64.akam.net. dea.gov. 86400 IN NS a10-66.akam.net. dea.gov. 86400 IN NS a12-67.akam.net. dea.gov. 86400 IN NS a7-65.akam.net. dea.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713033624 20250710023624 7606 dea.gov. i5AF06JcFETs4PUTa+AiHo23L+PkdRQzaAAUOPmp0RxT7/KuCrUAgkswBosORn3iJSKVPrGh1g58 Rj5bUnsmohfJpUFNBO6aobpWgk2EwmvCR4EytlYoOxa1ORypUbOA+JLgN8s1uL3doGa3KFuCtpBR doWgYJGeJTWVCiV1bww= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-66.akam.net for dea.gov/SOA
	Received 558 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 558 octets ;; HEADER SECTION ;; id = 11310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN SOA ;; ANSWER SECTION (2 records) dea.gov. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) dea.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250713033624 20250710023624 7606 dea.gov. ajN121fCBK/AzYNppW8eiik6WLM4P/i4yf5MrmqwTYAIFM+U9kDaxRHzDNEoJqeH3sLQtjUwwYQ/ 4+pFDqJ6hclknpK9Swjo18XEV9cw3UMqtaJlvvIy9jehKQeWUozM0PsqnGbzQEjqfScaFnsXCitj 2C6CdYeD5ea5LJ913H0= ) ;; AUTHORITY SECTION (7 records) dea.gov. 86400 IN NS a1-61.akam.net. dea.gov. 86400 IN NS a13-64.akam.net. dea.gov. 86400 IN NS a8-66.akam.net. dea.gov. 86400 IN NS a7-65.akam.net. dea.gov. 86400 IN NS a10-66.akam.net. dea.gov. 86400 IN NS a12-67.akam.net. dea.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713033624 20250710023624 7606 dea.gov. i5AF06JcFETs4PUTa+AiHo23L+PkdRQzaAAUOPmp0RxT7/KuCrUAgkswBosORn3iJSKVPrGh1g58 Rj5bUnsmohfJpUFNBO6aobpWgk2EwmvCR4EytlYoOxa1ORypUbOA+JLgN8s1uL3doGa3KFuCtpBR doWgYJGeJTWVCiV1bww= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-61.akam.net for dea.gov/SOA
	Received 558 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 558 octets ;; HEADER SECTION ;; id = 21294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN SOA ;; ANSWER SECTION (2 records) dea.gov. 86400 IN SOA ( a10-66.akam.net. hostmaster.akamai.com. 1556207459 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) dea.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250713033624 20250710023624 7606 dea.gov. ajN121fCBK/AzYNppW8eiik6WLM4P/i4yf5MrmqwTYAIFM+U9kDaxRHzDNEoJqeH3sLQtjUwwYQ/ 4+pFDqJ6hclknpK9Swjo18XEV9cw3UMqtaJlvvIy9jehKQeWUozM0PsqnGbzQEjqfScaFnsXCitj 2C6CdYeD5ea5LJ913H0= ) ;; AUTHORITY SECTION (7 records) dea.gov. 86400 IN NS a13-64.akam.net. dea.gov. 86400 IN NS a10-66.akam.net. dea.gov. 86400 IN NS a7-65.akam.net. dea.gov. 86400 IN NS a1-61.akam.net. dea.gov. 86400 IN NS a12-67.akam.net. dea.gov. 86400 IN NS a8-66.akam.net. dea.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713033624 20250710023624 7606 dea.gov. i5AF06JcFETs4PUTa+AiHo23L+PkdRQzaAAUOPmp0RxT7/KuCrUAgkswBosORn3iJSKVPrGh1g58 Rj5bUnsmohfJpUFNBO6aobpWgk2EwmvCR4EytlYoOxa1ORypUbOA+JLgN8s1uL3doGa3KFuCtpBR doWgYJGeJTWVCiV1bww= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for dea.gov/A
	Received 219 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 219 octets ;; HEADER SECTION ;; id = 27514 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 23.65.18.135 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. RFvdAoH2i76SOlNpN6Yt94iYtqQhX//0jbxiGX01mhjuPhrPS/SE3B/jYqSEfWbO1td+Zic5q8Xc +Bt+CEnXIZEWfKh8NJFkflpjA9plfMW3U8PGw8+Zjd/1Qs8wvvWCo7+IDgWQVpW9x2B04ESytEqr YVsGoDB4N1EggVYe0jw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dea.gov A RR has value 23.65.18.135
	Found 1 RRSIGs over A RRset
	`dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. RFvdAoH2i76SOlNpN6Yt94iYtqQhX//0jbxiGX01mhjuPhrPS/SE3B/jYqSEfWbO1td+Zic5q8Xc +Bt+CEnXIZEWfKh8NJFkflpjA9plfMW3U8PGw8+Zjd/1Qs8wvvWCo7+IDgWQVpW9x2B04ESytEqr YVsGoDB4N1EggVYe0jw= )`
	RRSIG=7606 and DNSKEY=7606 verifies the A RRset

dea.gov

	Query to a13-64.akam.net for dea.gov/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 10799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 23.214.231.69 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. nEzIxB1AG2HCOl2zJRKSBmQVltklRof3IKqBIJTCJY4Ndk9cqtikoR8Dqy+t0PMzsG9LapNtuGEn rHQOt7iny07dfrwDlle5LxO3q/1jFHvBOtAOE9EFVrnOAACArLxa1NAq+/rUI8knN/lxz/yHFEG8 Y/MKKFqZvpyki+OAwxY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a13-64.akam.net is authoritative for dea.gov
	Found RRSIG signed by dea.gov zone
	Query to a13-64.akam.net for dea.gov/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 28017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 104.68.102.11 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dea.gov A RR has value 104.68.102.11
	Found 1 RRSIGs over A RRset
	`dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= )`
	RRSIG=7606 and DNSKEY=7606 verifies the A RRset

dea.gov

	Query to a8-66.akam.net for dea.gov/A
	Received 219 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 219 octets ;; HEADER SECTION ;; id = 35626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 23.195.231.203 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. FuXbhs4PEiV6tDPl3RdH7xA3vodtlWj7fdNI/WV6MWUGKp2vhZ5rIk6oZ7MfUkt/0Yptj/J3FsJH /6MmtKMIpd4lc99faLtZNU5AgE/lX/iWBwW1A/+pBc/Kdd3nt3Cr9fM23X+9tME7liZWfVkfSJDt aOaHY5/i1HXHuF+ayDg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-66.akam.net is authoritative for dea.gov
	Found RRSIG signed by dea.gov zone
	Query to a8-66.akam.net for dea.gov/A
	Received 219 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 219 octets ;; HEADER SECTION ;; id = 44363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 104.67.193.59 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. dn97qc5BQvmHQcMxj4gO0gHfoZvCLxQyJtdGtRwZmg4AOJ3XNFTtmWTpgmV0S55XGbAQX+jQSgNJ idt3NUzIXex063y3tgahCXPVoNCjOC4Mn+jzqCEjfkeW8ezOGnJq9kEehgpI7vlKig4XXozXm32Y AVl2y+yliyTvXLk0ge4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dea.gov A RR has value 104.67.193.59
	Found 1 RRSIGs over A RRset
	`dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. dn97qc5BQvmHQcMxj4gO0gHfoZvCLxQyJtdGtRwZmg4AOJ3XNFTtmWTpgmV0S55XGbAQX+jQSgNJ idt3NUzIXex063y3tgahCXPVoNCjOC4Mn+jzqCEjfkeW8ezOGnJq9kEehgpI7vlKig4XXozXm32Y AVl2y+yliyTvXLk0ge4= )`
	RRSIG=7606 and DNSKEY=7606 verifies the A RRset

dea.gov

	Query to a7-65.akam.net for dea.gov/A
	Received 219 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 219 octets ;; HEADER SECTION ;; id = 6389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 104.68.102.11 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-65.akam.net is authoritative for dea.gov
	Found RRSIG signed by dea.gov zone
	Query to a7-65.akam.net for dea.gov/A
	Received 219 bytes from 23.61.199.65
	;; Response received from [23.61.199.65] 219 octets ;; HEADER SECTION ;; id = 13200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 104.68.102.11 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dea.gov A RR has value 104.68.102.11
	Found 1 RRSIGs over A RRset
	`dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= )`
	RRSIG=7606 and DNSKEY=7606 verifies the A RRset

dea.gov

	Query to a12-67.akam.net for dea.gov/A
	Received 219 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 219 octets ;; HEADER SECTION ;; id = 6892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 184.86.172.214 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. sGlTGoQs51gKTaC+X4g4Gdl4UIVJRg8V8OE7Z9RG8LCxlbM9Tqzx1Ok06KeARDWnxqi+bJmQA6CI 0fWyoH9WMYw068nXT7E9WjeK8LdZs0NHKDUl3jugEJqoD9CCOLKqNkCzhUSKo4heQOaGTDTd3vqc FA9gioa+qo1TYBUkwRQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-67.akam.net is authoritative for dea.gov
	Found RRSIG signed by dea.gov zone
	Query to a12-67.akam.net for dea.gov/A
	Received 219 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 219 octets ;; HEADER SECTION ;; id = 49812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 184.86.172.214 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. sGlTGoQs51gKTaC+X4g4Gdl4UIVJRg8V8OE7Z9RG8LCxlbM9Tqzx1Ok06KeARDWnxqi+bJmQA6CI 0fWyoH9WMYw068nXT7E9WjeK8LdZs0NHKDUl3jugEJqoD9CCOLKqNkCzhUSKo4heQOaGTDTd3vqc FA9gioa+qo1TYBUkwRQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dea.gov A RR has value 184.86.172.214
	Found 1 RRSIGs over A RRset
	`dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. sGlTGoQs51gKTaC+X4g4Gdl4UIVJRg8V8OE7Z9RG8LCxlbM9Tqzx1Ok06KeARDWnxqi+bJmQA6CI 0fWyoH9WMYw068nXT7E9WjeK8LdZs0NHKDUl3jugEJqoD9CCOLKqNkCzhUSKo4heQOaGTDTd3vqc FA9gioa+qo1TYBUkwRQ= )`
	RRSIG=7606 and DNSKEY=7606 verifies the A RRset

dea.gov

	Query to a1-61.akam.net for dea.gov/A
	Received 219 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 219 octets ;; HEADER SECTION ;; id = 42213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 23.214.231.69 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. nEzIxB1AG2HCOl2zJRKSBmQVltklRof3IKqBIJTCJY4Ndk9cqtikoR8Dqy+t0PMzsG9LapNtuGEn rHQOt7iny07dfrwDlle5LxO3q/1jFHvBOtAOE9EFVrnOAACArLxa1NAq+/rUI8knN/lxz/yHFEG8 Y/MKKFqZvpyki+OAwxY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-61.akam.net is authoritative for dea.gov
	Found RRSIG signed by dea.gov zone
	Query to a1-61.akam.net for dea.gov/A
	Received 219 bytes from 193.108.91.61
	;; Response received from [193.108.91.61] 219 octets ;; HEADER SECTION ;; id = 21491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dea.gov. IN A ;; ANSWER SECTION (2 records) dea.gov. 20 IN A 104.68.102.11 dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dea.gov A RR has value 104.68.102.11
	Found 1 RRSIGs over A RRset
	`dea.gov. 20 IN RRSIG ( A 8 2 20 20250713033624 20250710023624 7606 dea.gov. QD0adOKz7fy+3fdgc6eBohByB+3dXFQGrXOX5rxHUHP1e84hHnCAU2D9rgxBPl7ZUSmWa7gy7Zr1 LvM9Tpjz0lUKUyX+/XhAQ69wYWhsDihhTrAJZghnd960v1n/CVahl7A+bFsrzjYqinghiTJz/f1p 1uVVP3UOyVkVVPFLdsw= )`
	RRSIG=7606 and DNSKEY=7606 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dea.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: