DNSSEC Debugger - drought.gov

Domain Name:

Time: 2026-01-16 06:39:42 UTC

Analyzing DNSSEC problems for drought.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 48295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to e.root-servers.net for drought.gov/A
	Received 618 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 618 octets ;; HEADER SECTION ;; id = 2087 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for gov/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 29648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 48757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 26272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for drought.gov/A
	Received 384 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 384 octets ;; HEADER SECTION ;; id = 49132 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) drought.gov. 10800 IN NS ns-01.noaa.gov. drought.gov. 10800 IN NS ns-02.noaa.gov. drought.gov. 10800 IN NS ns-03.noaa.gov. drought.gov. 3600 IN DS ( 21670 8 2 2a1f84a5e74e7c1544a16b57f1a636e8bd7d1aed4f70eb67c8e909bd8de30f80 ) drought.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117073943 20260115053943 35496 gov. tX6EP//bTg2xM9aiF+jop4gUQlsjIakui4RYNAsU+/5mz+NIiwsPOa96Tx0FvnfKsaN5slnIrl2r 6Jfb7gOXUw== ) ;; ADDITIONAL SECTION (7 records) ns-01.noaa.gov. 3600 IN A 137.75.116.93 ns-01.noaa.gov. 3600 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 3600 IN A 137.75.112.7 ns-02.noaa.gov. 3600 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 3600 IN A 137.75.112.58 ns-03.noaa.gov. 3600 IN AAAA 2610:20:9300:1:137:75:112:58 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for drought.gov/DNSKEY
	Received 384 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 384 octets ;; HEADER SECTION ;; id = 42415 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) drought.gov. 10800 IN NS ns-01.noaa.gov. drought.gov. 10800 IN NS ns-02.noaa.gov. drought.gov. 10800 IN NS ns-03.noaa.gov. drought.gov. 3600 IN DS ( 21670 8 2 2a1f84a5e74e7c1544a16b57f1a636e8bd7d1aed4f70eb67c8e909bd8de30f80 ) drought.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117073943 20260115053943 35496 gov. P57ic0PyyvI7fx8AaFsbQK42Wb0ez+V0JZLNgPlhTB84dK0oPe7/tcCN3HCig/u9CTWJpsoGtHN1 CmlqMzNA4A== ) ;; ADDITIONAL SECTION (7 records) ns-01.noaa.gov. 3600 IN A 137.75.116.93 ns-01.noaa.gov. 3600 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 3600 IN A 137.75.112.7 ns-02.noaa.gov. 3600 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 3600 IN A 137.75.112.58 ns-03.noaa.gov. 3600 IN AAAA 2610:20:9300:1:137:75:112:58 ;; { "EDNS-VERSION": 0 }
	Found child zone drought.gov

drought.gov

	Checking DS between gov and drought.gov
	Query to d.ns.gov for drought.gov/DS
	Received 187 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 187 octets ;; HEADER SECTION ;; id = 36468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN DS ;; ANSWER SECTION (2 records) drought.gov. 3600 IN DS ( 21670 8 2 2a1f84a5e74e7c1544a16b57f1a636e8bd7d1aed4f70eb67c8e909bd8de30f80 ) drought.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117073943 20260115053943 35496 gov. V82yDdVMjOq5R5CatE+3p3sssOk+ATfe6OeYuo81K18JoprgcGfuaYdAq1qawlqd4tKaArDchi64 /e7pOHO87Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for drought.gov in the gov zone
	DS=21670/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`drought.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117073943 20260115053943 35496 gov. V82yDdVMjOq5R5CatE+3p3sssOk+ATfe6OeYuo81K18JoprgcGfuaYdAq1qawlqd4tKaArDchi64 /e7pOHO87Q== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=21670/SHA-256 is now in the chain-of-trust
	`drought.gov. 3600 IN DS ( 21670 8 2 2a1f84a5e74e7c1544a16b57f1a636e8bd7d1aed4f70eb67c8e909bd8de30f80 )`
	Query to ns-01.noaa.gov for drought.gov/DNSKEY
	Received 934 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 934 octets ;; HEADER SECTION ;; id = 34720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN DNSKEY ;; ANSWER SECTION (4 records) drought.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeiScCSPZ05nJCrgW+mk8sxXHHLkQOIfLoUvEc8I40CLkGY/tRECQpkbCGCU+RwdOv3SnB7z kmwH5ztdWm67iCNwubLd8+57RLpSuHIE0nlsQALe9C5ceN6J50uXeBsddEKvyuqHtAllKonz1SUQ hYRol8bSWpv55dN9p9s1x5Dh ) ; keytag 63061 drought.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAdkDQ1imQ4hI9Onk9w3EKKLMxsq1h65/6fjTH6WFh/Dx3Hz7anDo5KWOBvmFHOjX7ZMR7PpK CK/Gig83HHVMoapNrgoVDXXoJrgFcP9GcnFkMV8cSZfzYU2pnPGvQU7lKrTedAJVVvpNUnZHhqYe Tt6CnKY0wZg9iytjW4AI06rDO460jv6NBRQzZGXmVey6c3A0wl5EDSQggyqjX0kKhwCgtJYnunNR ywh9uXjMnJPQ1lxD1s7vg2MjDzGQmPTfbvuIv0nN6uUOphXl12pbLKVjpTW9Za2yTZHSE5VM0oeC gnHYyxx3/CLRFuF+k6vbHqSlxe9d1qav0xSkM0vH1rU= ) ; keytag 21670 drought.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260214010120 20260115010120 21670 drought.gov. Agj+iDT2tUsEwCYr4hY4G77icvMhcodIWqjTdlHzFvqaGhlPJAFrifS/8/zIXvGs1AYhw38Dva2c ATiqhL1NLa0Ix2Zf204d1v82FnwapSrlLKbiyMwOpUiYRh907646sNTyzJjLV0F/L84VhAd91Dfh is0ANro7zb+swvMF0jP23EDhcazjOI2IXEYv8UIkFrrbWI4m9kwgMFFjeRFkuhcbGe+AuIctE6RH QcGft8AdqVh2A2vlHDJI7PubyamHYYn2BlxGAMm+QrlBI+3wtnlbxq6NMqniIG0ol3hba2H0R/2V f5yaVrAcw0vmMM6M9vea5iKMaJra6lJSBLRxsg== ) drought.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260214010120 20260115010120 63061 drought.gov. DY23K65g9P7gYyb59dCM/C1XqHeXYci6L619+eTuXNMMYkdGGmuqdYpXFpXPVjpC8Vn26oMn0ZMR H0NnrzJ0rJJ+ZnCJ0BB1iJagT0O82muyBJxs77JeTaH2sIHCWIEj14kVRCylyxutSBVYdLlpvJVe VHWzYTmKOLMiUfdAv7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for drought.gov
	`drought.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeiScCSPZ05nJCrgW+mk8sxXHHLkQOIfLoUvEc8I40CLkGY/tRECQpkbCGCU+RwdOv3SnB7z kmwH5ztdWm67iCNwubLd8+57RLpSuHIE0nlsQALe9C5ceN6J50uXeBsddEKvyuqHtAllKonz1SUQ hYRol8bSWpv55dN9p9s1x5Dh ) ; keytag 63061`
	`drought.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAdkDQ1imQ4hI9Onk9w3EKKLMxsq1h65/6fjTH6WFh/Dx3Hz7anDo5KWOBvmFHOjX7ZMR7PpK CK/Gig83HHVMoapNrgoVDXXoJrgFcP9GcnFkMV8cSZfzYU2pnPGvQU7lKrTedAJVVvpNUnZHhqYe Tt6CnKY0wZg9iytjW4AI06rDO460jv6NBRQzZGXmVey6c3A0wl5EDSQggyqjX0kKhwCgtJYnunNR ywh9uXjMnJPQ1lxD1s7vg2MjDzGQmPTfbvuIv0nN6uUOphXl12pbLKVjpTW9Za2yTZHSE5VM0oeC gnHYyxx3/CLRFuF+k6vbHqSlxe9d1qav0xSkM0vH1rU= ) ; keytag 21670`
	DNSKEY=21670/SEP is now in the chain-of-trust
	DS=21670/SHA-256 verifies DNSKEY=21670/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`drought.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260214010120 20260115010120 21670 drought.gov. Agj+iDT2tUsEwCYr4hY4G77icvMhcodIWqjTdlHzFvqaGhlPJAFrifS/8/zIXvGs1AYhw38Dva2c ATiqhL1NLa0Ix2Zf204d1v82FnwapSrlLKbiyMwOpUiYRh907646sNTyzJjLV0F/L84VhAd91Dfh is0ANro7zb+swvMF0jP23EDhcazjOI2IXEYv8UIkFrrbWI4m9kwgMFFjeRFkuhcbGe+AuIctE6RH QcGft8AdqVh2A2vlHDJI7PubyamHYYn2BlxGAMm+QrlBI+3wtnlbxq6NMqniIG0ol3hba2H0R/2V f5yaVrAcw0vmMM6M9vea5iKMaJra6lJSBLRxsg== )`
	`drought.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260214010120 20260115010120 63061 drought.gov. DY23K65g9P7gYyb59dCM/C1XqHeXYci6L619+eTuXNMMYkdGGmuqdYpXFpXPVjpC8Vn26oMn0ZMR H0NnrzJ0rJJ+ZnCJ0BB1iJagT0O82muyBJxs77JeTaH2sIHCWIEj14kVRCylyxutSBVYdLlpvJVe VHWzYTmKOLMiUfdAv7U= )`
	RRSIG=21670 and DNSKEY=21670/SEP verifies the DNSKEY RRset
	RRSIG=63061 and DNSKEY=63061 verifies the DNSKEY RRset
	DNSKEY=63061 is now in the chain-of-trust
	Query to ns-02.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1098 octets ;; HEADER SECTION ;; id = 41570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	ns-02.noaa.gov is authoritative for drought.gov
	Found RRSIG signed by drought.gov zone
	Query to ns-03.noaa.gov for drought.gov/SOA
	Received 1141 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1141 octets ;; HEADER SECTION ;; id = 28736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN SOA ;; ANSWER SECTION (2 records) drought.gov. 86400 IN SOA ( dns07-infra.ncei.noaa.gov. named.dns07-infra.ncei.noaa.gov. 1768442480 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) drought.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260214010120 20260115010120 63061 drought.gov. xXszA82x8RUSo9001JpIXz7RA3UXiSh+Dt3Aw2Kc6tK12dR6TMwsI/Fn4PHlrIFjLj8OwVCto8zQ P+0m7ZrEnuswOp+ahXN6m8WzjpXsZULcXJdplMm/V96zKE69Fn6GYrA8P8rfsJUxNEfimdNcN2cE 7s5QjDPCNsOB+XwWJWc= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-e.noaa.gov for drought.gov/SOA
	Received 1141 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1141 octets ;; HEADER SECTION ;; id = 40937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN SOA ;; ANSWER SECTION (2 records) drought.gov. 86400 IN SOA ( dns07-infra.ncei.noaa.gov. named.dns07-infra.ncei.noaa.gov. 1768442480 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) drought.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260214010120 20260115010120 63061 drought.gov. xXszA82x8RUSo9001JpIXz7RA3UXiSh+Dt3Aw2Kc6tK12dR6TMwsI/Fn4PHlrIFjLj8OwVCto8zQ P+0m7ZrEnuswOp+ahXN6m8WzjpXsZULcXJdplMm/V96zKE69Fn6GYrA8P8rfsJUxNEfimdNcN2cE 7s5QjDPCNsOB+XwWJWc= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-mw.noaa.gov for drought.gov/SOA
	Received 1141 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1141 octets ;; HEADER SECTION ;; id = 45660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN SOA ;; ANSWER SECTION (2 records) drought.gov. 86400 IN SOA ( dns07-infra.ncei.noaa.gov. named.dns07-infra.ncei.noaa.gov. 1768442480 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) drought.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260214010120 20260115010120 63061 drought.gov. xXszA82x8RUSo9001JpIXz7RA3UXiSh+Dt3Aw2Kc6tK12dR6TMwsI/Fn4PHlrIFjLj8OwVCto8zQ P+0m7ZrEnuswOp+ahXN6m8WzjpXsZULcXJdplMm/V96zKE69Fn6GYrA8P8rfsJUxNEfimdNcN2cE 7s5QjDPCNsOB+XwWJWc= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-01.noaa.gov for drought.gov/SOA
	Received 1141 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1141 octets ;; HEADER SECTION ;; id = 65096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN SOA ;; ANSWER SECTION (2 records) drought.gov. 86400 IN SOA ( dns07-infra.ncei.noaa.gov. named.dns07-infra.ncei.noaa.gov. 1768442480 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) drought.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260214010120 20260115010120 63061 drought.gov. xXszA82x8RUSo9001JpIXz7RA3UXiSh+Dt3Aw2Kc6tK12dR6TMwsI/Fn4PHlrIFjLj8OwVCto8zQ P+0m7ZrEnuswOp+ahXN6m8WzjpXsZULcXJdplMm/V96zKE69Fn6GYrA8P8rfsJUxNEfimdNcN2cE 7s5QjDPCNsOB+XwWJWc= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-nw.noaa.gov for drought.gov/SOA
	Received 1141 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1141 octets ;; HEADER SECTION ;; id = 10188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN SOA ;; ANSWER SECTION (2 records) drought.gov. 86400 IN SOA ( dns07-infra.ncei.noaa.gov. named.dns07-infra.ncei.noaa.gov. 1768442480 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) drought.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260214010120 20260115010120 63061 drought.gov. xXszA82x8RUSo9001JpIXz7RA3UXiSh+Dt3Aw2Kc6tK12dR6TMwsI/Fn4PHlrIFjLj8OwVCto8zQ P+0m7ZrEnuswOp+ahXN6m8WzjpXsZULcXJdplMm/V96zKE69Fn6GYrA8P8rfsJUxNEfimdNcN2cE 7s5QjDPCNsOB+XwWJWc= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-02.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1098 octets ;; HEADER SECTION ;; id = 7959 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	drought.gov A RR has value 199.134.75.32
	Found 1 RRSIGs over A RRset
	`drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= )`
	RRSIG=63061 and DNSKEY=63061 verifies the A RRset

drought.gov

	Query to ns-mw.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1098 octets ;; HEADER SECTION ;; id = 48666 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	ns-mw.noaa.gov is authoritative for drought.gov
	Found RRSIG signed by drought.gov zone
	Query to ns-mw.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1098 octets ;; HEADER SECTION ;; id = 20803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	drought.gov A RR has value 199.134.75.32
	Found 1 RRSIGs over A RRset
	`drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= )`
	RRSIG=63061 and DNSKEY=63061 verifies the A RRset

drought.gov

	Query to ns-01.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1098 octets ;; HEADER SECTION ;; id = 64259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	ns-01.noaa.gov is authoritative for drought.gov
	Found RRSIG signed by drought.gov zone
	Query to ns-01.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1098 octets ;; HEADER SECTION ;; id = 34344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	drought.gov A RR has value 199.134.75.32
	Found 1 RRSIGs over A RRset
	`drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= )`
	RRSIG=63061 and DNSKEY=63061 verifies the A RRset

drought.gov

	Query to ns-e.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1098 octets ;; HEADER SECTION ;; id = 60810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	ns-e.noaa.gov is authoritative for drought.gov
	Found RRSIG signed by drought.gov zone
	Query to ns-e.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1098 octets ;; HEADER SECTION ;; id = 13739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	drought.gov A RR has value 199.134.75.32
	Found 1 RRSIGs over A RRset
	`drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= )`
	RRSIG=63061 and DNSKEY=63061 verifies the A RRset

drought.gov

	Query to ns-03.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1098 octets ;; HEADER SECTION ;; id = 18056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	ns-03.noaa.gov is authoritative for drought.gov
	Found RRSIG signed by drought.gov zone
	Query to ns-03.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1098 octets ;; HEADER SECTION ;; id = 3002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	drought.gov A RR has value 199.134.75.32
	Found 1 RRSIGs over A RRset
	`drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= )`
	RRSIG=63061 and DNSKEY=63061 verifies the A RRset

drought.gov

	Query to ns-nw.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1098 octets ;; HEADER SECTION ;; id = 27198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	ns-nw.noaa.gov is authoritative for drought.gov
	Found RRSIG signed by drought.gov zone
	Query to ns-nw.noaa.gov for drought.gov/A
	Received 1098 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1098 octets ;; HEADER SECTION ;; id = 1376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; drought.gov. IN A ;; ANSWER SECTION (2 records) drought.gov. 86400 IN A 199.134.75.32 drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= ) ;; AUTHORITY SECTION (4 records) drought.gov. 86400 IN NS ns-e.noaa.gov. drought.gov. 86400 IN NS ns-nw.noaa.gov. drought.gov. 86400 IN NS ns-mw.noaa.gov. drought.gov. 86400 IN RRSIG ( NS 8 2 86400 20260214010120 20260115010120 63061 drought.gov. a6xg+mQ8yWmJZtm9XQlUqX6wj+Jh74BdAlbVUscwHbgYvw6g0BIGaykR7VTSj/TAeO/cx0L6qfVJ Lh1qt4k2uMwr6Gn7LQ2rKJ7cnP1ihpUEKG0SAg4nOXrrPH016/Hhj28Ro/RJiF9+kWBFborbkVNF yBlopekewB5BdUrPABQ= ) ;; ADDITIONAL SECTION (10 records) ns-e.noaa.gov. 300 IN A 137.75.116.93 ns-mw.noaa.gov. 300 IN A 137.75.112.7 ns-nw.noaa.gov. 300 IN A 137.75.112.58 ns-e.noaa.gov. 300 IN AAAA 2610:20:9200:0:137:75:116:93 ns-mw.noaa.gov. 300 IN AAAA 2610:20:9300:0:137:75:112:7 ns-nw.noaa.gov. 300 IN AAAA 2610:20:9300:1:137:75:112:58 ns-e.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. nmpa+JHb6YjvPjk/SXciZb7RBkcBZDcJM4S+2TuTvmURRaU7V3F1BCABinLPu3Y7btWukdPgEfq+ SpaWzvgPuTpw0Mgd/GxArCxQ7kRv5QJnuRNi2yopwqcj9MZwEx5RG5VgnGOeXPLApn6MO5vgXreS m7MW8WIrOAH8ceWwjco= ) ns-e.noaa.gov. 300 IN RRSIG ( AAAA 8 3 300 20260214010134 20260115010134 28194 noaa.gov. e49OweMjSPFj4yl6NxL8TZ5l7RJIHAI3TvSyZ08tx/YjLFix99RdwUnOr4Mu6rKcyoI8vNZ2bPLx c2bHskXIyJi5WVVZm9DIb066b3yvu/DVTa1CqbupBfPJYcUcr/X27xD96vPtRrQE9baQV+lgd2QV 53vTLUa0HC4tbrP2sHs= ) ns-mw.noaa.gov. 300 IN RRSIG ( A 8 3 300 20260214010134 20260115010134 28194 noaa.gov. HqVdpGMoiDajvkN6sOM3KVGh5POcP2OQ8UjbMBc46aGUQx7/G8caRLMAs33Jw9EhGG5Cw082yxhq 5DQ44Ek/a77OeMzREsamfexC12bckwaybcMOFPBikaUYz/waSGz/2DeJUe7vuO20w0g8otYZBd0m RjOvAl6KFoxX5NWQ4lk= ) ;; { "EDNS-VERSION": 0 }
	drought.gov A RR has value 199.134.75.32
	Found 1 RRSIGs over A RRset
	`drought.gov. 86400 IN RRSIG ( A 8 2 86400 20260214010120 20260115010120 63061 drought.gov. s6KjyfczwRcrKxQX9EFvtPlD8COugltTclqiIWxgJTOkXL2TdKyVA7HoVy+EcPChhKcbJNlgDTei SFi2g62zz2mbmtd6E7Y/D3X6hELM8mvpR5BzuQaZEW/ieRGP3fS3JhAXCG7t38Gn1b5nJ5OLFWCM S6DPzTdwv+mgL1JAL/g= )`
	RRSIG=63061 and DNSKEY=63061 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test drought.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: