DNSSEC Debugger - globe.gov

Domain Name:

Time: 2026-01-16 05:47:56 UTC

Analyzing DNSSEC problems for globe.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 30108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for globe.gov/A
	Received 619 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 619 octets ;; HEADER SECTION ;; id = 52610 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 64297 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 10873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . hRGgiAFflnOZS/m5QmOyMM1E0cFyyRGgn7dXI1UpHMlzZ8lPdCkM+Fo3ZUmH1rletYLNsSGI55QN uP8VMJ34QMoShMxAUijNTLEB956/chBJvCVo/FrkI0uAdtYLNgdUHUQ0gR85pJIXa3oOXwANjaBm aSuI758E27nhcFql/PUoFfoIkbMQ2CSZ5MY+hwqW9Xe4SEBGLXUl7Mz4gvAVGXfD25+QO2E8+r7H ZRBqq5ysazRNJh9/Uw4XpqAZT75NxHWywYS8td6LCECC4zpVEUjXCnTvE+YyQWAyqYDaHDi/RZcE 56QZRHU5/2dywx3XnarzNswifgXCUDg/uACukQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 43487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for globe.gov/A
	Received 315 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 315 octets ;; HEADER SECTION ;; id = 51402 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) globe.gov. 10800 IN NS a1-32.akam.net. globe.gov. 10800 IN NS a12-64.akam.net. globe.gov. 10800 IN NS a14-67.akam.net. globe.gov. 10800 IN NS a5-66.akam.net. globe.gov. 10800 IN NS a8-66.akam.net. globe.gov. 10800 IN NS a9-64.akam.net. globe.gov. 3600 IN DS ( 59296 8 2 2e78e5d3dc0d85261ac73460f0c11027b64e4accae91bfed00b5aaee6c6df1f4 ) globe.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117064756 20260115044756 35496 gov. WkxZRNcmtmtwEPxLYneJaXWKineN5h8k6XENlTsp+ZRF/9iX4mnePvLOVoVCeFXGirdlaQqf8ghS nRDM9x5WGg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for globe.gov/DNSKEY
	Received 315 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 315 octets ;; HEADER SECTION ;; id = 39587 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) globe.gov. 10800 IN NS a1-32.akam.net. globe.gov. 10800 IN NS a12-64.akam.net. globe.gov. 10800 IN NS a14-67.akam.net. globe.gov. 10800 IN NS a5-66.akam.net. globe.gov. 10800 IN NS a8-66.akam.net. globe.gov. 10800 IN NS a9-64.akam.net. globe.gov. 3600 IN DS ( 59296 8 2 2e78e5d3dc0d85261ac73460f0c11027b64e4accae91bfed00b5aaee6c6df1f4 ) globe.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117064756 20260115044756 35496 gov. USz2pnXtWhRcvnu8DmZ9isQwVvFEh1yZ3nIUZptUxykvWA3BbkZuiMX1bGmMYFk3YPmdW2FQX+bo WRWs8cQT1Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone globe.gov

globe.gov

	Checking DS between gov and globe.gov
	Query to d.ns.gov for globe.gov/DS
	Received 185 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 185 octets ;; HEADER SECTION ;; id = 55182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN DS ;; ANSWER SECTION (2 records) globe.gov. 3600 IN DS ( 59296 8 2 2e78e5d3dc0d85261ac73460f0c11027b64e4accae91bfed00b5aaee6c6df1f4 ) globe.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117064756 20260115044756 35496 gov. 6TvBs3IITuY2mwIX9LdqXeaidUHHGjEGgzHQ9e2SK0nxSmEvzTXUSUEO7JG0FMljY+zTMeS2zJDD VlS29WpkHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for globe.gov in the gov zone
	DS=59296/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`globe.gov. 3600 IN RRSIG ( DS 13 2 3600 20260117064756 20260115044756 35496 gov. 6TvBs3IITuY2mwIX9LdqXeaidUHHGjEGgzHQ9e2SK0nxSmEvzTXUSUEO7JG0FMljY+zTMeS2zJDD VlS29WpkHw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=59296/SHA-256 is now in the chain-of-trust
	`globe.gov. 3600 IN DS ( 59296 8 2 2e78e5d3dc0d85261ac73460f0c11027b64e4accae91bfed00b5aaee6c6df1f4 )`
	Query to a5-66.akam.net for globe.gov/DNSKEY
	Received 1076 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 1076 octets ;; HEADER SECTION ;; id = 61663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN DNSKEY ;; ANSWER SECTION (5 records) globe.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAdf7WAo23AcpjLRRUp1eA3zRFFBX1moM0mTOOTexH60dG3ySFdDFvYl6XTYirfUKB8ToPKFW kH7MV4e7rEhxGaKL7TjwcBcowMlPMm4cT2USE8oRDboP205toi88E5ohDcgbUxg+Mg6W4EwqFxhY g9lrBdlyMtvFrk2cXl4qvk7f4DxE843GHYAxuxMeCraB2zuPGLPzyR4EEdmARLWaPDHdU6s68mac fKb5giJUtbRfrnf8JClUf0hoZvZt3OZ69uvBfS7It+iHaCTtcbHYvbbbZSzLda3VywyLPgV89+il asy0wCeXWd3JqrsbeJUQ2fPREXj1yfjasnUM3NmDK+E= ) ; keytag 59296 globe.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcBbOcmaEJ4DXMH80q53AUjKAkSvyC/dsy6saSTVReq2EtjTEs8t4S0koly0cIU7DAK64J3B kPQONPhiemRH1uB9H8R/KmxOSdxVpWJHZT6vgVkvgTsetdZbSzi0VIZ67GnSmtPb4ZqJHyOJgtVH XHcRMnEJTX21pgsnzUMrubq3 ) ; keytag 57040 globe.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcE4cFNcVWqoyYFyp6RcCjIulekfewF0pcSJ/O7EV9inITd95wpmQnkph92f71UVMr6ztkHv hoSE/HVi59HnSZR2Vxa5OfOtJE6a9JFEhlcd6LFD0/JToeU0QwRQ13uFCPUOegKll4ERAjRoFJ1K yPWhKiv7meVAkIgy4XM11i3F ) ; keytag 12183 globe.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260211220807 20260112210808 57040 globe.gov. QjhuQKDcpafoEBQ84IZOIXJQ6X1esQwMaY6Qnw3n4MyaTuzpBCLcs6RuMDhh7scnBrw5IPxh5PCc 2jzOcdb7vlA96CqUOHzQBwTiWPirRSBpGbG8bRh60dDpyGpSuN5uxnCqbtWbhu6Ck77SyHueqL4R 0OdmTG7ECQv5T79wAzw= ) globe.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260211220807 20260112210808 59296 globe.gov. IC2+NBtT6D6fyb/VrQWJgAygJ7+b4Q0LLB6HlcfV0QbZAJuozDcg3nGhDzfsbk8CQb2DkyVh+YAc GpKiIEW3Bxe4lZlsk9jTM/pYGVKQCy36yipBchiAqYz2HvMH11eFbeRy3x9pbXG4fu76bYb8anFR eZwZpocVfoSHGEx0dzticgRoFYFkWBKC8xD7n4HOXx1K1TJxjWuDjosdYafpD/NirVpBkc6kEiXG YP5vgVo5kFvsY6OpAKYfmE21V9GhpTfL4L6wDa3NoohsJ0BRsjmo0VFDp+Z7mdFzalnvcJuwpf3q L2fVOIJCspCrCA/o+SB7hK0qAB7+hwglP+cmnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for globe.gov
	`globe.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAdf7WAo23AcpjLRRUp1eA3zRFFBX1moM0mTOOTexH60dG3ySFdDFvYl6XTYirfUKB8ToPKFW kH7MV4e7rEhxGaKL7TjwcBcowMlPMm4cT2USE8oRDboP205toi88E5ohDcgbUxg+Mg6W4EwqFxhY g9lrBdlyMtvFrk2cXl4qvk7f4DxE843GHYAxuxMeCraB2zuPGLPzyR4EEdmARLWaPDHdU6s68mac fKb5giJUtbRfrnf8JClUf0hoZvZt3OZ69uvBfS7It+iHaCTtcbHYvbbbZSzLda3VywyLPgV89+il asy0wCeXWd3JqrsbeJUQ2fPREXj1yfjasnUM3NmDK+E= ) ; keytag 59296`
	`globe.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcBbOcmaEJ4DXMH80q53AUjKAkSvyC/dsy6saSTVReq2EtjTEs8t4S0koly0cIU7DAK64J3B kPQONPhiemRH1uB9H8R/KmxOSdxVpWJHZT6vgVkvgTsetdZbSzi0VIZ67GnSmtPb4ZqJHyOJgtVH XHcRMnEJTX21pgsnzUMrubq3 ) ; keytag 57040`
	`globe.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcE4cFNcVWqoyYFyp6RcCjIulekfewF0pcSJ/O7EV9inITd95wpmQnkph92f71UVMr6ztkHv hoSE/HVi59HnSZR2Vxa5OfOtJE6a9JFEhlcd6LFD0/JToeU0QwRQ13uFCPUOegKll4ERAjRoFJ1K yPWhKiv7meVAkIgy4XM11i3F ) ; keytag 12183`
	DNSKEY=59296/SEP is now in the chain-of-trust
	DS=59296/SHA-256 verifies DNSKEY=59296/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`globe.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260211220807 20260112210808 57040 globe.gov. QjhuQKDcpafoEBQ84IZOIXJQ6X1esQwMaY6Qnw3n4MyaTuzpBCLcs6RuMDhh7scnBrw5IPxh5PCc 2jzOcdb7vlA96CqUOHzQBwTiWPirRSBpGbG8bRh60dDpyGpSuN5uxnCqbtWbhu6Ck77SyHueqL4R 0OdmTG7ECQv5T79wAzw= )`
	`globe.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260211220807 20260112210808 59296 globe.gov. IC2+NBtT6D6fyb/VrQWJgAygJ7+b4Q0LLB6HlcfV0QbZAJuozDcg3nGhDzfsbk8CQb2DkyVh+YAc GpKiIEW3Bxe4lZlsk9jTM/pYGVKQCy36yipBchiAqYz2HvMH11eFbeRy3x9pbXG4fu76bYb8anFR eZwZpocVfoSHGEx0dzticgRoFYFkWBKC8xD7n4HOXx1K1TJxjWuDjosdYafpD/NirVpBkc6kEiXG YP5vgVo5kFvsY6OpAKYfmE21V9GhpTfL4L6wDa3NoohsJ0BRsjmo0VFDp+Z7mdFzalnvcJuwpf3q L2fVOIJCspCrCA/o+SB7hK0qAB7+hwglP+cmnw== )`
	RRSIG=57040 and DNSKEY=57040 verifies the DNSKEY RRset
	RRSIG=59296 and DNSKEY=59296/SEP verifies the DNSKEY RRset
	DNSKEY=57040 is now in the chain-of-trust
	DNSKEY=12183 is now in the chain-of-trust
	Query to a8-66.akam.net for globe.gov/A
	Received 239 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 239 octets ;; HEADER SECTION ;; id = 47352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-66.akam.net is authoritative for globe.gov
	Found RRSIG signed by globe.gov zone
	Query to a9-64.akam.net for globe.gov/SOA
	Received 551 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 551 octets ;; HEADER SECTION ;; id = 57644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN SOA ;; ANSWER SECTION (2 records) globe.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 20985 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) globe.gov. 600 IN RRSIG ( SOA 8 2 600 20260214223323 20260115213323 57040 globe.gov. i/JJHMQrD1v9u7g0xJ0y+ZAbmsjR/QmWdy16vmLOQG0sAC7hQlhmO6DO+8jwyObJbp18MyB+vdml My1TQNWBDVYmj8NdQpSvivBNLNrSHnLwRDXjHfsojZZZIx0R8Z6dFKf03tx93FFaQrDEFyMJxHy1 IBg4hk5Dm4+o+002xbg= ) ;; AUTHORITY SECTION (7 records) globe.gov. 600 IN NS a12-64.akam.net. globe.gov. 600 IN NS a9-64.akam.net. globe.gov. 600 IN NS a8-66.akam.net. globe.gov. 600 IN NS a1-32.akam.net. globe.gov. 600 IN NS a5-66.akam.net. globe.gov. 600 IN NS a14-67.akam.net. globe.gov. 600 IN RRSIG ( NS 8 2 600 20260125151918 20251226142532 57040 globe.gov. ZVSChApydjHLby7A8Y9kZkcGMZHPs9pFBGJrusjgaNkreADKGagothpvtfUHb3B5GM4N58Cw9MLE 4BL39y/RxZRv/OcSigMWVY8nNqL6Tw6dqoZv2Pj8DwdzPHJ9Y7l4A+0HCF6UQOhmIbGMrcbQ4TEp wqu1xif7+0YlUKBr6lg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for globe.gov/SOA
	Received 551 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 551 octets ;; HEADER SECTION ;; id = 43950 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN SOA ;; ANSWER SECTION (2 records) globe.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 20985 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) globe.gov. 600 IN RRSIG ( SOA 8 2 600 20260214223323 20260115213323 57040 globe.gov. i/JJHMQrD1v9u7g0xJ0y+ZAbmsjR/QmWdy16vmLOQG0sAC7hQlhmO6DO+8jwyObJbp18MyB+vdml My1TQNWBDVYmj8NdQpSvivBNLNrSHnLwRDXjHfsojZZZIx0R8Z6dFKf03tx93FFaQrDEFyMJxHy1 IBg4hk5Dm4+o+002xbg= ) ;; AUTHORITY SECTION (7 records) globe.gov. 600 IN NS a12-64.akam.net. globe.gov. 600 IN NS a14-67.akam.net. globe.gov. 600 IN NS a1-32.akam.net. globe.gov. 600 IN NS a8-66.akam.net. globe.gov. 600 IN NS a9-64.akam.net. globe.gov. 600 IN NS a5-66.akam.net. globe.gov. 600 IN RRSIG ( NS 8 2 600 20260125151918 20251226142532 57040 globe.gov. ZVSChApydjHLby7A8Y9kZkcGMZHPs9pFBGJrusjgaNkreADKGagothpvtfUHb3B5GM4N58Cw9MLE 4BL39y/RxZRv/OcSigMWVY8nNqL6Tw6dqoZv2Pj8DwdzPHJ9Y7l4A+0HCF6UQOhmIbGMrcbQ4TEp wqu1xif7+0YlUKBr6lg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-67.akam.net for globe.gov/SOA
	Received 551 bytes from 184.26.161.67
	;; Response received from [184.26.161.67] 551 octets ;; HEADER SECTION ;; id = 60381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN SOA ;; ANSWER SECTION (2 records) globe.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 20985 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) globe.gov. 600 IN RRSIG ( SOA 8 2 600 20260214223323 20260115213323 57040 globe.gov. i/JJHMQrD1v9u7g0xJ0y+ZAbmsjR/QmWdy16vmLOQG0sAC7hQlhmO6DO+8jwyObJbp18MyB+vdml My1TQNWBDVYmj8NdQpSvivBNLNrSHnLwRDXjHfsojZZZIx0R8Z6dFKf03tx93FFaQrDEFyMJxHy1 IBg4hk5Dm4+o+002xbg= ) ;; AUTHORITY SECTION (7 records) globe.gov. 600 IN NS a14-67.akam.net. globe.gov. 600 IN NS a5-66.akam.net. globe.gov. 600 IN NS a9-64.akam.net. globe.gov. 600 IN NS a12-64.akam.net. globe.gov. 600 IN NS a1-32.akam.net. globe.gov. 600 IN NS a8-66.akam.net. globe.gov. 600 IN RRSIG ( NS 8 2 600 20260125151918 20251226142532 57040 globe.gov. ZVSChApydjHLby7A8Y9kZkcGMZHPs9pFBGJrusjgaNkreADKGagothpvtfUHb3B5GM4N58Cw9MLE 4BL39y/RxZRv/OcSigMWVY8nNqL6Tw6dqoZv2Pj8DwdzPHJ9Y7l4A+0HCF6UQOhmIbGMrcbQ4TEp wqu1xif7+0YlUKBr6lg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-32.akam.net for globe.gov/SOA
	Received 551 bytes from 193.108.91.32
	;; Response received from [193.108.91.32] 551 octets ;; HEADER SECTION ;; id = 24355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN SOA ;; ANSWER SECTION (2 records) globe.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 20985 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) globe.gov. 600 IN RRSIG ( SOA 8 2 600 20260214223323 20260115213323 57040 globe.gov. i/JJHMQrD1v9u7g0xJ0y+ZAbmsjR/QmWdy16vmLOQG0sAC7hQlhmO6DO+8jwyObJbp18MyB+vdml My1TQNWBDVYmj8NdQpSvivBNLNrSHnLwRDXjHfsojZZZIx0R8Z6dFKf03tx93FFaQrDEFyMJxHy1 IBg4hk5Dm4+o+002xbg= ) ;; AUTHORITY SECTION (7 records) globe.gov. 600 IN NS a12-64.akam.net. globe.gov. 600 IN NS a5-66.akam.net. globe.gov. 600 IN NS a1-32.akam.net. globe.gov. 600 IN NS a9-64.akam.net. globe.gov. 600 IN NS a14-67.akam.net. globe.gov. 600 IN NS a8-66.akam.net. globe.gov. 600 IN RRSIG ( NS 8 2 600 20260125151918 20251226142532 57040 globe.gov. ZVSChApydjHLby7A8Y9kZkcGMZHPs9pFBGJrusjgaNkreADKGagothpvtfUHb3B5GM4N58Cw9MLE 4BL39y/RxZRv/OcSigMWVY8nNqL6Tw6dqoZv2Pj8DwdzPHJ9Y7l4A+0HCF6UQOhmIbGMrcbQ4TEp wqu1xif7+0YlUKBr6lg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-64.akam.net for globe.gov/SOA
	Received 551 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 551 octets ;; HEADER SECTION ;; id = 43158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN SOA ;; ANSWER SECTION (2 records) globe.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 20985 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) globe.gov. 600 IN RRSIG ( SOA 8 2 600 20260214223323 20260115213323 57040 globe.gov. i/JJHMQrD1v9u7g0xJ0y+ZAbmsjR/QmWdy16vmLOQG0sAC7hQlhmO6DO+8jwyObJbp18MyB+vdml My1TQNWBDVYmj8NdQpSvivBNLNrSHnLwRDXjHfsojZZZIx0R8Z6dFKf03tx93FFaQrDEFyMJxHy1 IBg4hk5Dm4+o+002xbg= ) ;; AUTHORITY SECTION (7 records) globe.gov. 600 IN NS a12-64.akam.net. globe.gov. 600 IN NS a5-66.akam.net. globe.gov. 600 IN NS a8-66.akam.net. globe.gov. 600 IN NS a14-67.akam.net. globe.gov. 600 IN NS a1-32.akam.net. globe.gov. 600 IN NS a9-64.akam.net. globe.gov. 600 IN RRSIG ( NS 8 2 600 20260125151918 20251226142532 57040 globe.gov. ZVSChApydjHLby7A8Y9kZkcGMZHPs9pFBGJrusjgaNkreADKGagothpvtfUHb3B5GM4N58Cw9MLE 4BL39y/RxZRv/OcSigMWVY8nNqL6Tw6dqoZv2Pj8DwdzPHJ9Y7l4A+0HCF6UQOhmIbGMrcbQ4TEp wqu1xif7+0YlUKBr6lg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-66.akam.net for globe.gov/A
	Received 239 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 239 octets ;; HEADER SECTION ;; id = 60200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	globe.gov A RR has value 174.129.207.173
	globe.gov A RR has value 34.198.117.177
	Found 1 RRSIGs over A RRset
	`globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= )`
	RRSIG=57040 and DNSKEY=57040 verifies the A RRset

globe.gov

	Query to a9-64.akam.net for globe.gov/A
	Received 239 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 239 octets ;; HEADER SECTION ;; id = 19689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for globe.gov
	Found RRSIG signed by globe.gov zone
	Query to a9-64.akam.net for globe.gov/A
	Received 239 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 239 octets ;; HEADER SECTION ;; id = 28195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	globe.gov A RR has value 174.129.207.173
	globe.gov A RR has value 34.198.117.177
	Found 1 RRSIGs over A RRset
	`globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= )`
	RRSIG=57040 and DNSKEY=57040 verifies the A RRset

globe.gov

	Query to a12-64.akam.net for globe.gov/A
	Received 239 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 239 octets ;; HEADER SECTION ;; id = 1695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-64.akam.net is authoritative for globe.gov
	Found RRSIG signed by globe.gov zone
	Query to a12-64.akam.net for globe.gov/A
	Received 239 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 239 octets ;; HEADER SECTION ;; id = 38568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	globe.gov A RR has value 34.198.117.177
	globe.gov A RR has value 174.129.207.173
	Found 1 RRSIGs over A RRset
	`globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= )`
	RRSIG=57040 and DNSKEY=57040 verifies the A RRset

globe.gov

	Query to a1-32.akam.net for globe.gov/A
	Received 239 bytes from 193.108.91.32
	;; Response received from [193.108.91.32] 239 octets ;; HEADER SECTION ;; id = 20790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-32.akam.net is authoritative for globe.gov
	Found RRSIG signed by globe.gov zone
	Query to a1-32.akam.net for globe.gov/A
	Received 239 bytes from 193.108.91.32
	;; Response received from [193.108.91.32] 239 octets ;; HEADER SECTION ;; id = 49922 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	globe.gov A RR has value 34.198.117.177
	globe.gov A RR has value 174.129.207.173
	Found 1 RRSIGs over A RRset
	`globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= )`
	RRSIG=57040 and DNSKEY=57040 verifies the A RRset

globe.gov

	Query to a14-67.akam.net for globe.gov/A
	Received 239 bytes from 184.26.161.67
	;; Response received from [184.26.161.67] 239 octets ;; HEADER SECTION ;; id = 60178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-67.akam.net is authoritative for globe.gov
	Found RRSIG signed by globe.gov zone
	Query to a14-67.akam.net for globe.gov/A
	Received 239 bytes from 184.26.161.67
	;; Response received from [184.26.161.67] 239 octets ;; HEADER SECTION ;; id = 56561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	globe.gov A RR has value 174.129.207.173
	globe.gov A RR has value 34.198.117.177
	Found 1 RRSIGs over A RRset
	`globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= )`
	RRSIG=57040 and DNSKEY=57040 verifies the A RRset

globe.gov

	Query to a5-66.akam.net for globe.gov/A
	Received 239 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 239 octets ;; HEADER SECTION ;; id = 63722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for globe.gov
	Found RRSIG signed by globe.gov zone
	Query to a5-66.akam.net for globe.gov/A
	Received 239 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 239 octets ;; HEADER SECTION ;; id = 13000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; globe.gov. IN A ;; ANSWER SECTION (3 records) globe.gov. 60 IN A 174.129.207.173 globe.gov. 60 IN A 34.198.117.177 globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	globe.gov A RR has value 174.129.207.173
	globe.gov A RR has value 34.198.117.177
	Found 1 RRSIGs over A RRset
	`globe.gov. 60 IN RRSIG ( A 8 2 60 20260202132959 20260103132346 57040 globe.gov. cIT43Q2z9r1F+owHEGKgYdzBQ1CI8NzoTCceqOSRCd9Gw+Wyc7TELsIhPrLnVxYEpB/NhfX40Nup 4n/dy8H4W1V6PY/YjI2gKD+4GRnqclPXiKAk52MY7BFXtPjGu5eosIZ7KZlUngI3Nab/O8PU2klj W6a3ycru9LAcNR3K9Dw= )`
	RRSIG=57040 and DNSKEY=57040 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test globe.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: