DNSSEC Debugger

Domain Name:

Time: 2025-10-14 14:05:08 UTC

Analyzing DNSSEC problems for iad.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 52764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to f.root-servers.net for iad.gov/A
	Received 614 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 614 octets ;; HEADER SECTION ;; id = 41389 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251027130000 20251014120000 61809 . n5E0ucUoJAlUnS7sQ1tewryaA0RZClSXt1V0+cGfdRJeIpUvYa6rgf8uES2MqmupP4xHmmE2EkiH vZnQoZbd2fQU4OlDJ43/h9jiIknukuZMc4riOBIIvypXvO6WG2RQ3hK2vMGmziqjuOAd67AQTssF ubp4O2/eOvS7M/i+PTZisJu2RFDC9UU0s3LaIsqyIMOhxbbI5FSHZErisarx+/R2AU2kfaFfp9F7 lMzTfwv8R4bd9koIxg+RNsP0Qz/hAreKnKdbpffVvJhJsCPVFRc7CFoD/uJ9toy0inmzpywOa3Gn pYvwzej0i0J/iNM4gCmW36O2IseBnrjKyogJkw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 4863 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251027130000 20251014120000 61809 . n5E0ucUoJAlUnS7sQ1tewryaA0RZClSXt1V0+cGfdRJeIpUvYa6rgf8uES2MqmupP4xHmmE2EkiH vZnQoZbd2fQU4OlDJ43/h9jiIknukuZMc4riOBIIvypXvO6WG2RQ3hK2vMGmziqjuOAd67AQTssF ubp4O2/eOvS7M/i+PTZisJu2RFDC9UU0s3LaIsqyIMOhxbbI5FSHZErisarx+/R2AU2kfaFfp9F7 lMzTfwv8R4bd9koIxg+RNsP0Qz/hAreKnKdbpffVvJhJsCPVFRc7CFoD/uJ9toy0inmzpywOa3Gn pYvwzej0i0J/iNM4gCmW36O2IseBnrjKyogJkw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 60066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251027130000 20251014120000 61809 . n5E0ucUoJAlUnS7sQ1tewryaA0RZClSXt1V0+cGfdRJeIpUvYa6rgf8uES2MqmupP4xHmmE2EkiH vZnQoZbd2fQU4OlDJ43/h9jiIknukuZMc4riOBIIvypXvO6WG2RQ3hK2vMGmziqjuOAd67AQTssF ubp4O2/eOvS7M/i+PTZisJu2RFDC9UU0s3LaIsqyIMOhxbbI5FSHZErisarx+/R2AU2kfaFfp9F7 lMzTfwv8R4bd9koIxg+RNsP0Qz/hAreKnKdbpffVvJhJsCPVFRc7CFoD/uJ9toy0inmzpywOa3Gn pYvwzej0i0J/iNM4gCmW36O2IseBnrjKyogJkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251027130000 20251014120000 61809 . n5E0ucUoJAlUnS7sQ1tewryaA0RZClSXt1V0+cGfdRJeIpUvYa6rgf8uES2MqmupP4xHmmE2EkiH vZnQoZbd2fQU4OlDJ43/h9jiIknukuZMc4riOBIIvypXvO6WG2RQ3hK2vMGmziqjuOAd67AQTssF ubp4O2/eOvS7M/i+PTZisJu2RFDC9UU0s3LaIsqyIMOhxbbI5FSHZErisarx+/R2AU2kfaFfp9F7 lMzTfwv8R4bd9koIxg+RNsP0Qz/hAreKnKdbpffVvJhJsCPVFRc7CFoD/uJ9toy0inmzpywOa3Gn pYvwzej0i0J/iNM4gCmW36O2IseBnrjKyogJkw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 21548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for iad.gov/A
	Received 315 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 315 octets ;; HEADER SECTION ;; id = 59263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) iad.gov. 10800 IN NS a1-107.akam.net. iad.gov. 10800 IN NS a11-66.akam.net. iad.gov. 10800 IN NS a12-67.akam.net. iad.gov. 10800 IN NS a2-64.akam.net. iad.gov. 10800 IN NS a24-65.akam.net. iad.gov. 10800 IN NS a5-66.akam.net. iad.gov. 3600 IN DS ( 7830 13 2 86eb65d258d69aaa782d6c1a163cda8771a8bfbb6dbef3c38807a51d5f6ac75e ) iad.gov. 3600 IN RRSIG ( DS 13 2 3600 20251015150508 20251013130508 35496 gov. DuVPIzQrmEZ9MAFJIrIP39+GB4JD/AFRoZtWDXh3dktuVMaiw6F51qd7Aj5pk05sjhIyIFlCZBiL ZPNlWOcqSA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for iad.gov/DNSKEY
	Received 315 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 315 octets ;; HEADER SECTION ;; id = 33839 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) iad.gov. 10800 IN NS a1-107.akam.net. iad.gov. 10800 IN NS a11-66.akam.net. iad.gov. 10800 IN NS a12-67.akam.net. iad.gov. 10800 IN NS a2-64.akam.net. iad.gov. 10800 IN NS a24-65.akam.net. iad.gov. 10800 IN NS a5-66.akam.net. iad.gov. 3600 IN DS ( 7830 13 2 86eb65d258d69aaa782d6c1a163cda8771a8bfbb6dbef3c38807a51d5f6ac75e ) iad.gov. 3600 IN RRSIG ( DS 13 2 3600 20251015150508 20251013130508 35496 gov. FkjL1dQDhnUcaW9xRo3yerwDdV4D6/Iiod3PGyi8+rfzGo0C/SiE2dhZhiEfxALYSrqX0bo1ikWK uY3e2ea6rg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone iad.gov

iad.gov

	Checking DS between gov and iad.gov
	Query to c.ns.gov for iad.gov/DS
	Received 183 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 183 octets ;; HEADER SECTION ;; id = 59083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN DS ;; ANSWER SECTION (2 records) iad.gov. 3600 IN DS ( 7830 13 2 86eb65d258d69aaa782d6c1a163cda8771a8bfbb6dbef3c38807a51d5f6ac75e ) iad.gov. 3600 IN RRSIG ( DS 13 2 3600 20251015150508 20251013130508 35496 gov. GZ0K1/tc0+AlSKOrhyGcP6PpBjRFd7R85vF/q/+1urlGNHPONN9/axi1PKgs1Qei2haVJxTppFIL etK9Heqwbg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for iad.gov in the gov zone
	DS=7830/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`iad.gov. 3600 IN RRSIG ( DS 13 2 3600 20251015150508 20251013130508 35496 gov. GZ0K1/tc0+AlSKOrhyGcP6PpBjRFd7R85vF/q/+1urlGNHPONN9/axi1PKgs1Qei2haVJxTppFIL etK9Heqwbg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=7830/SHA-256 is now in the chain-of-trust
	`iad.gov. 3600 IN DS ( 7830 13 2 86eb65d258d69aaa782d6c1a163cda8771a8bfbb6dbef3c38807a51d5f6ac75e )`
	Query to a12-67.akam.net for iad.gov/DNSKEY
	Received 562 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 562 octets ;; HEADER SECTION ;; id = 54665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN DNSKEY ;; ANSWER SECTION (6 records) iad.gov. 7200 IN DNSKEY ( 257 3 13 /0BjafdfEv2/qmMKYO8pGdijmkVI607cknI4xvWQy6F1WpoHL5iXHyez42W9v85+25+OXunA7qQU r+mOOzu/NA== ) ; keytag 23923 iad.gov. 7200 IN DNSKEY ( 257 3 13 9PaYaiyFDamqlLk8Mbig/uZWwaWYBBDvC9qtaebvpAHOXMDlP4o9+t3yk+xiPCUlhuBFXs1RIksA raZwwJ1dqw== ) ; keytag 7830 iad.gov. 7200 IN DNSKEY ( 256 3 13 gNThlSxI1XEdWxNLrdcg6CFgaYlLJoMWQ0LwW2SI/gHbErawOySd4TZddKvFhf4nf89iiXcoNnCM plbuz7GstQ== ) ; keytag 8276 iad.gov. 7200 IN DNSKEY ( 256 3 13 olo4nbr214S/itAuGJ79I/PNVVanABTHtj2YR3K1DT0ewt3roqjwI/OC9AwzFmlLrWK/I80ela6M 1Av9Sp2qtQ== ) ; keytag 23364 iad.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20251017112758 20251014102758 7830 iad.gov. Jff7u8qj78kBKcmUB05gEgCYwM/DveoxR9JY8AB3HsdA1/YcV9y2RgC3ZRPtUiniXF56rQiiyOYI ojhwL5+g0g== ) iad.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20251017112758 20251014102758 23923 iad.gov. O98NI0PQoYFP4NOXH1nMo4iGP9Rxw14S0MKEK/iOfi0j7E1PqGjsYP0KUlPdIbcKnbDrpQW3OgSt Kpdl0ERY8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for iad.gov
	`iad.gov. 7200 IN DNSKEY ( 257 3 13 /0BjafdfEv2/qmMKYO8pGdijmkVI607cknI4xvWQy6F1WpoHL5iXHyez42W9v85+25+OXunA7qQU r+mOOzu/NA== ) ; keytag 23923`
	`iad.gov. 7200 IN DNSKEY ( 257 3 13 9PaYaiyFDamqlLk8Mbig/uZWwaWYBBDvC9qtaebvpAHOXMDlP4o9+t3yk+xiPCUlhuBFXs1RIksA raZwwJ1dqw== ) ; keytag 7830`
	`iad.gov. 7200 IN DNSKEY ( 256 3 13 gNThlSxI1XEdWxNLrdcg6CFgaYlLJoMWQ0LwW2SI/gHbErawOySd4TZddKvFhf4nf89iiXcoNnCM plbuz7GstQ== ) ; keytag 8276`
	`iad.gov. 7200 IN DNSKEY ( 256 3 13 olo4nbr214S/itAuGJ79I/PNVVanABTHtj2YR3K1DT0ewt3roqjwI/OC9AwzFmlLrWK/I80ela6M 1Av9Sp2qtQ== ) ; keytag 23364`
	DNSKEY=7830/SEP is now in the chain-of-trust
	DS=7830/SHA-256 verifies DNSKEY=7830/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`iad.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20251017112758 20251014102758 7830 iad.gov. Jff7u8qj78kBKcmUB05gEgCYwM/DveoxR9JY8AB3HsdA1/YcV9y2RgC3ZRPtUiniXF56rQiiyOYI ojhwL5+g0g== )`
	`iad.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20251017112758 20251014102758 23923 iad.gov. O98NI0PQoYFP4NOXH1nMo4iGP9Rxw14S0MKEK/iOfi0j7E1PqGjsYP0KUlPdIbcKnbDrpQW3OgSt Kpdl0ERY8g== )`
	RRSIG=7830 and DNSKEY=7830/SEP verifies the DNSKEY RRset
	RRSIG=23923 and DNSKEY=23923/SEP verifies the DNSKEY RRset
	DNSKEY=23923/SEP is now in the chain-of-trust
	DNSKEY=8276 is now in the chain-of-trust
	DNSKEY=23364 is now in the chain-of-trust
	Query to a2-64.akam.net for iad.gov/A
	Received 171 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 171 octets ;; HEADER SECTION ;; id = 18582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. t36MbWeTJ2L1lqCKUILfLAgJLllHqQ5i0hRNooqgHnz2Weuwek4+7anKTIwx0jhh79fYP4Ixk00G T/FpJSrK2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a2-64.akam.net is authoritative for iad.gov
	Found RRSIG signed by iad.gov zone
	Query to a1-107.akam.net for iad.gov/SOA
	Received 421 bytes from 193.108.91.107
	;; Response received from [193.108.91.107] 421 octets ;; HEADER SECTION ;; id = 45441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN SOA ;; ANSWER SECTION (2 records) iad.gov. 300 IN SOA ( a1-107.akam.net. hostmaster.iad.gov. 2022082319 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) iad.gov. 300 IN RRSIG ( SOA 13 2 300 20251017112758 20251014102758 23364 iad.gov. f/ywCHedDMqv+85pK0li0JWyK7wCA/EomHJbssuwG8H1XyH+VZBKcDph/rAkoTNQjLkll/5IRHCK 5YuV8dxY8Q== ) ;; AUTHORITY SECTION (7 records) iad.gov. 86400 IN NS a2-64.akam.net. iad.gov. 86400 IN NS a11-66.akam.net. iad.gov. 86400 IN NS a5-66.akam.net. iad.gov. 86400 IN NS a1-107.akam.net. iad.gov. 86400 IN NS a24-65.akam.net. iad.gov. 86400 IN NS a12-67.akam.net. iad.gov. 86400 IN RRSIG ( NS 13 2 86400 20251017112758 20251014102758 23364 iad.gov. KvnkCj5Pleg9XahzcYQSXzWF1z6gwzOBAos3OJxmpQQrFpIaq1yA26AhMyp9R+mqIPOqk4GJVb9X rc15TwFU3A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a11-66.akam.net for iad.gov/SOA
	Received 421 bytes from 84.53.139.66
	;; Response received from [84.53.139.66] 421 octets ;; HEADER SECTION ;; id = 52717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN SOA ;; ANSWER SECTION (2 records) iad.gov. 300 IN SOA ( a1-107.akam.net. hostmaster.iad.gov. 2022082319 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) iad.gov. 300 IN RRSIG ( SOA 13 2 300 20251017112758 20251014102758 23364 iad.gov. f/ywCHedDMqv+85pK0li0JWyK7wCA/EomHJbssuwG8H1XyH+VZBKcDph/rAkoTNQjLkll/5IRHCK 5YuV8dxY8Q== ) ;; AUTHORITY SECTION (7 records) iad.gov. 86400 IN NS a1-107.akam.net. iad.gov. 86400 IN NS a2-64.akam.net. iad.gov. 86400 IN NS a11-66.akam.net. iad.gov. 86400 IN NS a12-67.akam.net. iad.gov. 86400 IN NS a24-65.akam.net. iad.gov. 86400 IN NS a5-66.akam.net. iad.gov. 86400 IN RRSIG ( NS 13 2 86400 20251017112758 20251014102758 23364 iad.gov. KvnkCj5Pleg9XahzcYQSXzWF1z6gwzOBAos3OJxmpQQrFpIaq1yA26AhMyp9R+mqIPOqk4GJVb9X rc15TwFU3A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-67.akam.net for iad.gov/SOA
	Received 421 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 421 octets ;; HEADER SECTION ;; id = 41760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN SOA ;; ANSWER SECTION (2 records) iad.gov. 300 IN SOA ( a1-107.akam.net. hostmaster.iad.gov. 2022082319 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) iad.gov. 300 IN RRSIG ( SOA 13 2 300 20251017112758 20251014102758 23364 iad.gov. f/ywCHedDMqv+85pK0li0JWyK7wCA/EomHJbssuwG8H1XyH+VZBKcDph/rAkoTNQjLkll/5IRHCK 5YuV8dxY8Q== ) ;; AUTHORITY SECTION (7 records) iad.gov. 86400 IN NS a2-64.akam.net. iad.gov. 86400 IN NS a12-67.akam.net. iad.gov. 86400 IN NS a5-66.akam.net. iad.gov. 86400 IN NS a24-65.akam.net. iad.gov. 86400 IN NS a11-66.akam.net. iad.gov. 86400 IN NS a1-107.akam.net. iad.gov. 86400 IN RRSIG ( NS 13 2 86400 20251017112758 20251014102758 23364 iad.gov. KvnkCj5Pleg9XahzcYQSXzWF1z6gwzOBAos3OJxmpQQrFpIaq1yA26AhMyp9R+mqIPOqk4GJVb9X rc15TwFU3A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a24-65.akam.net for iad.gov/SOA
	Received 421 bytes from 2.16.130.65
	;; Response received from [2.16.130.65] 421 octets ;; HEADER SECTION ;; id = 54359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN SOA ;; ANSWER SECTION (2 records) iad.gov. 300 IN SOA ( a1-107.akam.net. hostmaster.iad.gov. 2022082319 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) iad.gov. 300 IN RRSIG ( SOA 13 2 300 20251017112758 20251014102758 23364 iad.gov. f/ywCHedDMqv+85pK0li0JWyK7wCA/EomHJbssuwG8H1XyH+VZBKcDph/rAkoTNQjLkll/5IRHCK 5YuV8dxY8Q== ) ;; AUTHORITY SECTION (7 records) iad.gov. 86400 IN NS a12-67.akam.net. iad.gov. 86400 IN NS a24-65.akam.net. iad.gov. 86400 IN NS a2-64.akam.net. iad.gov. 86400 IN NS a11-66.akam.net. iad.gov. 86400 IN NS a5-66.akam.net. iad.gov. 86400 IN NS a1-107.akam.net. iad.gov. 86400 IN RRSIG ( NS 13 2 86400 20251017112758 20251014102758 23364 iad.gov. KvnkCj5Pleg9XahzcYQSXzWF1z6gwzOBAos3OJxmpQQrFpIaq1yA26AhMyp9R+mqIPOqk4GJVb9X rc15TwFU3A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for iad.gov/SOA
	Received 421 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 421 octets ;; HEADER SECTION ;; id = 9126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN SOA ;; ANSWER SECTION (2 records) iad.gov. 300 IN SOA ( a1-107.akam.net. hostmaster.iad.gov. 2022082319 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) iad.gov. 300 IN RRSIG ( SOA 13 2 300 20251017112758 20251014102758 23364 iad.gov. f/ywCHedDMqv+85pK0li0JWyK7wCA/EomHJbssuwG8H1XyH+VZBKcDph/rAkoTNQjLkll/5IRHCK 5YuV8dxY8Q== ) ;; AUTHORITY SECTION (7 records) iad.gov. 86400 IN NS a5-66.akam.net. iad.gov. 86400 IN NS a12-67.akam.net. iad.gov. 86400 IN NS a2-64.akam.net. iad.gov. 86400 IN NS a11-66.akam.net. iad.gov. 86400 IN NS a1-107.akam.net. iad.gov. 86400 IN NS a24-65.akam.net. iad.gov. 86400 IN RRSIG ( NS 13 2 86400 20251017112758 20251014102758 23364 iad.gov. KvnkCj5Pleg9XahzcYQSXzWF1z6gwzOBAos3OJxmpQQrFpIaq1yA26AhMyp9R+mqIPOqk4GJVb9X rc15TwFU3A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a2-64.akam.net for iad.gov/A
	Received 171 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 171 octets ;; HEADER SECTION ;; id = 49373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. UjkQ9HwJ+Tf0mH3fsALyY4lCjJSVNCHCyDVQiT4OeP8Pdh6FJwaruYuafJDJJmnJWqn2wSZr8DKV 9vKUmlRCUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	iad.gov A RR has value 23.209.72.203
	iad.gov A RR has value 23.209.72.196
	Found 1 RRSIGs over A RRset
	`iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. UjkQ9HwJ+Tf0mH3fsALyY4lCjJSVNCHCyDVQiT4OeP8Pdh6FJwaruYuafJDJJmnJWqn2wSZr8DKV 9vKUmlRCUQ== )`
	RRSIG=23364 and DNSKEY=23364 verifies the A RRset

iad.gov

	Query to a1-107.akam.net for iad.gov/A
	Received 171 bytes from 193.108.91.107
	;; Response received from [193.108.91.107] 171 octets ;; HEADER SECTION ;; id = 7596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. NKTpI6YiZw0XL1PvpHB3ZvfI1uejNMI7qxc4q9rx5ymQtJfrEb0bOle/FMTdZ2M7864sGps1T290 ZgLpgTkSDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-107.akam.net is authoritative for iad.gov
	Found RRSIG signed by iad.gov zone
	Query to a1-107.akam.net for iad.gov/A
	Received 171 bytes from 193.108.91.107
	;; Response received from [193.108.91.107] 171 octets ;; HEADER SECTION ;; id = 47036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. GfVKFlL4MOXTeFgCMIOK4M4Rk0N/hIUypzXvWh/aJZoiMCbKOQqrjHlkaOS86AZLHgVjrVphDyn/ rsQecKo5/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	iad.gov A RR has value 23.209.72.196
	iad.gov A RR has value 23.209.72.203
	Found 1 RRSIGs over A RRset
	`iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. GfVKFlL4MOXTeFgCMIOK4M4Rk0N/hIUypzXvWh/aJZoiMCbKOQqrjHlkaOS86AZLHgVjrVphDyn/ rsQecKo5/g== )`
	RRSIG=23364 and DNSKEY=23364 verifies the A RRset

iad.gov

	Query to a5-66.akam.net for iad.gov/A
	Received 171 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 171 octets ;; HEADER SECTION ;; id = 56183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. DYBquf38bVdkoMk3pPTf4gZZlI8NSWTI+BaJ4JetSebAIKn2QzRw4mThlkGEbnGVNKnxAMBjMb07 XCWaKBvb0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for iad.gov
	Found RRSIG signed by iad.gov zone
	Query to a5-66.akam.net for iad.gov/A
	Received 171 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 171 octets ;; HEADER SECTION ;; id = 59790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. B7Rsllke11HOMS5ppNAueQ/MZ1rQEBTQNqi4zVjGdZYeu7bWPD9YxAQJ+dRC9CCuqhNOLo9zGGAY wqPU/PX+4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	iad.gov A RR has value 23.209.72.203
	iad.gov A RR has value 23.209.72.196
	Found 1 RRSIGs over A RRset
	`iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. B7Rsllke11HOMS5ppNAueQ/MZ1rQEBTQNqi4zVjGdZYeu7bWPD9YxAQJ+dRC9CCuqhNOLo9zGGAY wqPU/PX+4g== )`
	RRSIG=23364 and DNSKEY=23364 verifies the A RRset

iad.gov

	Query to a11-66.akam.net for iad.gov/A
	Received 171 bytes from 84.53.139.66
	;; Response received from [84.53.139.66] 171 octets ;; HEADER SECTION ;; id = 46619 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. LwOqcS4JiIgbmy7GpDQhP6v1jorRDOUBTG/YweDNGX9EL8miBfzQUdrSb2J2tbtwKCvqjIRHjzjo ZWg275E77w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-66.akam.net is authoritative for iad.gov
	Found RRSIG signed by iad.gov zone
	Query to a11-66.akam.net for iad.gov/A
	Received 171 bytes from 84.53.139.66
	;; Response received from [84.53.139.66] 171 octets ;; HEADER SECTION ;; id = 2836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. 21hUi50OTlNfReT+8Iccs7WdIjcnlNms7MjVYS4i+7sA3Kqkee7MohWo3s2t9VOClWK96jbjglej AkbGjRySiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	iad.gov A RR has value 23.209.72.203
	iad.gov A RR has value 23.209.72.196
	Found 1 RRSIGs over A RRset
	`iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. 21hUi50OTlNfReT+8Iccs7WdIjcnlNms7MjVYS4i+7sA3Kqkee7MohWo3s2t9VOClWK96jbjglej AkbGjRySiw== )`
	RRSIG=23364 and DNSKEY=23364 verifies the A RRset

iad.gov

	Query to a24-65.akam.net for iad.gov/A
	Received 171 bytes from 2.16.130.65
	;; Response received from [2.16.130.65] 171 octets ;; HEADER SECTION ;; id = 16032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. 0wt6EGKVnV3yBtu3lARr55lh2JTR2UJ9vcPRa9Iq/w2NY0X/YrL9MarVhEMzAPkscdxrW3MU//kR lxrKW99Gcw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-65.akam.net is authoritative for iad.gov
	Found RRSIG signed by iad.gov zone
	Query to a24-65.akam.net for iad.gov/A
	Received 171 bytes from 2.16.130.65
	;; Response received from [2.16.130.65] 171 octets ;; HEADER SECTION ;; id = 13154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. RDtpxGp+suQjyBcxs6aEkaRZcNBVY3Z4hfKFavcdnjxS6CHYcBwu3uKFZ87ft1nu6qtVWV4s4zc9 aaRv2SO8Pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	iad.gov A RR has value 23.209.72.203
	iad.gov A RR has value 23.209.72.196
	Found 1 RRSIGs over A RRset
	`iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. RDtpxGp+suQjyBcxs6aEkaRZcNBVY3Z4hfKFavcdnjxS6CHYcBwu3uKFZ87ft1nu6qtVWV4s4zc9 aaRv2SO8Pg== )`
	RRSIG=23364 and DNSKEY=23364 verifies the A RRset

iad.gov

	Query to a12-67.akam.net for iad.gov/A
	Received 171 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 171 octets ;; HEADER SECTION ;; id = 56626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. 9scLXeI2cBrvojlXq9zeXE5l8w+R9w0abvtSU+2jP4Jthiw0nohSLkpmkcySQsxuPiDY1C6LYtch Bqj+uKccgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-67.akam.net is authoritative for iad.gov
	Found RRSIG signed by iad.gov zone
	Query to a12-67.akam.net for iad.gov/A
	Received 171 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 171 octets ;; HEADER SECTION ;; id = 24546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iad.gov. IN A ;; ANSWER SECTION (3 records) iad.gov. 20 IN A 23.209.72.196 iad.gov. 20 IN A 23.209.72.203 iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. 8yLTp1tl7rGopF+r9/aORg/ZuJ++yxdJBlshxWwc/ECgaJuYpsLBKvIhj9341/H/Dsh5+HKIgEgS hZFC99e6zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	iad.gov A RR has value 23.209.72.196
	iad.gov A RR has value 23.209.72.203
	Found 1 RRSIGs over A RRset
	`iad.gov. 20 IN RRSIG ( A 13 2 20 20251017112758 20251014102758 23364 iad.gov. 8yLTp1tl7rGopF+r9/aORg/ZuJ++yxdJBlshxWwc/ECgaJuYpsLBKvIhj9341/H/Dsh5+HKIgEgS hZFC99e6zQ== )`
	RRSIG=23364 and DNSKEY=23364 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test iad.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: