DNSSEC Analyzer

Domain Name:

Time: 2022-01-21 08:20:39 UTC, NTP stratum 16

Analyzing DNSSEC problems for inl.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 41430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to b.root-servers.net for inl.gov/A
	Received 626 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (626 octets) ;; HEADER SECTION ;; id = 43976 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for gov/DNSKEY
	Received 622 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (622 octets) ;; HEADER SECTION ;; id = 7580 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (367 octets) ;; HEADER SECTION ;; id = 49874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 4021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030 gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030`
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7030 is now in the chain-of-trust
	Query to c.gov-servers.net for inl.gov/A
	Received 527 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (527 octets) ;; HEADER SECTION ;; id = 54715 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) inl.gov. 86400 IN NS ns.inel.gov. inl.gov. 86400 IN NS ns2.inel.gov. inl.gov. 3600 IN DS ( 8669 5 2 49be1210f947018e4fe5bf3b41914f3397ceaf7d3adf7b6276b13c1da33cb8c1 ) inl.gov. 3600 IN DS 5753 5 1 e11f006b765eee1fb5cd07059c6c0301aead40a8 inl.gov. 3600 IN DS 8669 5 1 22b96b7e5b4fea994f3a94a0fe3cdcad524f0c4b inl.gov. 3600 IN DS ( 5753 5 2 ed625a81c253cd6ad093559c7769de9bcab305f02fc670a435e12908a9de143d ) inl.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064019 20220119064019 7030 gov. P+y8NEK8QbNSenroTMlvOrz+jyli9VI82PlCMI/nJdQarl8jeAsuTVtUo07STeeAJQqroFyqPdyh 6zPb1+5gyS5eXdn340qlTsWcF8OYkXBf3NGEodZcuecXu6csAEv6V1Kon+tQG9LIpaYgRXFAEKze 8Sk0/3/XLGJU64S2WbK1cnJ0j3fpcTz5txlKnryv147CA5C9fLD6bFjRG5/QPg== ) ;; ADDITIONAL SECTION (5 records) ns.inel.gov. 86400 IN A 141.221.66.10 ns.inel.gov. 86400 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 86400 IN A 141.221.68.40 ns2.inel.gov. 86400 IN AAAA 2620:0:2b88:9700::40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for inl.gov/DNSKEY
	Received 527 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (527 octets) ;; HEADER SECTION ;; id = 40612 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) inl.gov. 86400 IN NS ns.inel.gov. inl.gov. 86400 IN NS ns2.inel.gov. inl.gov. 3600 IN DS ( 8669 5 2 49be1210f947018e4fe5bf3b41914f3397ceaf7d3adf7b6276b13c1da33cb8c1 ) inl.gov. 3600 IN DS 5753 5 1 e11f006b765eee1fb5cd07059c6c0301aead40a8 inl.gov. 3600 IN DS 8669 5 1 22b96b7e5b4fea994f3a94a0fe3cdcad524f0c4b inl.gov. 3600 IN DS ( 5753 5 2 ed625a81c253cd6ad093559c7769de9bcab305f02fc670a435e12908a9de143d ) inl.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064019 20220119064019 7030 gov. P+y8NEK8QbNSenroTMlvOrz+jyli9VI82PlCMI/nJdQarl8jeAsuTVtUo07STeeAJQqroFyqPdyh 6zPb1+5gyS5eXdn340qlTsWcF8OYkXBf3NGEodZcuecXu6csAEv6V1Kon+tQG9LIpaYgRXFAEKze 8Sk0/3/XLGJU64S2WbK1cnJ0j3fpcTz5txlKnryv147CA5C9fLD6bFjRG5/QPg== ) ;; ADDITIONAL SECTION (5 records) ns.inel.gov. 86400 IN A 141.221.66.10 ns.inel.gov. 86400 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 86400 IN A 141.221.68.40 ns2.inel.gov. 86400 IN AAAA 2620:0:2b88:9700::40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone inl.gov

inl.gov

	Checking DS between gov and inl.gov
	Query to a.gov-servers.net for inl.gov/DS
	Received 399 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (399 octets) ;; HEADER SECTION ;; id = 41502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN DS ;; ANSWER SECTION (5 records) inl.gov. 3600 IN DS ( 8669 5 2 49be1210f947018e4fe5bf3b41914f3397ceaf7d3adf7b6276b13c1da33cb8c1 ) inl.gov. 3600 IN DS 5753 5 1 e11f006b765eee1fb5cd07059c6c0301aead40a8 inl.gov. 3600 IN DS 8669 5 1 22b96b7e5b4fea994f3a94a0fe3cdcad524f0c4b inl.gov. 3600 IN DS ( 5753 5 2 ed625a81c253cd6ad093559c7769de9bcab305f02fc670a435e12908a9de143d ) inl.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064019 20220119064019 7030 gov. P+y8NEK8QbNSenroTMlvOrz+jyli9VI82PlCMI/nJdQarl8jeAsuTVtUo07STeeAJQqroFyqPdyh 6zPb1+5gyS5eXdn340qlTsWcF8OYkXBf3NGEodZcuecXu6csAEv6V1Kon+tQG9LIpaYgRXFAEKze 8Sk0/3/XLGJU64S2WbK1cnJ0j3fpcTz5txlKnryv147CA5C9fLD6bFjRG5/QPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for inl.gov in the gov zone
	DS=8669/SHA-256 has algorithm RSASHA1
	DS=5753/SHA-1 has algorithm RSASHA1
	DS=8669/SHA-1 has algorithm RSASHA1
	DS=5753/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`inl.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064019 20220119064019 7030 gov. P+y8NEK8QbNSenroTMlvOrz+jyli9VI82PlCMI/nJdQarl8jeAsuTVtUo07STeeAJQqroFyqPdyh 6zPb1+5gyS5eXdn340qlTsWcF8OYkXBf3NGEodZcuecXu6csAEv6V1Kon+tQG9LIpaYgRXFAEKze 8Sk0/3/XLGJU64S2WbK1cnJ0j3fpcTz5txlKnryv147CA5C9fLD6bFjRG5/QPg== )`
	RRSIG=7030 and DNSKEY=7030 verifies the DS RRset
	DS=8669/SHA-256 is now in the chain-of-trust
	DS=5753/SHA-1 is now in the chain-of-trust
	`inl.gov. 3600 IN DS ( 8669 5 2 49be1210f947018e4fe5bf3b41914f3397ceaf7d3adf7b6276b13c1da33cb8c1 )`
	`inl.gov. 3600 IN DS 5753 5 1 e11f006b765eee1fb5cd07059c6c0301aead40a8`
	`inl.gov. 3600 IN DS 8669 5 1 22b96b7e5b4fea994f3a94a0fe3cdcad524f0c4b`
	`inl.gov. 3600 IN DS ( 5753 5 2 ed625a81c253cd6ad093559c7769de9bcab305f02fc670a435e12908a9de143d )`
	Query to ns2.inel.gov for inl.gov/DNSKEY
	Received 2025 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (2025 octets) ;; HEADER SECTION ;; id = 54634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN DNSKEY ;; ANSWER SECTION (7 records) inl.gov. 60 IN DNSKEY ( 256 3 5 AwEAAcpInSyUhy8vAzh/tcYMu9l10g1T61vZ9K3BK5gGK01DbK2K1zrut1mrt6iVs6RIWStXhPUL Ypr4OBMt5zqN8eCBhZj1932ZDeMRYVEb5yerOS9t7phRmNIPZLIzLeby1P/FEbkXajXdc2H99T1R Fa6kkkeF108aF6WTg0WdygiFBUN4rFxJ/BlyNF4BP+UJr2nCg+c8jzuNXgQ8As1NwwrzFR9U+98t 7EwEZgbSK6lP0dQkwkDjglRl81uFN+nQe/70DGpSgq3dUVSAhcKgc1PH//yYW/F+T091Blg4Y3Nz MEHR0pFeyipPg2XvfiIipoQhMFa3/eA/SP7XW4WlVpk= ) ; Key ID = 43936 inl.gov. 60 IN DNSKEY ( 256 3 5 AwEAAc8SsMlT+UAdI7MlfXwciSob2BhOlc1TvDjAI18+wLNeEGgvaf3+6rTadNckdDgwBkSG57TR ZY1UYAmeMNR4EtUJlZWvJ2NA9yeQOguR4y+d9orGK6RtBv713qStR12KkAcYvWhL/RPukiNmAm76 56/gtbsBoSgcXFP21HwliLsfZuIcBY5cXwUKw8zAfmEgMvLFn/MZWwsc4VWa4IW5N/ZJJwB85JXg pFGszZxDT0Z06NqrzYA9XGznRZzQz4nKirmRg6c7CfdklB9dub9yFVDvY2pVFQsBsGE7t8fDcgMU HM/+iJk78lyAnD17KIhXmAPfMBWO/4gCjcCaA3eH8QM= ) ; Key ID = 65206 inl.gov. 60 IN DNSKEY ( 257 3 5 AwEAAbU2eH3oM05ynzdYhp2HFM9PhJ/0969VTMTSZO+WJcXGuGa1UNP9xuEM8TYcjgNy7GatChXm y3R/fgjXRQ4C+3N9kYwzSHpgQ8rYNgVk9ed7ovijuLtWJ3HrWY7Kk4YXtaPwxH1MDS4Eisncs/JU Ov2rWfPjydGliuhP7Xl9lyMkNBclAWDzg9hjgbcPYHsvxN74KYDLXBvMdDAb74rJOz9Cv/OhvN3w f/3ANw+AI1TI9bEINRCZFMfwceKrcQl6P/MXupQM7q3eP35/xhLLz/xmdk6IFPBpGikFn/OJKhPw edU0caZZqDDJpfLEYGlr5d4uiqfgUsYQNwosR+ARAus= ) ; Key ID = 5753 inl.gov. 60 IN DNSKEY ( 257 3 5 AwEAAZYoPc//0rtCl/eaAEQVnhCFDvinaM1tkAdm5Gc27GA3k62sypHtgYrKK4HzcUBylZ2yKRVq lPFgLH+A/qCiDo7J3ikz9eKDWtkJhLvRpPWhUxbkW/FKDt2sN3BlIO2xc1hIYsNd+PZS/oIFAkVP aeZznMYr4ANTrfbxPqK2XvHFtMB9zS2waOsRvL/9AgOCB4TLdbQ24kxfe8EBRj144ORGRPmG9pfU w+QUnyS+ah02+oi1uD3x67d+72iZuZON/9VDHfT9uUDwC+SQKF2fpA+HcAuNzmUHFi1irWMo34ax ljCxgFwXyhWTG06L7kmTS09sLBBv7mZ+kQfos3+pTic= ) ; Key ID = 8669 inl.gov. 60 IN RRSIG ( DNSKEY 5 2 60 20220129025030 20220119021845 5753 inl.gov. p+QKxtsAOkMa+KGQxbYtZ0zo9fNii2Ziri1xd35O35m2wqXlTt7rgyu/2SQQNb2H25irJAQQdiPy iTavncZ1PMGXWnSAPwGmvYRxwC27xM8E+t48l2agZ+coogQzFUA+jGKo066TwjJsPPozGQzUiQ4S lvne6CLB4AxNYKurR8ZCNv8LLYu941drACb4HEhZPfn//IyBbp9Eiwfuf1FCMHOdrfbgXhO7JnOJ YPfh71t8bQO9AZYEt9vaaKuJKSd8yG7OZvc3IZiDByaAoMoDyY1RHYpf1RKMyI7HyoBGLSpw30c9 DzGp4Rvtp9LkbZQVgHRd7pvqLJswgc4VGhOF2A== ) inl.gov. 60 IN RRSIG ( DNSKEY 5 2 60 20220129025030 20220119021845 8669 inl.gov. Xff/1h2m+yM8+3gVEXommr0ydQ3klXoHyBOKbnzPt85J41IVW17TOwaIDnoDzDmbm4k4mVWd7ceX wA2a18GMFrpugbm5PhpiEM/SzMDL6q6nYKPIMyvCqujpuh4S3rQzkzMJDH+bGNMbdYym1x6nPZE7 cGtuSll9qR8Mdab2danPJ420qA1wPeY/kEl87DQLPhyH3P35ACpA7dFY1LjEIhW4LQ6FxToHu2ep /M8fGvuzCkCk51X52rD+4bBD8N25Xwz1+uC8/DD6YzgNAJfrrf0UDOUKVFSYRPRINqz7PvIN4KwN EaRRFnZfDJJ71J5NSo5nsNCiy8IPZSPhcveJHA== ) inl.gov. 60 IN RRSIG ( DNSKEY 5 2 60 20220129025030 20220119021845 65206 inl.gov. cU10cvn9O4QRLkjnfoEMRx7QLfPf45SDqjDdK4ZvASww7aNJ5dv8jRSM0Dbm3mrAILj4NY8rsn4b cf+clvPWLV5CeaqXF27sVroaITRA87U7taV9WuE0puGY9ciq6vsn8cwILVnD+IKJTQQ03Bb3BRPH la2/vghP4hTXw2ryMCh/zMvBI40Gengkcd7Sit3BCRCrFeri8C0qu304j1Lb5ky+5dUGsG5pCJWl DWCcTFnClWPVggduCUC4I15LokXl+73k6JrC3bv9rafYF5oc6yNf+hOnGhaekX+t4qrdifQFYScw Bsvu7tvIJKtWv8h4A1W/Rj2YnkWdXK7+aiAVhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for inl.gov
	`inl.gov. 60 IN DNSKEY ( 256 3 5 AwEAAcpInSyUhy8vAzh/tcYMu9l10g1T61vZ9K3BK5gGK01DbK2K1zrut1mrt6iVs6RIWStXhPUL Ypr4OBMt5zqN8eCBhZj1932ZDeMRYVEb5yerOS9t7phRmNIPZLIzLeby1P/FEbkXajXdc2H99T1R Fa6kkkeF108aF6WTg0WdygiFBUN4rFxJ/BlyNF4BP+UJr2nCg+c8jzuNXgQ8As1NwwrzFR9U+98t 7EwEZgbSK6lP0dQkwkDjglRl81uFN+nQe/70DGpSgq3dUVSAhcKgc1PH//yYW/F+T091Blg4Y3Nz MEHR0pFeyipPg2XvfiIipoQhMFa3/eA/SP7XW4WlVpk= ) ; Key ID = 43936`
	`inl.gov. 60 IN DNSKEY ( 256 3 5 AwEAAc8SsMlT+UAdI7MlfXwciSob2BhOlc1TvDjAI18+wLNeEGgvaf3+6rTadNckdDgwBkSG57TR ZY1UYAmeMNR4EtUJlZWvJ2NA9yeQOguR4y+d9orGK6RtBv713qStR12KkAcYvWhL/RPukiNmAm76 56/gtbsBoSgcXFP21HwliLsfZuIcBY5cXwUKw8zAfmEgMvLFn/MZWwsc4VWa4IW5N/ZJJwB85JXg pFGszZxDT0Z06NqrzYA9XGznRZzQz4nKirmRg6c7CfdklB9dub9yFVDvY2pVFQsBsGE7t8fDcgMU HM/+iJk78lyAnD17KIhXmAPfMBWO/4gCjcCaA3eH8QM= ) ; Key ID = 65206`
	`inl.gov. 60 IN DNSKEY ( 257 3 5 AwEAAbU2eH3oM05ynzdYhp2HFM9PhJ/0969VTMTSZO+WJcXGuGa1UNP9xuEM8TYcjgNy7GatChXm y3R/fgjXRQ4C+3N9kYwzSHpgQ8rYNgVk9ed7ovijuLtWJ3HrWY7Kk4YXtaPwxH1MDS4Eisncs/JU Ov2rWfPjydGliuhP7Xl9lyMkNBclAWDzg9hjgbcPYHsvxN74KYDLXBvMdDAb74rJOz9Cv/OhvN3w f/3ANw+AI1TI9bEINRCZFMfwceKrcQl6P/MXupQM7q3eP35/xhLLz/xmdk6IFPBpGikFn/OJKhPw edU0caZZqDDJpfLEYGlr5d4uiqfgUsYQNwosR+ARAus= ) ; Key ID = 5753`
	`inl.gov. 60 IN DNSKEY ( 257 3 5 AwEAAZYoPc//0rtCl/eaAEQVnhCFDvinaM1tkAdm5Gc27GA3k62sypHtgYrKK4HzcUBylZ2yKRVq lPFgLH+A/qCiDo7J3ikz9eKDWtkJhLvRpPWhUxbkW/FKDt2sN3BlIO2xc1hIYsNd+PZS/oIFAkVP aeZznMYr4ANTrfbxPqK2XvHFtMB9zS2waOsRvL/9AgOCB4TLdbQ24kxfe8EBRj144ORGRPmG9pfU w+QUnyS+ah02+oi1uD3x67d+72iZuZON/9VDHfT9uUDwC+SQKF2fpA+HcAuNzmUHFi1irWMo34ax ljCxgFwXyhWTG06L7kmTS09sLBBv7mZ+kQfos3+pTic= ) ; Key ID = 8669`
	DNSKEY=5753/SEP is now in the chain-of-trust
	DS=5753/SHA-1 verifies DNSKEY=5753/SEP
	DS=5753/SHA-256 verifies DNSKEY=5753/SEP
	DNSKEY=8669/SEP is now in the chain-of-trust
	DS=8669/SHA-256 verifies DNSKEY=8669/SEP
	DS=8669/SHA-1 verifies DNSKEY=8669/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`inl.gov. 60 IN RRSIG ( DNSKEY 5 2 60 20220129025030 20220119021845 5753 inl.gov. p+QKxtsAOkMa+KGQxbYtZ0zo9fNii2Ziri1xd35O35m2wqXlTt7rgyu/2SQQNb2H25irJAQQdiPy iTavncZ1PMGXWnSAPwGmvYRxwC27xM8E+t48l2agZ+coogQzFUA+jGKo066TwjJsPPozGQzUiQ4S lvne6CLB4AxNYKurR8ZCNv8LLYu941drACb4HEhZPfn//IyBbp9Eiwfuf1FCMHOdrfbgXhO7JnOJ YPfh71t8bQO9AZYEt9vaaKuJKSd8yG7OZvc3IZiDByaAoMoDyY1RHYpf1RKMyI7HyoBGLSpw30c9 DzGp4Rvtp9LkbZQVgHRd7pvqLJswgc4VGhOF2A== )`
	`inl.gov. 60 IN RRSIG ( DNSKEY 5 2 60 20220129025030 20220119021845 8669 inl.gov. Xff/1h2m+yM8+3gVEXommr0ydQ3klXoHyBOKbnzPt85J41IVW17TOwaIDnoDzDmbm4k4mVWd7ceX wA2a18GMFrpugbm5PhpiEM/SzMDL6q6nYKPIMyvCqujpuh4S3rQzkzMJDH+bGNMbdYym1x6nPZE7 cGtuSll9qR8Mdab2danPJ420qA1wPeY/kEl87DQLPhyH3P35ACpA7dFY1LjEIhW4LQ6FxToHu2ep /M8fGvuzCkCk51X52rD+4bBD8N25Xwz1+uC8/DD6YzgNAJfrrf0UDOUKVFSYRPRINqz7PvIN4KwN EaRRFnZfDJJ71J5NSo5nsNCiy8IPZSPhcveJHA== )`
	`inl.gov. 60 IN RRSIG ( DNSKEY 5 2 60 20220129025030 20220119021845 65206 inl.gov. cU10cvn9O4QRLkjnfoEMRx7QLfPf45SDqjDdK4ZvASww7aNJ5dv8jRSM0Dbm3mrAILj4NY8rsn4b cf+clvPWLV5CeaqXF27sVroaITRA87U7taV9WuE0puGY9ciq6vsn8cwILVnD+IKJTQQ03Bb3BRPH la2/vghP4hTXw2ryMCh/zMvBI40Gengkcd7Sit3BCRCrFeri8C0qu304j1Lb5ky+5dUGsG5pCJWl DWCcTFnClWPVggduCUC4I15LokXl+73k6JrC3bv9rafYF5oc6yNf+hOnGhaekX+t4qrdifQFYScw Bsvu7tvIJKtWv8h4A1W/Rj2YnkWdXK7+aiAVhQ== )`
	RRSIG=5753 and DNSKEY=5753/SEP verifies the DNSKEY RRset
	RRSIG=8669 and DNSKEY=8669/SEP verifies the DNSKEY RRset
	RRSIG=65206 and DNSKEY=65206 verifies the DNSKEY RRset
	DNSKEY=43936 is now in the chain-of-trust
	DNSKEY=65206 is now in the chain-of-trust
	Query to ns.inel.gov for inl.gov/A
	Received 1188 bytes from 141.221.66.10
	;; Response received from 141.221.66.10 (1188 octets) ;; HEADER SECTION ;; id = 64616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.inel.gov is authoritative for inl.gov
	Found RRSIG signed by inl.gov zone
	Query to ns2.inl.gov for inl.gov/SOA
	Received 924 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (924 octets) ;; HEADER SECTION ;; id = 31685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN SOA ;; ANSWER SECTION (2 records) inl.gov. 60 IN SOA ( ns.inl.gov. hostmaster.inel.gov. 659402594 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 60 ;minimum ) inl.gov. 60 IN RRSIG ( SOA 5 2 60 20220129154309 20220119144309 65206 inl.gov. HrL4lTVL69kR+y1traKbESfo9cdWOnlfQcqMiaKktdtDS2dV9KS48dSlzOU2aCYKx0oG0QDOYmKl 6cVm7RqwKNt5RO8KkVCF0rrFRsSk7ZYC3RPzdiAebxatUyI1eO0ega7YdPDg3gC1eiNY6qgKVl/N jf30CIFMAfh8xfg6bXnocW4AOfRPZv8sYVMpA4efhBHeWCTjwrzNOr+9a+CMaigVc4fHkKBAiv52 kz5WH3qA0d+7uuCxY7rQMzR2+OTs8p9/ry/K+08plAXG9s8JBDkr/r4dvBSUf7Gxa07zYyWFNaEX xJVCu8Ebyzt0JOG8E+GpebJoMDCP+qm45KbDlg== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (9 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.inl.gov for inl.gov/SOA
	Received 924 bytes from 141.221.66.10
	;; Response received from 141.221.66.10 (924 octets) ;; HEADER SECTION ;; id = 7723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN SOA ;; ANSWER SECTION (2 records) inl.gov. 60 IN SOA ( ns.inl.gov. hostmaster.inel.gov. 659402594 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 60 ;minimum ) inl.gov. 60 IN RRSIG ( SOA 5 2 60 20220129154309 20220119144309 65206 inl.gov. HrL4lTVL69kR+y1traKbESfo9cdWOnlfQcqMiaKktdtDS2dV9KS48dSlzOU2aCYKx0oG0QDOYmKl 6cVm7RqwKNt5RO8KkVCF0rrFRsSk7ZYC3RPzdiAebxatUyI1eO0ega7YdPDg3gC1eiNY6qgKVl/N jf30CIFMAfh8xfg6bXnocW4AOfRPZv8sYVMpA4efhBHeWCTjwrzNOr+9a+CMaigVc4fHkKBAiv52 kz5WH3qA0d+7uuCxY7rQMzR2+OTs8p9/ry/K+08plAXG9s8JBDkr/r4dvBSUf7Gxa07zYyWFNaEX xJVCu8Ebyzt0JOG8E+GpebJoMDCP+qm45KbDlg== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (9 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.inel.gov for inl.gov/SOA
	Received 924 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (924 octets) ;; HEADER SECTION ;; id = 6346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN SOA ;; ANSWER SECTION (2 records) inl.gov. 60 IN SOA ( ns.inl.gov. hostmaster.inel.gov. 659402594 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 60 ;minimum ) inl.gov. 60 IN RRSIG ( SOA 5 2 60 20220129154309 20220119144309 65206 inl.gov. HrL4lTVL69kR+y1traKbESfo9cdWOnlfQcqMiaKktdtDS2dV9KS48dSlzOU2aCYKx0oG0QDOYmKl 6cVm7RqwKNt5RO8KkVCF0rrFRsSk7ZYC3RPzdiAebxatUyI1eO0ega7YdPDg3gC1eiNY6qgKVl/N jf30CIFMAfh8xfg6bXnocW4AOfRPZv8sYVMpA4efhBHeWCTjwrzNOr+9a+CMaigVc4fHkKBAiv52 kz5WH3qA0d+7uuCxY7rQMzR2+OTs8p9/ry/K+08plAXG9s8JBDkr/r4dvBSUf7Gxa07zYyWFNaEX xJVCu8Ebyzt0JOG8E+GpebJoMDCP+qm45KbDlg== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (9 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.inel.gov for inl.gov/A
	Received 1188 bytes from 141.221.66.10
	;; Response received from 141.221.66.10 (1188 octets) ;; HEADER SECTION ;; id = 37055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	inl.gov A RR has value 52.227.30.136
	Found 1 RRSIGs over A RRset
	`inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== )`
	RRSIG=65206 and DNSKEY=65206 verifies the A RRset

inl.gov

	Query to ns2.inel.gov for inl.gov/A
	Received 1188 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (1188 octets) ;; HEADER SECTION ;; id = 29915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.inel.gov is authoritative for inl.gov
	Found RRSIG signed by inl.gov zone
	Query to ns2.inel.gov for inl.gov/A
	Received 1188 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (1188 octets) ;; HEADER SECTION ;; id = 50044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	inl.gov A RR has value 52.227.30.136
	Found 1 RRSIGs over A RRset
	`inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== )`
	RRSIG=65206 and DNSKEY=65206 verifies the A RRset

inl.gov

	Query to ns.inl.gov for inl.gov/A
	Received 1188 bytes from 141.221.66.10
	;; Response received from 141.221.66.10 (1188 octets) ;; HEADER SECTION ;; id = 25572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.inl.gov is authoritative for inl.gov
	Found RRSIG signed by inl.gov zone
	Query to ns.inl.gov for inl.gov/A
	Received 1188 bytes from 141.221.66.10
	;; Response received from 141.221.66.10 (1188 octets) ;; HEADER SECTION ;; id = 14395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	inl.gov A RR has value 52.227.30.136
	Found 1 RRSIGs over A RRset
	`inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== )`
	RRSIG=65206 and DNSKEY=65206 verifies the A RRset

inl.gov

	Query to ns2.inl.gov for inl.gov/A
	Received 1188 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (1188 octets) ;; HEADER SECTION ;; id = 9901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.inl.gov is authoritative for inl.gov
	Found RRSIG signed by inl.gov zone
	Query to ns2.inl.gov for inl.gov/A
	Received 1188 bytes from 141.221.68.40
	;; Response received from 141.221.68.40 (1188 octets) ;; HEADER SECTION ;; id = 50051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; inl.gov. IN A ;; ANSWER SECTION (2 records) inl.gov. 60 IN A 52.227.30.136 inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== ) ;; AUTHORITY SECTION (5 records) inl.gov. 60 IN NS ns.inl.gov. inl.gov. 60 IN NS ns.inel.gov. inl.gov. 60 IN NS ns2.inel.gov. inl.gov. 60 IN NS ns2.inl.gov. inl.gov. 60 IN RRSIG ( NS 5 2 60 20220128052027 20220118042543 65206 inl.gov. YHUBT05uhS7+dyda60ciis55hJqckFY1sMfJ01Yo39Y9Xdb2TocaF50ne0E/gayCbTCj2sttkY8R CldWwzIFdQotv4Yzhr/h5YrTOpSajYfl8bmKuTV2XLqY7Hjc8TptLnsIEV3Qv6kJ1haGd9uKTBNe QChYsrgzSDrYF4kKXB2PGEi1Y4PYFsdlKCbX96iHZROzHXMmtS2/rsttYQmRrTSduIdsKziXn7lv g6vxaJNMRwJN/FENk+O9Zn8JxVrwp4rONcHX7fdBtXQjKvNa07h0Q8Irgg6y8ZRZAuE6AXpqsZ6f P2mETk2cOyTlhaYivzDEuSGL40UHq4xf6cgYdw== ) ;; ADDITIONAL SECTION (10 records) ns.inl.gov. 60 IN A 141.221.66.10 ns2.inl.gov. 60 IN A 141.221.68.40 ns.inel.gov. 60 IN A 141.221.66.10 ns2.inel.gov. 60 IN A 141.221.68.40 ns.inl.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inl.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inel.gov. 60 IN AAAA 2620:0:2b88:b301::10 ns2.inel.gov. 60 IN AAAA 2620:0:2b88:9700::40 ns.inl.gov. 60 IN RRSIG ( A 5 3 60 20220128050201 20220118041413 65206 inl.gov. kxBSridykN2/TW578uBbsXmUid2Q7aZky4kimqUrsLYXoNWAxMcibCJGM+Ek8q51PqcKuM3u4Wxg HBIFxP01Ws50HfYBhpfy09pLbsvmv5D+12SBJzRJz6xEMD2WRoExaSocejxiDKPx59EvfXIAF06+ e3LNbCQw1sRY9N2fXoL9hylQMzqc6iodRhwqIygiiYAt3YwMw1/aAhQPW9MgkJcqbPuRDUXmwEV9 RSXYyR78mp93qTbYhBhbESNbo8AHjXMyHpWDLVLNH6MfiOwqWEvn5SJIEvFRMibsbVb/g7NXi1CQ 43KrCur/AklUYUdGk8ZJcuJngumIYCkGNuavRA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	inl.gov A RR has value 52.227.30.136
	Found 1 RRSIGs over A RRset
	`inl.gov. 60 IN RRSIG ( A 5 2 60 20220128040848 20220118033850 65206 inl.gov. p2+UApVrLYXweYWgYRiejwwazbGa31/ImuHeCeUCtBSTWYI3c1WTAn9k5PVELmUd0dgbbtALnPqb MlaYTIprkzoxX52y3makHfou8X6FXbuvoYZ7k2yLICpeB2IYYNi//f8T7M36EZ/Sxk6WO29NquJS +14/LlPLvm0Wn9wYsWbBL4DAgvX8QYIAo+qsZZcnvrRNUq29FC2g5fGLZaXtwGur5+ykv631NjeO RAxm3GdUgCiUH5DgP2fWVZYJsJJwOBCsa62DOANeusLqtgbJaHGgoNHh1HzTbjf5nX2osbUc0md2 TMxv0jv+5n7w1teoMxQoLwWglDJI06QoseIDIA== )`
	RRSIG=65206 and DNSKEY=65206 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test inl.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: