DNSSEC Debugger - ioss.gov

Domain Name:

Time: 2026-03-13 13:25:25 UTC

Analyzing DNSSEC problems for ioss.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 41276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to l.root-servers.net for ioss.gov/A
	Received 615 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 615 octets ;; HEADER SECTION ;; id = 50161 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . h7uCKV2Dobt6WP1i+6hSItvSyyJySM916jaKcM20W/NDpv9RApTXofR906zvJTJ1qp/n/OuAuMja arCr1KNfWG5+9dL9RVtD5Yap9v5LwYbBEecvnqlVXp5vikokE/yvREjAconDU/2/N73lLWuWQUvx nKG1VYK1VAytmz9Op6KTa2jK9YYYlG6nS0oHoxj157yp/7lOXjDwlu4sLGAamo6CzTk4TgF9S/kd fRjq+VQ9P4KNfsPWEcwO4rWvsMMnPk45r0n/br28VFCntMHJX/Yze8NWsCkSmQhBsjOEnZRyMkPA qs0xJGos+jgYEahCtDgYYRK7XhkV9bmsvgOhbA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 60736 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . h7uCKV2Dobt6WP1i+6hSItvSyyJySM916jaKcM20W/NDpv9RApTXofR906zvJTJ1qp/n/OuAuMja arCr1KNfWG5+9dL9RVtD5Yap9v5LwYbBEecvnqlVXp5vikokE/yvREjAconDU/2/N73lLWuWQUvx nKG1VYK1VAytmz9Op6KTa2jK9YYYlG6nS0oHoxj157yp/7lOXjDwlu4sLGAamo6CzTk4TgF9S/kd fRjq+VQ9P4KNfsPWEcwO4rWvsMMnPk45r0n/br28VFCntMHJX/Yze8NWsCkSmQhBsjOEnZRyMkPA qs0xJGos+jgYEahCtDgYYRK7XhkV9bmsvgOhbA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 2139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . h7uCKV2Dobt6WP1i+6hSItvSyyJySM916jaKcM20W/NDpv9RApTXofR906zvJTJ1qp/n/OuAuMja arCr1KNfWG5+9dL9RVtD5Yap9v5LwYbBEecvnqlVXp5vikokE/yvREjAconDU/2/N73lLWuWQUvx nKG1VYK1VAytmz9Op6KTa2jK9YYYlG6nS0oHoxj157yp/7lOXjDwlu4sLGAamo6CzTk4TgF9S/kd fRjq+VQ9P4KNfsPWEcwO4rWvsMMnPk45r0n/br28VFCntMHJX/Yze8NWsCkSmQhBsjOEnZRyMkPA qs0xJGos+jgYEahCtDgYYRK7XhkV9bmsvgOhbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . h7uCKV2Dobt6WP1i+6hSItvSyyJySM916jaKcM20W/NDpv9RApTXofR906zvJTJ1qp/n/OuAuMja arCr1KNfWG5+9dL9RVtD5Yap9v5LwYbBEecvnqlVXp5vikokE/yvREjAconDU/2/N73lLWuWQUvx nKG1VYK1VAytmz9Op6KTa2jK9YYYlG6nS0oHoxj157yp/7lOXjDwlu4sLGAamo6CzTk4TgF9S/kd fRjq+VQ9P4KNfsPWEcwO4rWvsMMnPk45r0n/br28VFCntMHJX/Yze8NWsCkSmQhBsjOEnZRyMkPA qs0xJGos+jgYEahCtDgYYRK7XhkV9bmsvgOhbA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 9910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for ioss.gov/A
	Received 316 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 316 octets ;; HEADER SECTION ;; id = 46924 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ioss.gov. 10800 IN NS a1-107.akam.net. ioss.gov. 10800 IN NS a11-66.akam.net. ioss.gov. 10800 IN NS a12-67.akam.net. ioss.gov. 10800 IN NS a2-64.akam.net. ioss.gov. 10800 IN NS a24-65.akam.net. ioss.gov. 10800 IN NS a5-66.akam.net. ioss.gov. 3600 IN DS ( 30244 13 2 c09502656ee72afa38dd749f43d7bcb492a6210d7bb495302f54fda985208930 ) ioss.gov. 3600 IN RRSIG ( DS 13 2 3600 20260314142525 20260312122525 35496 gov. IzGzFvUrM0m+mjdCRyP9jLYrqqMJ6EJlyTY7/gSZCJn+iyWVUyl/yLCdZ7XuJE0XKg3/tLVgEWHV NtXHUSE/HQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for ioss.gov/DNSKEY
	Received 316 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 316 octets ;; HEADER SECTION ;; id = 746 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ioss.gov. 10800 IN NS a1-107.akam.net. ioss.gov. 10800 IN NS a11-66.akam.net. ioss.gov. 10800 IN NS a12-67.akam.net. ioss.gov. 10800 IN NS a2-64.akam.net. ioss.gov. 10800 IN NS a24-65.akam.net. ioss.gov. 10800 IN NS a5-66.akam.net. ioss.gov. 3600 IN DS ( 30244 13 2 c09502656ee72afa38dd749f43d7bcb492a6210d7bb495302f54fda985208930 ) ioss.gov. 3600 IN RRSIG ( DS 13 2 3600 20260314142525 20260312122525 35496 gov. 9ElXNtg/b7YuPQTY+McSVU6eZUmf5aEoa7BRvV0v1aU6EOCMRgqA2Ud+9Av5YhxAr4lv24M1I29M jawTEZH3+w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ioss.gov

ioss.gov

	Checking DS between gov and ioss.gov
	Query to b.ns.gov for ioss.gov/DS
	Received 184 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 184 octets ;; HEADER SECTION ;; id = 56977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN DS ;; ANSWER SECTION (2 records) ioss.gov. 3600 IN DS ( 30244 13 2 c09502656ee72afa38dd749f43d7bcb492a6210d7bb495302f54fda985208930 ) ioss.gov. 3600 IN RRSIG ( DS 13 2 3600 20260314142525 20260312122525 35496 gov. CLTgiYFOlS1cYqOf+2A/yC7Qafv0gBlVMmyvh6Y3e7fRYiY5ifAbJ1NjBOeI4jeGI/PTJiOfTqOf upSSN8HT2g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ioss.gov in the gov zone
	DS=30244/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ioss.gov. 3600 IN RRSIG ( DS 13 2 3600 20260314142525 20260312122525 35496 gov. CLTgiYFOlS1cYqOf+2A/yC7Qafv0gBlVMmyvh6Y3e7fRYiY5ifAbJ1NjBOeI4jeGI/PTJiOfTqOf upSSN8HT2g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=30244/SHA-256 is now in the chain-of-trust
	`ioss.gov. 3600 IN DS ( 30244 13 2 c09502656ee72afa38dd749f43d7bcb492a6210d7bb495302f54fda985208930 )`
	Query to a12-67.akam.net for ioss.gov/DNSKEY
	Received 565 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 565 octets ;; HEADER SECTION ;; id = 1341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN DNSKEY ;; ANSWER SECTION (6 records) ioss.gov. 7200 IN DNSKEY ( 257 3 13 I3mifzFGJ5wcqqPZ6z9rNpo0IiTrSYNqacOg008bdLaCGtFosCrJrZ8qaGqCcbE2RahqB7gfLn2c SKwfEeWNtg== ) ; keytag 47682 ioss.gov. 7200 IN DNSKEY ( 256 3 13 4OY/WaoobD+VrRBpAhK5eMXwJQMs/+TpkeTPTxr4vIeQjH8TPNEILLlh/e4BoagY9lUkdDwdCWjW jPLZLIH9MA== ) ; keytag 56055 ioss.gov. 7200 IN DNSKEY ( 256 3 13 hPBiV7fue+VwgCQMp6+D9yecLWu/e3qkvKZKv9ORfS1bNZ5Hs8qL9T/oMClgd8LAHhb4809etXWf Pz/LlV99wA== ) ; keytag 41273 ioss.gov. 7200 IN DNSKEY ( 257 3 13 M4kNQloUgA8OuWrc0V7IP1X9V35vXsr1RSxThXp/A1VLCyAZb7M61YfyGKGFLZCrjqCWADhj2Pw7 qbh1mBG3UQ== ) ; keytag 30244 ioss.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260315233927 20260312223927 30244 ioss.gov. vkc/Ili92zIQT/u+AdGV5L7zjZpsE6CvrJ5A1I6e+UKuBJgCtEbuNtUpgnqWx4QRn4WKYU+ep1Aa uEYVf9coeA== ) ioss.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260315233927 20260312223927 47682 ioss.gov. cZWOtpjTeETvIQpjDbQj0CPnAC8lKyRA69mtrrBgzSz2rQ7T0ZV+2gqex2k6Jkm5eytfhulyNy0H GeiHezySFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for ioss.gov
	`ioss.gov. 7200 IN DNSKEY ( 257 3 13 I3mifzFGJ5wcqqPZ6z9rNpo0IiTrSYNqacOg008bdLaCGtFosCrJrZ8qaGqCcbE2RahqB7gfLn2c SKwfEeWNtg== ) ; keytag 47682`
	`ioss.gov. 7200 IN DNSKEY ( 256 3 13 4OY/WaoobD+VrRBpAhK5eMXwJQMs/+TpkeTPTxr4vIeQjH8TPNEILLlh/e4BoagY9lUkdDwdCWjW jPLZLIH9MA== ) ; keytag 56055`
	`ioss.gov. 7200 IN DNSKEY ( 256 3 13 hPBiV7fue+VwgCQMp6+D9yecLWu/e3qkvKZKv9ORfS1bNZ5Hs8qL9T/oMClgd8LAHhb4809etXWf Pz/LlV99wA== ) ; keytag 41273`
	`ioss.gov. 7200 IN DNSKEY ( 257 3 13 M4kNQloUgA8OuWrc0V7IP1X9V35vXsr1RSxThXp/A1VLCyAZb7M61YfyGKGFLZCrjqCWADhj2Pw7 qbh1mBG3UQ== ) ; keytag 30244`
	DNSKEY=30244/SEP is now in the chain-of-trust
	DS=30244/SHA-256 verifies DNSKEY=30244/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ioss.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260315233927 20260312223927 30244 ioss.gov. vkc/Ili92zIQT/u+AdGV5L7zjZpsE6CvrJ5A1I6e+UKuBJgCtEbuNtUpgnqWx4QRn4WKYU+ep1Aa uEYVf9coeA== )`
	`ioss.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260315233927 20260312223927 47682 ioss.gov. cZWOtpjTeETvIQpjDbQj0CPnAC8lKyRA69mtrrBgzSz2rQ7T0ZV+2gqex2k6Jkm5eytfhulyNy0H GeiHezySFQ== )`
	RRSIG=30244 and DNSKEY=30244/SEP verifies the DNSKEY RRset
	RRSIG=47682 and DNSKEY=47682/SEP verifies the DNSKEY RRset
	DNSKEY=47682/SEP is now in the chain-of-trust
	DNSKEY=56055 is now in the chain-of-trust
	DNSKEY=41273 is now in the chain-of-trust
	Query to a1-107.akam.net for ioss.gov/A
	Received 173 bytes from 193.108.91.107
	;; Response received from [193.108.91.107] 173 octets ;; HEADER SECTION ;; id = 32676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. dWrIxGo8XyQShxVXtZWPw7Wa80OUCWFthB2JdG5BZ3o16Kl/6sdd4YkJCYg3OD6JE5HX0mvfmRdk tulcsHJvPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-107.akam.net is authoritative for ioss.gov
	Found RRSIG signed by ioss.gov zone
	Query to a24-65.akam.net for ioss.gov/SOA
	Received 424 bytes from 2.16.130.65
	;; Response received from [2.16.130.65] 424 octets ;; HEADER SECTION ;; id = 52980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN SOA ;; ANSWER SECTION (2 records) ioss.gov. 86400 IN SOA ( a1-107.akam.net. hostmaster.ioss.gov. 2022082308 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) ioss.gov. 86400 IN RRSIG ( SOA 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. CAN8BRrW/ZiBN+gToXxp1Vr6rbTG0NobwcppbGGckAYt1uy7Uf/W4lPNE/64h+vLkYy23LeLN86p HNybGNzv6g== ) ;; AUTHORITY SECTION (7 records) ioss.gov. 86400 IN NS a2-64.akam.net. ioss.gov. 86400 IN NS a11-66.akam.net. ioss.gov. 86400 IN NS a12-67.akam.net. ioss.gov. 86400 IN NS a1-107.akam.net. ioss.gov. 86400 IN NS a5-66.akam.net. ioss.gov. 86400 IN NS a24-65.akam.net. ioss.gov. 86400 IN RRSIG ( NS 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. 1wlVjM35OmrPlWfdebN0xWZt2apJC+HcXvEjTxq8cjK1evdOa2q7nX/F7Ee/6ftyJTuavTAGKvpp EvwG3OqCuw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-67.akam.net for ioss.gov/SOA
	Received 424 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 424 octets ;; HEADER SECTION ;; id = 1175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN SOA ;; ANSWER SECTION (2 records) ioss.gov. 86400 IN SOA ( a1-107.akam.net. hostmaster.ioss.gov. 2022082308 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) ioss.gov. 86400 IN RRSIG ( SOA 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. CAN8BRrW/ZiBN+gToXxp1Vr6rbTG0NobwcppbGGckAYt1uy7Uf/W4lPNE/64h+vLkYy23LeLN86p HNybGNzv6g== ) ;; AUTHORITY SECTION (7 records) ioss.gov. 86400 IN NS a5-66.akam.net. ioss.gov. 86400 IN NS a11-66.akam.net. ioss.gov. 86400 IN NS a2-64.akam.net. ioss.gov. 86400 IN NS a12-67.akam.net. ioss.gov. 86400 IN NS a1-107.akam.net. ioss.gov. 86400 IN NS a24-65.akam.net. ioss.gov. 86400 IN RRSIG ( NS 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. 1wlVjM35OmrPlWfdebN0xWZt2apJC+HcXvEjTxq8cjK1evdOa2q7nX/F7Ee/6ftyJTuavTAGKvpp EvwG3OqCuw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for ioss.gov/SOA
	Received 424 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 424 octets ;; HEADER SECTION ;; id = 39555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN SOA ;; ANSWER SECTION (2 records) ioss.gov. 86400 IN SOA ( a1-107.akam.net. hostmaster.ioss.gov. 2022082308 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) ioss.gov. 86400 IN RRSIG ( SOA 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. CAN8BRrW/ZiBN+gToXxp1Vr6rbTG0NobwcppbGGckAYt1uy7Uf/W4lPNE/64h+vLkYy23LeLN86p HNybGNzv6g== ) ;; AUTHORITY SECTION (7 records) ioss.gov. 86400 IN NS a12-67.akam.net. ioss.gov. 86400 IN NS a5-66.akam.net. ioss.gov. 86400 IN NS a24-65.akam.net. ioss.gov. 86400 IN NS a1-107.akam.net. ioss.gov. 86400 IN NS a11-66.akam.net. ioss.gov. 86400 IN NS a2-64.akam.net. ioss.gov. 86400 IN RRSIG ( NS 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. 1wlVjM35OmrPlWfdebN0xWZt2apJC+HcXvEjTxq8cjK1evdOa2q7nX/F7Ee/6ftyJTuavTAGKvpp EvwG3OqCuw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a2-64.akam.net for ioss.gov/SOA
	Received 424 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 424 octets ;; HEADER SECTION ;; id = 21552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN SOA ;; ANSWER SECTION (2 records) ioss.gov. 86400 IN SOA ( a1-107.akam.net. hostmaster.ioss.gov. 2022082308 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) ioss.gov. 86400 IN RRSIG ( SOA 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. CAN8BRrW/ZiBN+gToXxp1Vr6rbTG0NobwcppbGGckAYt1uy7Uf/W4lPNE/64h+vLkYy23LeLN86p HNybGNzv6g== ) ;; AUTHORITY SECTION (7 records) ioss.gov. 86400 IN NS a12-67.akam.net. ioss.gov. 86400 IN NS a11-66.akam.net. ioss.gov. 86400 IN NS a1-107.akam.net. ioss.gov. 86400 IN NS a2-64.akam.net. ioss.gov. 86400 IN NS a24-65.akam.net. ioss.gov. 86400 IN NS a5-66.akam.net. ioss.gov. 86400 IN RRSIG ( NS 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. 1wlVjM35OmrPlWfdebN0xWZt2apJC+HcXvEjTxq8cjK1evdOa2q7nX/F7Ee/6ftyJTuavTAGKvpp EvwG3OqCuw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a11-66.akam.net for ioss.gov/SOA
	Received 424 bytes from 84.53.139.66
	;; Response received from [84.53.139.66] 424 octets ;; HEADER SECTION ;; id = 37988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN SOA ;; ANSWER SECTION (2 records) ioss.gov. 86400 IN SOA ( a1-107.akam.net. hostmaster.ioss.gov. 2022082308 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) ioss.gov. 86400 IN RRSIG ( SOA 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. CAN8BRrW/ZiBN+gToXxp1Vr6rbTG0NobwcppbGGckAYt1uy7Uf/W4lPNE/64h+vLkYy23LeLN86p HNybGNzv6g== ) ;; AUTHORITY SECTION (7 records) ioss.gov. 86400 IN NS a5-66.akam.net. ioss.gov. 86400 IN NS a12-67.akam.net. ioss.gov. 86400 IN NS a11-66.akam.net. ioss.gov. 86400 IN NS a24-65.akam.net. ioss.gov. 86400 IN NS a1-107.akam.net. ioss.gov. 86400 IN NS a2-64.akam.net. ioss.gov. 86400 IN RRSIG ( NS 13 2 86400 20260315233927 20260312223927 56055 ioss.gov. 1wlVjM35OmrPlWfdebN0xWZt2apJC+HcXvEjTxq8cjK1evdOa2q7nX/F7Ee/6ftyJTuavTAGKvpp EvwG3OqCuw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-107.akam.net for ioss.gov/A
	Received 173 bytes from 193.108.91.107
	;; Response received from [193.108.91.107] 173 octets ;; HEADER SECTION ;; id = 50554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. 2hWSsy69JBqgNroqZkexsNsjaQA0gk0UNb+AkkKeY82Gssg81Tvlk++jRwz9QATcsMuTcVuI5nFZ WwOjBbswAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ioss.gov A RR has value 23.55.176.204
	ioss.gov A RR has value 23.48.104.40
	Found 1 RRSIGs over A RRset
	`ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. 2hWSsy69JBqgNroqZkexsNsjaQA0gk0UNb+AkkKeY82Gssg81Tvlk++jRwz9QATcsMuTcVuI5nFZ WwOjBbswAQ== )`
	RRSIG=56055 and DNSKEY=56055 verifies the A RRset

ioss.gov

	Query to a24-65.akam.net for ioss.gov/A
	Received 173 bytes from 2.16.130.65
	;; Response received from [2.16.130.65] 173 octets ;; HEADER SECTION ;; id = 60145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. BVpy6PJkA2Rv0g7ejoMrAZ2TYHt9Qu6s8jsoQqmvx31UxubSi5u3Vw7dpRLGl4SGBWjxylrBFp/q X0EEKPH4rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-65.akam.net is authoritative for ioss.gov
	Found RRSIG signed by ioss.gov zone
	Query to a24-65.akam.net for ioss.gov/A
	Received 173 bytes from 2.16.130.65
	;; Response received from [2.16.130.65] 173 octets ;; HEADER SECTION ;; id = 13531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. rA7w9hNHLibUXJmSMjOzlY1RSp4WItxKqYF6kMDtDODdjQc3z3x2Uq/mmFWIG/bS2H+mxGeSVWBz swWpxXiIag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ioss.gov A RR has value 23.48.104.40
	ioss.gov A RR has value 23.55.176.204
	Found 1 RRSIGs over A RRset
	`ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. rA7w9hNHLibUXJmSMjOzlY1RSp4WItxKqYF6kMDtDODdjQc3z3x2Uq/mmFWIG/bS2H+mxGeSVWBz swWpxXiIag== )`
	RRSIG=56055 and DNSKEY=56055 verifies the A RRset

ioss.gov

	Query to a2-64.akam.net for ioss.gov/A
	Received 173 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 173 octets ;; HEADER SECTION ;; id = 53234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. kli7RNi7UFzAkIq0FP1ElSEdodm0jzDPyXQwpPKU3dC4gNhGqSNvHFM6upfSr9CA2JK5XcILjlOf 2heAE/cwvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a2-64.akam.net is authoritative for ioss.gov
	Found RRSIG signed by ioss.gov zone
	Query to a2-64.akam.net for ioss.gov/A
	Received 173 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 173 octets ;; HEADER SECTION ;; id = 39760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. 8yJJf4N84iklEMp8IasHpoKshV5K+MGgpuuKkZcHeLNUqfndPJPuM6orB78tMRzEUt4nm80jrvPr /lU9uwNxOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ioss.gov A RR has value 23.48.104.40
	ioss.gov A RR has value 23.55.176.204
	Found 1 RRSIGs over A RRset
	`ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. 8yJJf4N84iklEMp8IasHpoKshV5K+MGgpuuKkZcHeLNUqfndPJPuM6orB78tMRzEUt4nm80jrvPr /lU9uwNxOQ== )`
	RRSIG=56055 and DNSKEY=56055 verifies the A RRset

ioss.gov

	Query to a12-67.akam.net for ioss.gov/A
	Received 173 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 173 octets ;; HEADER SECTION ;; id = 3048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. k1CVVw0h9iHDJMvRKtzWYd1VJvN7fehhw24yYooDc3lYe4b+g/9lmcfgWcEJUv02NpbzrFWNJNVx tbQ4ZFqTFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-67.akam.net is authoritative for ioss.gov
	Found RRSIG signed by ioss.gov zone
	Query to a12-67.akam.net for ioss.gov/A
	Received 173 bytes from 184.26.160.67
	;; Response received from [184.26.160.67] 173 octets ;; HEADER SECTION ;; id = 9400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. K3/F/plHuCl85Hzg2jbiOf9Vu/OxjmL4H1/CVtYuFSQmUURnlN8Sa6ErPNmG07/yXeEkGz8OnMEi IvpIO3b+ow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ioss.gov A RR has value 23.55.176.204
	ioss.gov A RR has value 23.48.104.40
	Found 1 RRSIGs over A RRset
	`ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. K3/F/plHuCl85Hzg2jbiOf9Vu/OxjmL4H1/CVtYuFSQmUURnlN8Sa6ErPNmG07/yXeEkGz8OnMEi IvpIO3b+ow== )`
	RRSIG=56055 and DNSKEY=56055 verifies the A RRset

ioss.gov

	Query to a5-66.akam.net for ioss.gov/A
	Received 173 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 173 octets ;; HEADER SECTION ;; id = 18060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. q7hhY0nCFmG5hmQTnErBWAFUWWR8Lw0WrHI6KTU7LInHcqrA+MKQV63dyg3U+n4r1S0imJ7Ax/40 kcZhCjdwTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for ioss.gov
	Found RRSIG signed by ioss.gov zone
	Query to a5-66.akam.net for ioss.gov/A
	Received 173 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 173 octets ;; HEADER SECTION ;; id = 60189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. H48OmybXLUPhl89oyotAUnH3hYyMjb5DZ6JOni4OX/XR6ahxzG+K1i11iy5k0UM8tj7YSsNnqObQ tYjvB9Ex4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ioss.gov A RR has value 23.55.176.204
	ioss.gov A RR has value 23.48.104.40
	Found 1 RRSIGs over A RRset
	`ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. H48OmybXLUPhl89oyotAUnH3hYyMjb5DZ6JOni4OX/XR6ahxzG+K1i11iy5k0UM8tj7YSsNnqObQ tYjvB9Ex4g== )`
	RRSIG=56055 and DNSKEY=56055 verifies the A RRset

ioss.gov

	Query to a11-66.akam.net for ioss.gov/A
	Received 173 bytes from 84.53.139.66
	;; Response received from [84.53.139.66] 173 octets ;; HEADER SECTION ;; id = 34303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. CDwirG20vUDwKBsxtcKZ5QYrfX1uBZ4egRs2tiyjLlLsVxOBmXCm/RTTyVlz4FGmyuRsfv17JqfB r5gZI2BO6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-66.akam.net is authoritative for ioss.gov
	Found RRSIG signed by ioss.gov zone
	Query to a11-66.akam.net for ioss.gov/A
	Received 173 bytes from 84.53.139.66
	;; Response received from [84.53.139.66] 173 octets ;; HEADER SECTION ;; id = 29912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ioss.gov. IN A ;; ANSWER SECTION (3 records) ioss.gov. 20 IN A 23.55.176.204 ioss.gov. 20 IN A 23.48.104.40 ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. VSHgODmLDcubcAGNAaRMu1Ic1OSJteKuzsyDDhnpbqylfrWk5LvflC/rsugAqY7N782xffGUmVxi c9d0czFdWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ioss.gov A RR has value 23.55.176.204
	ioss.gov A RR has value 23.48.104.40
	Found 1 RRSIGs over A RRset
	`ioss.gov. 20 IN RRSIG ( A 13 2 20 20260315233927 20260312223927 56055 ioss.gov. VSHgODmLDcubcAGNAaRMu1Ic1OSJteKuzsyDDhnpbqylfrWk5LvflC/rsugAqY7N782xffGUmVxi c9d0czFdWw== )`
	RRSIG=56055 and DNSKEY=56055 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ioss.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: