DNSSEC Debugger - jobcorps.gov

Domain Name:

Time: 2025-05-21 04:19:43 UTC

Analyzing DNSSEC problems for jobcorps.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 51836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to l.root-servers.net for jobcorps.gov/A
	Received 619 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 619 octets ;; HEADER SECTION ;; id = 7331 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . IkB2XCpYhEjnXUiwR+by+DL6nhe4mJfZyl/IpXR4+/ykbsJF+JvKuUO4JZxHab8+HnGhd7VAf+qg P8vMSN0/9RTdMn+iVgDDS6/Rx3l3ZaTyzmcAJVtNYICVfOgkbWAod08/DqkuBfqFPPDxkpnXGA21 2tkKurwkMdtlyoeSti3VY/tsbtF5vGzXcg/fXOZjVQanN5jCjUa/N6aJ+F+A79bHO1R0VxR1fupD aY22mol8uAnjo5uBVy6IhslxrL/L8qQqvmlxr/vza8cp+zXTHdzmNMSbhM9UmcOiGTTonQJJPCSq 02WTePrcG3gH1MyPdM6asMltcsBz0DITbzxeww== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 4287 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . IkB2XCpYhEjnXUiwR+by+DL6nhe4mJfZyl/IpXR4+/ykbsJF+JvKuUO4JZxHab8+HnGhd7VAf+qg P8vMSN0/9RTdMn+iVgDDS6/Rx3l3ZaTyzmcAJVtNYICVfOgkbWAod08/DqkuBfqFPPDxkpnXGA21 2tkKurwkMdtlyoeSti3VY/tsbtF5vGzXcg/fXOZjVQanN5jCjUa/N6aJ+F+A79bHO1R0VxR1fupD aY22mol8uAnjo5uBVy6IhslxrL/L8qQqvmlxr/vza8cp+zXTHdzmNMSbhM9UmcOiGTTonQJJPCSq 02WTePrcG3gH1MyPdM6asMltcsBz0DITbzxeww== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 2194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . IkB2XCpYhEjnXUiwR+by+DL6nhe4mJfZyl/IpXR4+/ykbsJF+JvKuUO4JZxHab8+HnGhd7VAf+qg P8vMSN0/9RTdMn+iVgDDS6/Rx3l3ZaTyzmcAJVtNYICVfOgkbWAod08/DqkuBfqFPPDxkpnXGA21 2tkKurwkMdtlyoeSti3VY/tsbtF5vGzXcg/fXOZjVQanN5jCjUa/N6aJ+F+A79bHO1R0VxR1fupD aY22mol8uAnjo5uBVy6IhslxrL/L8qQqvmlxr/vza8cp+zXTHdzmNMSbhM9UmcOiGTTonQJJPCSq 02WTePrcG3gH1MyPdM6asMltcsBz0DITbzxeww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . IkB2XCpYhEjnXUiwR+by+DL6nhe4mJfZyl/IpXR4+/ykbsJF+JvKuUO4JZxHab8+HnGhd7VAf+qg P8vMSN0/9RTdMn+iVgDDS6/Rx3l3ZaTyzmcAJVtNYICVfOgkbWAod08/DqkuBfqFPPDxkpnXGA21 2tkKurwkMdtlyoeSti3VY/tsbtF5vGzXcg/fXOZjVQanN5jCjUa/N6aJ+F+A79bHO1R0VxR1fupD aY22mol8uAnjo5uBVy6IhslxrL/L8qQqvmlxr/vza8cp+zXTHdzmNMSbhM9UmcOiGTTonQJJPCSq 02WTePrcG3gH1MyPdM6asMltcsBz0DITbzxeww== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 26986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250704110557 20250504110557 2536 gov. tAeRYp56dPYu79FfML7RVcEKV8saNzG7X9/H2Krxd6fbG/aG0lMmwKQbHE4g3q3S7bIopKhjIVcm rIYydkI0uQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250704110557 20250504110557 2536 gov. tAeRYp56dPYu79FfML7RVcEKV8saNzG7X9/H2Krxd6fbG/aG0lMmwKQbHE4g3q3S7bIopKhjIVcm rIYydkI0uQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for jobcorps.gov/A
	Received 480 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 480 octets ;; HEADER SECTION ;; id = 49436 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jobcorps.gov. 10800 IN NS jcdc-s-eds-001.jobcorps.gov. jobcorps.gov. 10800 IN NS jcdc-s-eds-002.jobcorps.gov. jobcorps.gov. 10800 IN NS rich-s-eds-001.jobcorps.gov. jobcorps.gov. 10800 IN NS rich-s-eds-002.jobcorps.gov. jobcorps.gov. 3600 IN DS ( 55699 8 2 7e5b5de5ca5f916cfb4a3f1b17949ba99300ab9ae037045ea41995c604884165 ) jobcorps.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522051944 20250520031944 35496 gov. rNCMUe30TT+O/3jCu1l56BGI9pbej+9jVA+UQFJ9cBUxmkRefpc0s19jCL9tmRXkjrbpZPGJZHhg euvoM6byXQ== ) ;; ADDITIONAL SECTION (9 records) jcdc-s-eds-001.jobcorps.gov. 3600 IN A 209.133.91.90 jcdc-s-eds-001.jobcorps.gov. 3600 IN AAAA 2001:438:8000:1f::90 jcdc-s-eds-002.jobcorps.gov. 3600 IN A 209.133.91.91 jcdc-s-eds-002.jobcorps.gov. 3600 IN AAAA 2001:438:8000:1f::91 rich-s-eds-001.jobcorps.gov. 3600 IN A 170.55.0.113 rich-s-eds-001.jobcorps.gov. 3600 IN AAAA 2604:200:0:7c::113 rich-s-eds-002.jobcorps.gov. 3600 IN A 170.55.0.114 rich-s-eds-002.jobcorps.gov. 3600 IN AAAA 2604:200:0:7c::114 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for jobcorps.gov/DNSKEY
	Received 480 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 480 octets ;; HEADER SECTION ;; id = 541 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jobcorps.gov. 10800 IN NS jcdc-s-eds-001.jobcorps.gov. jobcorps.gov. 10800 IN NS jcdc-s-eds-002.jobcorps.gov. jobcorps.gov. 10800 IN NS rich-s-eds-001.jobcorps.gov. jobcorps.gov. 10800 IN NS rich-s-eds-002.jobcorps.gov. jobcorps.gov. 3600 IN DS ( 55699 8 2 7e5b5de5ca5f916cfb4a3f1b17949ba99300ab9ae037045ea41995c604884165 ) jobcorps.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522051944 20250520031944 35496 gov. JiCy3dmVWENG/F1INRX64tdI/nj+3zSEXH9JWs+zA6nQjv9Yf6TzSo3cos61L0zp8fz7V3IYSZl0 GClKMheQrw== ) ;; ADDITIONAL SECTION (9 records) jcdc-s-eds-001.jobcorps.gov. 3600 IN A 209.133.91.90 jcdc-s-eds-001.jobcorps.gov. 3600 IN AAAA 2001:438:8000:1f::90 jcdc-s-eds-002.jobcorps.gov. 3600 IN A 209.133.91.91 jcdc-s-eds-002.jobcorps.gov. 3600 IN AAAA 2001:438:8000:1f::91 rich-s-eds-001.jobcorps.gov. 3600 IN A 170.55.0.113 rich-s-eds-001.jobcorps.gov. 3600 IN AAAA 2604:200:0:7c::113 rich-s-eds-002.jobcorps.gov. 3600 IN A 170.55.0.114 rich-s-eds-002.jobcorps.gov. 3600 IN AAAA 2604:200:0:7c::114 ;; { "EDNS-VERSION": 0 }
	Found child zone jobcorps.gov

jobcorps.gov

	Checking DS between gov and jobcorps.gov
	Query to c.ns.gov for jobcorps.gov/DS
	Received 188 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 188 octets ;; HEADER SECTION ;; id = 14015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN DS ;; ANSWER SECTION (2 records) jobcorps.gov. 3600 IN DS ( 55699 8 2 7e5b5de5ca5f916cfb4a3f1b17949ba99300ab9ae037045ea41995c604884165 ) jobcorps.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522051944 20250520031944 35496 gov. cQqxRKO0Q8UH0yJ5X/LOVW5DXPkBzzBzRpsY0RUEcsI5b6JlQ3NbEfxqLugJhQe5pPjitzq1+ovw mAOOwau+aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jobcorps.gov in the gov zone
	DS=55699/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jobcorps.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522051944 20250520031944 35496 gov. cQqxRKO0Q8UH0yJ5X/LOVW5DXPkBzzBzRpsY0RUEcsI5b6JlQ3NbEfxqLugJhQe5pPjitzq1+ovw mAOOwau+aw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=55699/SHA-256 is now in the chain-of-trust
	`jobcorps.gov. 3600 IN DS ( 55699 8 2 7e5b5de5ca5f916cfb4a3f1b17949ba99300ab9ae037045ea41995c604884165 )`
	Query to jcdc-s-eds-001.jobcorps.gov for jobcorps.gov/DNSKEY
	Received 937 bytes from 209.133.91.90
	;; Response received from [209.133.91.90] 937 octets ;; HEADER SECTION ;; id = 8392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN DNSKEY ;; ANSWER SECTION (4 records) jobcorps.gov. 300 IN DNSKEY ( 256 3 8 AwEAAc5btev7n8/0QTC5sQyzR6krXRE3u9Pz4J+Cqbp8320zusUmYnQW94gVRUekTxE9Y9AAYZfJ 1+jStufLapK/88UEknwrCpYNyNJg9qh4rbRldrv7zythhnxqNO2Z/5ZyDinnsUlKxmUua1zAW5jd t1wPg0ZWDEvflj4rz9cCPGnJ ) ; keytag 10479 jobcorps.gov. 300 IN DNSKEY ( 257 3 8 AwEAAeDDy3DOUDhfduYbu2arqRrtO6jhgyojqY6dX88LBZ5O9cIAFZFmj7EapvJhBjW5U3WLixTE iTqH+4LeF38gOGi5KEZRSCZv125y522fGXb4Rqent27BKXkAQYkjAcRCPcT9z13nmb4xPwFh692m GZFgKJlDE3Uzd/fozD0gbvuRH9X6V3df/RS4chTZ5aVrA5XUoZq7CNSft8ZvWy71q3nZU2dygg80 hh+yCLROvE8AQ639BmiuipXMJXQYYpj3oMVXC93UZyhmX6TmXgINeWOgoC0fqNO0d++j8RhkNN8a pLCYmI1KPoVr6D2+AH4E653JPQAnOTB7hDftkS2HYE0= ) ; keytag 55699 jobcorps.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. pPLs/1nNnsARrGu29JZtqu5bbCyO9UCMlT69l0xCYEeLrF3PHMjQi1emc2NTTjJ4TSe2FAnn5lJX k4WWAKw/ncQiI+ctjdhXY38BWZ2NopJpRdB93//uySqNVINHO4NP8accqZB+FhVfOVfCAnn88xa+ Rf9/q2Tr79T5iblJ0qo= ) jobcorps.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20250620030034 20250521030034 55699 jobcorps.gov. aKBxcLuhEIflskgm5rWSJKfybqGGcv4Km5oXYV5qTsxbeC3VjJTsDNBVQa0B4s5x7ca2Ujsl12Im oNb/n76oG28dJTpt7jQ8Iqs/wxEMAP+P2DbkVkjm0A37K7//67UOxWglBhaBE4BjvyCYbvGod4BT s8fhrxqvOyJVMPJfhRmEBpqATf+4ozcB3Q9SW08qsIR/nKfiXzguNW5yX+fFk/2JKlYpBmhDi4f2 ggvb2O0eBXRJZRdOZMGOlunozul+8+KPPZjq3SH85vAcb2bsoYLstSRX7hhwxJi0yMFP451JSwfU aoHEZXB0czcFoi/2BImVgQG0Kj7BCnI3oJwnig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for jobcorps.gov
	`jobcorps.gov. 300 IN DNSKEY ( 256 3 8 AwEAAc5btev7n8/0QTC5sQyzR6krXRE3u9Pz4J+Cqbp8320zusUmYnQW94gVRUekTxE9Y9AAYZfJ 1+jStufLapK/88UEknwrCpYNyNJg9qh4rbRldrv7zythhnxqNO2Z/5ZyDinnsUlKxmUua1zAW5jd t1wPg0ZWDEvflj4rz9cCPGnJ ) ; keytag 10479`
	`jobcorps.gov. 300 IN DNSKEY ( 257 3 8 AwEAAeDDy3DOUDhfduYbu2arqRrtO6jhgyojqY6dX88LBZ5O9cIAFZFmj7EapvJhBjW5U3WLixTE iTqH+4LeF38gOGi5KEZRSCZv125y522fGXb4Rqent27BKXkAQYkjAcRCPcT9z13nmb4xPwFh692m GZFgKJlDE3Uzd/fozD0gbvuRH9X6V3df/RS4chTZ5aVrA5XUoZq7CNSft8ZvWy71q3nZU2dygg80 hh+yCLROvE8AQ639BmiuipXMJXQYYpj3oMVXC93UZyhmX6TmXgINeWOgoC0fqNO0d++j8RhkNN8a pLCYmI1KPoVr6D2+AH4E653JPQAnOTB7hDftkS2HYE0= ) ; keytag 55699`
	DNSKEY=55699/SEP is now in the chain-of-trust
	DS=55699/SHA-256 verifies DNSKEY=55699/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`jobcorps.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. pPLs/1nNnsARrGu29JZtqu5bbCyO9UCMlT69l0xCYEeLrF3PHMjQi1emc2NTTjJ4TSe2FAnn5lJX k4WWAKw/ncQiI+ctjdhXY38BWZ2NopJpRdB93//uySqNVINHO4NP8accqZB+FhVfOVfCAnn88xa+ Rf9/q2Tr79T5iblJ0qo= )`
	`jobcorps.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20250620030034 20250521030034 55699 jobcorps.gov. aKBxcLuhEIflskgm5rWSJKfybqGGcv4Km5oXYV5qTsxbeC3VjJTsDNBVQa0B4s5x7ca2Ujsl12Im oNb/n76oG28dJTpt7jQ8Iqs/wxEMAP+P2DbkVkjm0A37K7//67UOxWglBhaBE4BjvyCYbvGod4BT s8fhrxqvOyJVMPJfhRmEBpqATf+4ozcB3Q9SW08qsIR/nKfiXzguNW5yX+fFk/2JKlYpBmhDi4f2 ggvb2O0eBXRJZRdOZMGOlunozul+8+KPPZjq3SH85vAcb2bsoYLstSRX7hhwxJi0yMFP451JSwfU aoHEZXB0czcFoi/2BImVgQG0Kj7BCnI3oJwnig== )`
	RRSIG=10479 and DNSKEY=10479 verifies the DNSKEY RRset
	RRSIG=55699 and DNSKEY=55699/SEP verifies the DNSKEY RRset
	DNSKEY=10479 is now in the chain-of-trust
	Query to rich-s-eds-002.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 170.55.0.114
	;; Response received from [170.55.0.114] 229 octets ;; HEADER SECTION ;; id = 54406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rich-s-eds-002.jobcorps.gov is authoritative for jobcorps.gov
	Found RRSIG signed by jobcorps.gov zone
	Query to rich-s-eds-001.jobcorps.gov for jobcorps.gov/SOA
	Received 663 bytes from 170.55.0.113
	;; Response received from [170.55.0.113] 663 octets ;; HEADER SECTION ;; id = 1786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN SOA ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN SOA ( rich-s-eds-001.jobcorps.gov. hostmaster.jobcorps.gov. 2007082447 ;serial 1200 ;refresh 600 ;retry 1209600 ;expire 300 ;minimum ) jobcorps.gov. 300 IN RRSIG ( SOA 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. i6Nf0nWO7fv4rMIYW3n+GvSBDssMbyOBu28agzFmdSsdGQV6GSFJifScyHbUxFtZESWJPb2IfjJM RroFAjjTM7T8cKUUlz74K9tEBVAyj9B2Bjax/uhD5RBpttrHmu98vqVMXF1g+P9aHx3LONr84TZ7 HQ4rSz/cTv+jbU1EV4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (5 records) rich-s-eds-001.jobcorps.gov. 300 IN A 170.55.0.113 rich-s-eds-001.jobcorps.gov. 300 IN RRSIG ( A 8 3 300 20250620030034 20250521030034 10479 jobcorps.gov. MngWawg4IlcVpkUcL2SHyD4ex4+VBRHHOkCB7/TzEG4+GzQ2wKC31ppmzGh6hUch7bMWsMjgXf3J NOrewQC4TSQHJc1D0YQgrQ/gUyujwXAdX+mwbGadW39wQxkxYq6ewPMjA3Zw9OmPCGmxIDf2kMUc f8e7s1ckLMTKp/a3ei4= ) rich-s-eds-001.jobcorps.gov. 300 IN AAAA 2604:200:0:7c::113 rich-s-eds-001.jobcorps.gov. 300 IN RRSIG ( AAAA 8 3 300 20250620030034 20250521030034 10479 jobcorps.gov. cOA2sL7m6sKxOmd3WxFImxrERH48Y3GI5ofwCphvWzaESOzVXUwb2KL463d710/3CigqUnKVZ9+l KiRE/R8+D27NAyP69UP4J4VuMM7vOIQK2bV/bET83putCGt82mQ0z8O/Zb416rHP9fkwO7bxe5P8 NrGmg/AaAA4FuWJYmIU= ) ;; { "EDNS-VERSION": 0 }
	Query to jcdc-s-eds-001.jobcorps.gov for jobcorps.gov/SOA
	Received 663 bytes from 209.133.91.90
	;; Response received from [209.133.91.90] 663 octets ;; HEADER SECTION ;; id = 27906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN SOA ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN SOA ( rich-s-eds-001.jobcorps.gov. hostmaster.jobcorps.gov. 2007082447 ;serial 1200 ;refresh 600 ;retry 1209600 ;expire 300 ;minimum ) jobcorps.gov. 300 IN RRSIG ( SOA 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. i6Nf0nWO7fv4rMIYW3n+GvSBDssMbyOBu28agzFmdSsdGQV6GSFJifScyHbUxFtZESWJPb2IfjJM RroFAjjTM7T8cKUUlz74K9tEBVAyj9B2Bjax/uhD5RBpttrHmu98vqVMXF1g+P9aHx3LONr84TZ7 HQ4rSz/cTv+jbU1EV4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (5 records) rich-s-eds-001.jobcorps.gov. 300 IN A 170.55.0.113 rich-s-eds-001.jobcorps.gov. 300 IN RRSIG ( A 8 3 300 20250620030034 20250521030034 10479 jobcorps.gov. MngWawg4IlcVpkUcL2SHyD4ex4+VBRHHOkCB7/TzEG4+GzQ2wKC31ppmzGh6hUch7bMWsMjgXf3J NOrewQC4TSQHJc1D0YQgrQ/gUyujwXAdX+mwbGadW39wQxkxYq6ewPMjA3Zw9OmPCGmxIDf2kMUc f8e7s1ckLMTKp/a3ei4= ) rich-s-eds-001.jobcorps.gov. 300 IN AAAA 2604:200:0:7c::113 rich-s-eds-001.jobcorps.gov. 300 IN RRSIG ( AAAA 8 3 300 20250620030034 20250521030034 10479 jobcorps.gov. cOA2sL7m6sKxOmd3WxFImxrERH48Y3GI5ofwCphvWzaESOzVXUwb2KL463d710/3CigqUnKVZ9+l KiRE/R8+D27NAyP69UP4J4VuMM7vOIQK2bV/bET83putCGt82mQ0z8O/Zb416rHP9fkwO7bxe5P8 NrGmg/AaAA4FuWJYmIU= ) ;; { "EDNS-VERSION": 0 }
	Query to jcdc-s-eds-002.jobcorps.gov for jobcorps.gov/SOA
	Received 663 bytes from 209.133.91.91
	;; Response received from [209.133.91.91] 663 octets ;; HEADER SECTION ;; id = 58449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN SOA ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN SOA ( rich-s-eds-001.jobcorps.gov. hostmaster.jobcorps.gov. 2007082447 ;serial 1200 ;refresh 600 ;retry 1209600 ;expire 300 ;minimum ) jobcorps.gov. 300 IN RRSIG ( SOA 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. i6Nf0nWO7fv4rMIYW3n+GvSBDssMbyOBu28agzFmdSsdGQV6GSFJifScyHbUxFtZESWJPb2IfjJM RroFAjjTM7T8cKUUlz74K9tEBVAyj9B2Bjax/uhD5RBpttrHmu98vqVMXF1g+P9aHx3LONr84TZ7 HQ4rSz/cTv+jbU1EV4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (5 records) rich-s-eds-001.jobcorps.gov. 300 IN A 170.55.0.113 rich-s-eds-001.jobcorps.gov. 300 IN RRSIG ( A 8 3 300 20250620030034 20250521030034 10479 jobcorps.gov. MngWawg4IlcVpkUcL2SHyD4ex4+VBRHHOkCB7/TzEG4+GzQ2wKC31ppmzGh6hUch7bMWsMjgXf3J NOrewQC4TSQHJc1D0YQgrQ/gUyujwXAdX+mwbGadW39wQxkxYq6ewPMjA3Zw9OmPCGmxIDf2kMUc f8e7s1ckLMTKp/a3ei4= ) rich-s-eds-001.jobcorps.gov. 300 IN AAAA 2604:200:0:7c::113 rich-s-eds-001.jobcorps.gov. 300 IN RRSIG ( AAAA 8 3 300 20250620030034 20250521030034 10479 jobcorps.gov. cOA2sL7m6sKxOmd3WxFImxrERH48Y3GI5ofwCphvWzaESOzVXUwb2KL463d710/3CigqUnKVZ9+l KiRE/R8+D27NAyP69UP4J4VuMM7vOIQK2bV/bET83putCGt82mQ0z8O/Zb416rHP9fkwO7bxe5P8 NrGmg/AaAA4FuWJYmIU= ) ;; { "EDNS-VERSION": 0 }
	Query to rich-s-eds-002.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 170.55.0.114
	;; Response received from [170.55.0.114] 229 octets ;; HEADER SECTION ;; id = 8029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jobcorps.gov A RR has value 34.205.179.35
	Found 1 RRSIGs over A RRset
	`jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= )`
	RRSIG=10479 and DNSKEY=10479 verifies the A RRset

jobcorps.gov

	Query to rich-s-eds-001.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 170.55.0.113
	;; Response received from [170.55.0.113] 229 octets ;; HEADER SECTION ;; id = 26132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rich-s-eds-001.jobcorps.gov is authoritative for jobcorps.gov
	Found RRSIG signed by jobcorps.gov zone
	Query to rich-s-eds-001.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 170.55.0.113
	;; Response received from [170.55.0.113] 229 octets ;; HEADER SECTION ;; id = 57355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jobcorps.gov A RR has value 34.205.179.35
	Found 1 RRSIGs over A RRset
	`jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= )`
	RRSIG=10479 and DNSKEY=10479 verifies the A RRset

jobcorps.gov

	Query to jcdc-s-eds-001.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 209.133.91.90
	;; Response received from [209.133.91.90] 229 octets ;; HEADER SECTION ;; id = 51684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jcdc-s-eds-001.jobcorps.gov is authoritative for jobcorps.gov
	Found RRSIG signed by jobcorps.gov zone
	Query to jcdc-s-eds-001.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 209.133.91.90
	;; Response received from [209.133.91.90] 229 octets ;; HEADER SECTION ;; id = 4390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jobcorps.gov A RR has value 34.205.179.35
	Found 1 RRSIGs over A RRset
	`jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= )`
	RRSIG=10479 and DNSKEY=10479 verifies the A RRset

jobcorps.gov

	Query to jcdc-s-eds-002.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 209.133.91.91
	;; Response received from [209.133.91.91] 229 octets ;; HEADER SECTION ;; id = 29171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jcdc-s-eds-002.jobcorps.gov is authoritative for jobcorps.gov
	Found RRSIG signed by jobcorps.gov zone
	Query to jcdc-s-eds-002.jobcorps.gov for jobcorps.gov/A
	Received 229 bytes from 209.133.91.91
	;; Response received from [209.133.91.91] 229 octets ;; HEADER SECTION ;; id = 47206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobcorps.gov. IN A ;; ANSWER SECTION (2 records) jobcorps.gov. 300 IN A 34.205.179.35 jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jobcorps.gov A RR has value 34.205.179.35
	Found 1 RRSIGs over A RRset
	`jobcorps.gov. 300 IN RRSIG ( A 8 2 300 20250620030034 20250521030034 10479 jobcorps.gov. oyzrbkWU9GYz/tLgei2XSy4So7yBXXRPxPUbP+5uJIkVbsYRcKyL36ffDxWf092ad6RMBrPVQA86 t7+I+tg5L3q4vnWJ/Syps3qeiJMaMewHoVkfNYwC88RN6u+ZkD9tdIkdhs3T0T/6e3tTi8qmHVR8 8DIMz3iBXItIpnOU38M= )`
	RRSIG=10479 and DNSKEY=10479 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test jobcorps.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: