DNSSEC Debugger - safercar.gov

Domain Name:

Time: 2026-03-17 11:46:15 UTC

Analyzing DNSSEC problems for safercar.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 65327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to d.root-servers.net for safercar.gov/A
	Received 619 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 619 octets ;; HEADER SECTION ;; id = 9425 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260330050000 20260317040000 21831 . cfMkWBlnkKZTMw3cc/wmV1l8pl+4cPjf7QGlxwvynWztx53aEqe6iLw4LvYZBQnCRfN2mefv5QMA wqMrKj6sCSNaI07EPfzsLjyN9xkFjwiZti95Mr9eGgL4va1KWpfmWHgEa4YUjTbJiI9Cem2+2vSF AcJX/3mpDYTwpnKh87ScuBJ5upnkJCq72oaiSIUPdXj3Hk0u4k0MvhEiaVGpg6Oc07+RLRGWrzmm zr+QUJ/yFYm51vMfD22i4IOrM7Wvj8GHGL61m7W4GIDENw30+rU6f6nK1GDEFdeMJpA8yvpH2Tqt tvAYCH2E6ZRZo/kbM76mTZV6TMVwHtGipck5HQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 610 octets ;; HEADER SECTION ;; id = 14040 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260330050000 20260317040000 21831 . cfMkWBlnkKZTMw3cc/wmV1l8pl+4cPjf7QGlxwvynWztx53aEqe6iLw4LvYZBQnCRfN2mefv5QMA wqMrKj6sCSNaI07EPfzsLjyN9xkFjwiZti95Mr9eGgL4va1KWpfmWHgEa4YUjTbJiI9Cem2+2vSF AcJX/3mpDYTwpnKh87ScuBJ5upnkJCq72oaiSIUPdXj3Hk0u4k0MvhEiaVGpg6Oc07+RLRGWrzmm zr+QUJ/yFYm51vMfD22i4IOrM7Wvj8GHGL61m7W4GIDENw30+rU6f6nK1GDEFdeMJpA8yvpH2Tqt tvAYCH2E6ZRZo/kbM76mTZV6TMVwHtGipck5HQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 41013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260330050000 20260317040000 21831 . cfMkWBlnkKZTMw3cc/wmV1l8pl+4cPjf7QGlxwvynWztx53aEqe6iLw4LvYZBQnCRfN2mefv5QMA wqMrKj6sCSNaI07EPfzsLjyN9xkFjwiZti95Mr9eGgL4va1KWpfmWHgEa4YUjTbJiI9Cem2+2vSF AcJX/3mpDYTwpnKh87ScuBJ5upnkJCq72oaiSIUPdXj3Hk0u4k0MvhEiaVGpg6Oc07+RLRGWrzmm zr+QUJ/yFYm51vMfD22i4IOrM7Wvj8GHGL61m7W4GIDENw30+rU6f6nK1GDEFdeMJpA8yvpH2Tqt tvAYCH2E6ZRZo/kbM76mTZV6TMVwHtGipck5HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260330050000 20260317040000 21831 . cfMkWBlnkKZTMw3cc/wmV1l8pl+4cPjf7QGlxwvynWztx53aEqe6iLw4LvYZBQnCRfN2mefv5QMA wqMrKj6sCSNaI07EPfzsLjyN9xkFjwiZti95Mr9eGgL4va1KWpfmWHgEa4YUjTbJiI9Cem2+2vSF AcJX/3mpDYTwpnKh87ScuBJ5upnkJCq72oaiSIUPdXj3Hk0u4k0MvhEiaVGpg6Oc07+RLRGWrzmm zr+QUJ/yFYm51vMfD22i4IOrM7Wvj8GHGL61m7W4GIDENw30+rU6f6nK1GDEFdeMJpA8yvpH2Tqt tvAYCH2E6ZRZo/kbM76mTZV6TMVwHtGipck5HQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 25676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for safercar.gov/A
	Received 320 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 320 octets ;; HEADER SECTION ;; id = 39583 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) safercar.gov. 10800 IN NS a1-97.akam.net. safercar.gov. 10800 IN NS a11-65.akam.net. safercar.gov. 10800 IN NS a12-64.akam.net. safercar.gov. 10800 IN NS a14-64.akam.net. safercar.gov. 10800 IN NS a24-64.akam.net. safercar.gov. 10800 IN NS a5-65.akam.net. safercar.gov. 3600 IN DS ( 18717 13 2 811a43756e5ef7df5f1e5f9384265effd7589706060689fba10bfdb305a13a8d ) safercar.gov. 3600 IN RRSIG ( DS 13 2 3600 20260318124615 20260316104615 35496 gov. ErICG68CPyXTrNdVfBholGr0X0wQxJrAPsdFGBCW4I4/u1BWLNTLsUFhRNHq5qiN71yKuHQCbUld zp9tm1vOqg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for safercar.gov/DNSKEY
	Received 320 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 320 octets ;; HEADER SECTION ;; id = 62230 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) safercar.gov. 10800 IN NS a1-97.akam.net. safercar.gov. 10800 IN NS a11-65.akam.net. safercar.gov. 10800 IN NS a12-64.akam.net. safercar.gov. 10800 IN NS a14-64.akam.net. safercar.gov. 10800 IN NS a24-64.akam.net. safercar.gov. 10800 IN NS a5-65.akam.net. safercar.gov. 3600 IN DS ( 18717 13 2 811a43756e5ef7df5f1e5f9384265effd7589706060689fba10bfdb305a13a8d ) safercar.gov. 3600 IN RRSIG ( DS 13 2 3600 20260318124615 20260316104615 35496 gov. DX9CYQbGSDca0Qnz2Hn6S79jMaPsusr0d1GTY/X4Dm+v+KYyiJTJjIJ4PVUf8mAK/WNZf3ludfe/ yQPO5bp35A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone safercar.gov

safercar.gov

	Checking DS between gov and safercar.gov
	Query to a.ns.gov for safercar.gov/DS
	Received 188 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 188 octets ;; HEADER SECTION ;; id = 56726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN DS ;; ANSWER SECTION (2 records) safercar.gov. 3600 IN DS ( 18717 13 2 811a43756e5ef7df5f1e5f9384265effd7589706060689fba10bfdb305a13a8d ) safercar.gov. 3600 IN RRSIG ( DS 13 2 3600 20260318124615 20260316104615 35496 gov. +DEsthJ/5Y77lOlpaaq3l7C7D0jBX8lf1qcSoaox0fvJyNqZy3ev9cbawd8QUdqLyOO4kRg6SxsG WSqBbt6G1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for safercar.gov in the gov zone
	DS=18717/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`safercar.gov. 3600 IN RRSIG ( DS 13 2 3600 20260318124615 20260316104615 35496 gov. +DEsthJ/5Y77lOlpaaq3l7C7D0jBX8lf1qcSoaox0fvJyNqZy3ev9cbawd8QUdqLyOO4kRg6SxsG WSqBbt6G1w== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=18717/SHA-256 is now in the chain-of-trust
	`safercar.gov. 3600 IN DS ( 18717 13 2 811a43756e5ef7df5f1e5f9384265effd7589706060689fba10bfdb305a13a8d )`
	Query to a12-64.akam.net for safercar.gov/DNSKEY
	Received 577 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 577 octets ;; HEADER SECTION ;; id = 57957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN DNSKEY ;; ANSWER SECTION (6 records) safercar.gov. 7200 IN DNSKEY ( 256 3 13 M9TnKYqBE64+S5XLW54wSSHNi5ffFS6KfoH5mqiYoC12zk1vO2qxvvrHxUoCxz+cMYEWpD5ecyYN IdieaMOZtg== ) ; keytag 12001 safercar.gov. 7200 IN DNSKEY ( 256 3 13 SVgtHvQUUh2Q2qCKI/yG0HOr6Wxq+IZSdzEkfxtetQS3vqNb6RxUb/8inme/pvj6Bc3py21PqzxT I+X7NA7p6w== ) ; keytag 42351 safercar.gov. 7200 IN DNSKEY ( 257 3 13 RtgO1oL6bITc4cmaJerQoG0q1YI3o11+yqUxpFis+n5M5Ku6fiV1Ykas7TA+0wxwhiwZuogONhGJ SC2DtOCjqA== ) ; keytag 58921 safercar.gov. 7200 IN DNSKEY ( 257 3 13 qJAJ0L/yASMhwovubmrdbZqso72HV9mkiQ6zQjif7IVp05QspyBXTeNCnNC0hZevoYZvwI3ryS8i k4QNpMZasg== ) ; keytag 18717 safercar.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260319121829 20260316111829 18717 safercar.gov. eye4Rq/HsYu2VpUzgedqQidO3KVZAWEWOglpVWF1BNcw5irEPZgpQNSxLE+2Ua1aN+4j/2Faj07R NbL9kn28PQ== ) safercar.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260319121829 20260316111829 58921 safercar.gov. 2lGhgs4sV+osbDlvftJgtK1meXmQhCNyjaiuqnjzsUmFkF0uqAxBjYuVhriuw6w6esRELbWsu85c KFjQxlJyHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for safercar.gov
	`safercar.gov. 7200 IN DNSKEY ( 256 3 13 M9TnKYqBE64+S5XLW54wSSHNi5ffFS6KfoH5mqiYoC12zk1vO2qxvvrHxUoCxz+cMYEWpD5ecyYN IdieaMOZtg== ) ; keytag 12001`
	`safercar.gov. 7200 IN DNSKEY ( 256 3 13 SVgtHvQUUh2Q2qCKI/yG0HOr6Wxq+IZSdzEkfxtetQS3vqNb6RxUb/8inme/pvj6Bc3py21PqzxT I+X7NA7p6w== ) ; keytag 42351`
	`safercar.gov. 7200 IN DNSKEY ( 257 3 13 RtgO1oL6bITc4cmaJerQoG0q1YI3o11+yqUxpFis+n5M5Ku6fiV1Ykas7TA+0wxwhiwZuogONhGJ SC2DtOCjqA== ) ; keytag 58921`
	`safercar.gov. 7200 IN DNSKEY ( 257 3 13 qJAJ0L/yASMhwovubmrdbZqso72HV9mkiQ6zQjif7IVp05QspyBXTeNCnNC0hZevoYZvwI3ryS8i k4QNpMZasg== ) ; keytag 18717`
	DNSKEY=18717/SEP is now in the chain-of-trust
	DS=18717/SHA-256 verifies DNSKEY=18717/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`safercar.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260319121829 20260316111829 18717 safercar.gov. eye4Rq/HsYu2VpUzgedqQidO3KVZAWEWOglpVWF1BNcw5irEPZgpQNSxLE+2Ua1aN+4j/2Faj07R NbL9kn28PQ== )`
	`safercar.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260319121829 20260316111829 58921 safercar.gov. 2lGhgs4sV+osbDlvftJgtK1meXmQhCNyjaiuqnjzsUmFkF0uqAxBjYuVhriuw6w6esRELbWsu85c KFjQxlJyHg== )`
	RRSIG=18717 and DNSKEY=18717/SEP verifies the DNSKEY RRset
	RRSIG=58921 and DNSKEY=58921/SEP verifies the DNSKEY RRset
	DNSKEY=12001 is now in the chain-of-trust
	DNSKEY=42351 is now in the chain-of-trust
	DNSKEY=58921/SEP is now in the chain-of-trust
	Query to a5-65.akam.net for safercar.gov/A
	Received 165 bytes from 95.100.168.65
	;; Response received from [95.100.168.65] 165 octets ;; HEADER SECTION ;; id = 27719 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-65.akam.net is authoritative for safercar.gov
	Found RRSIG signed by safercar.gov zone
	Query to a24-64.akam.net for safercar.gov/SOA
	Received 462 bytes from 2.16.130.64
	;; Response received from [2.16.130.64] 462 octets ;; HEADER SECTION ;; id = 25844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN SOA ;; ANSWER SECTION (2 records) safercar.gov. 600 IN SOA ( dot-dca-edns-wz01.idn.dot.gov. hostmaster.dot.gov. 2011128398 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 300 ;minimum ) safercar.gov. 600 IN RRSIG ( SOA 13 2 600 20260319121829 20260316111829 42351 safercar.gov. 2zDqtgL4oJLPD11mtap9XFD1xB9LQU2kXa8/7hXz5TlV4zcf4z17FD8aY6Ja1Msc1XlTfZjbtUj/ XVTCG6HzsQ== ) ;; AUTHORITY SECTION (7 records) safercar.gov. 600 IN NS a14-64.akam.net. safercar.gov. 600 IN NS a1-97.akam.net. safercar.gov. 600 IN NS a5-65.akam.net. safercar.gov. 600 IN NS a24-64.akam.net. safercar.gov. 600 IN NS a12-64.akam.net. safercar.gov. 600 IN NS a11-65.akam.net. safercar.gov. 600 IN RRSIG ( NS 13 2 600 20260319121829 20260316111829 42351 safercar.gov. c2P37swNMEBz/xnIUkF5+ZoRCQIei7hbmpwiHNuAPQcpYXkBpgAPWNgfxGULVb5e1qUwdUrte3Cm V+A0ppIe2w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-64.akam.net for safercar.gov/SOA
	Received 462 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 462 octets ;; HEADER SECTION ;; id = 62163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN SOA ;; ANSWER SECTION (2 records) safercar.gov. 600 IN SOA ( dot-dca-edns-wz01.idn.dot.gov. hostmaster.dot.gov. 2011128398 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 300 ;minimum ) safercar.gov. 600 IN RRSIG ( SOA 13 2 600 20260319121829 20260316111829 42351 safercar.gov. 2zDqtgL4oJLPD11mtap9XFD1xB9LQU2kXa8/7hXz5TlV4zcf4z17FD8aY6Ja1Msc1XlTfZjbtUj/ XVTCG6HzsQ== ) ;; AUTHORITY SECTION (7 records) safercar.gov. 600 IN NS a14-64.akam.net. safercar.gov. 600 IN NS a12-64.akam.net. safercar.gov. 600 IN NS a1-97.akam.net. safercar.gov. 600 IN NS a5-65.akam.net. safercar.gov. 600 IN NS a11-65.akam.net. safercar.gov. 600 IN NS a24-64.akam.net. safercar.gov. 600 IN RRSIG ( NS 13 2 600 20260319121829 20260316111829 42351 safercar.gov. c2P37swNMEBz/xnIUkF5+ZoRCQIei7hbmpwiHNuAPQcpYXkBpgAPWNgfxGULVb5e1qUwdUrte3Cm V+A0ppIe2w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a11-65.akam.net for safercar.gov/SOA
	Received 462 bytes from 84.53.139.65
	;; Response received from [84.53.139.65] 462 octets ;; HEADER SECTION ;; id = 674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN SOA ;; ANSWER SECTION (2 records) safercar.gov. 600 IN SOA ( dot-dca-edns-wz01.idn.dot.gov. hostmaster.dot.gov. 2011128398 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 300 ;minimum ) safercar.gov. 600 IN RRSIG ( SOA 13 2 600 20260319121829 20260316111829 42351 safercar.gov. 2zDqtgL4oJLPD11mtap9XFD1xB9LQU2kXa8/7hXz5TlV4zcf4z17FD8aY6Ja1Msc1XlTfZjbtUj/ XVTCG6HzsQ== ) ;; AUTHORITY SECTION (7 records) safercar.gov. 600 IN NS a14-64.akam.net. safercar.gov. 600 IN NS a24-64.akam.net. safercar.gov. 600 IN NS a12-64.akam.net. safercar.gov. 600 IN NS a11-65.akam.net. safercar.gov. 600 IN NS a1-97.akam.net. safercar.gov. 600 IN NS a5-65.akam.net. safercar.gov. 600 IN RRSIG ( NS 13 2 600 20260319121829 20260316111829 42351 safercar.gov. c2P37swNMEBz/xnIUkF5+ZoRCQIei7hbmpwiHNuAPQcpYXkBpgAPWNgfxGULVb5e1qUwdUrte3Cm V+A0ppIe2w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for safercar.gov/SOA
	Received 462 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 462 octets ;; HEADER SECTION ;; id = 3582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN SOA ;; ANSWER SECTION (2 records) safercar.gov. 600 IN SOA ( dot-dca-edns-wz01.idn.dot.gov. hostmaster.dot.gov. 2011128398 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 300 ;minimum ) safercar.gov. 600 IN RRSIG ( SOA 13 2 600 20260319121829 20260316111829 42351 safercar.gov. 2zDqtgL4oJLPD11mtap9XFD1xB9LQU2kXa8/7hXz5TlV4zcf4z17FD8aY6Ja1Msc1XlTfZjbtUj/ XVTCG6HzsQ== ) ;; AUTHORITY SECTION (7 records) safercar.gov. 600 IN NS a14-64.akam.net. safercar.gov. 600 IN NS a11-65.akam.net. safercar.gov. 600 IN NS a5-65.akam.net. safercar.gov. 600 IN NS a12-64.akam.net. safercar.gov. 600 IN NS a24-64.akam.net. safercar.gov. 600 IN NS a1-97.akam.net. safercar.gov. 600 IN RRSIG ( NS 13 2 600 20260319121829 20260316111829 42351 safercar.gov. c2P37swNMEBz/xnIUkF5+ZoRCQIei7hbmpwiHNuAPQcpYXkBpgAPWNgfxGULVb5e1qUwdUrte3Cm V+A0ppIe2w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-97.akam.net for safercar.gov/SOA
	Received 462 bytes from 193.108.91.97
	;; Response received from [193.108.91.97] 462 octets ;; HEADER SECTION ;; id = 52244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN SOA ;; ANSWER SECTION (2 records) safercar.gov. 600 IN SOA ( dot-dca-edns-wz01.idn.dot.gov. hostmaster.dot.gov. 2011128398 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 300 ;minimum ) safercar.gov. 600 IN RRSIG ( SOA 13 2 600 20260319121829 20260316111829 42351 safercar.gov. 2zDqtgL4oJLPD11mtap9XFD1xB9LQU2kXa8/7hXz5TlV4zcf4z17FD8aY6Ja1Msc1XlTfZjbtUj/ XVTCG6HzsQ== ) ;; AUTHORITY SECTION (7 records) safercar.gov. 600 IN NS a14-64.akam.net. safercar.gov. 600 IN NS a1-97.akam.net. safercar.gov. 600 IN NS a11-65.akam.net. safercar.gov. 600 IN NS a24-64.akam.net. safercar.gov. 600 IN NS a12-64.akam.net. safercar.gov. 600 IN NS a5-65.akam.net. safercar.gov. 600 IN RRSIG ( NS 13 2 600 20260319121829 20260316111829 42351 safercar.gov. c2P37swNMEBz/xnIUkF5+ZoRCQIei7hbmpwiHNuAPQcpYXkBpgAPWNgfxGULVb5e1qUwdUrte3Cm V+A0ppIe2w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-65.akam.net for safercar.gov/A
	Received 165 bytes from 95.100.168.65
	;; Response received from [95.100.168.65] 165 octets ;; HEADER SECTION ;; id = 14246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	safercar.gov A RR has value 204.68.194.196
	Found 1 RRSIGs over A RRset
	`safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the A RRset

safercar.gov

	Query to a1-97.akam.net for safercar.gov/A
	Received 165 bytes from 193.108.91.97
	;; Response received from [193.108.91.97] 165 octets ;; HEADER SECTION ;; id = 46534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-97.akam.net is authoritative for safercar.gov
	Found RRSIG signed by safercar.gov zone
	Query to a1-97.akam.net for safercar.gov/A
	Received 165 bytes from 193.108.91.97
	;; Response received from [193.108.91.97] 165 octets ;; HEADER SECTION ;; id = 50507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	safercar.gov A RR has value 204.68.194.196
	Found 1 RRSIGs over A RRset
	`safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the A RRset

safercar.gov

	Query to a24-64.akam.net for safercar.gov/A
	Received 165 bytes from 2.16.130.64
	;; Response received from [2.16.130.64] 165 octets ;; HEADER SECTION ;; id = 9153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-64.akam.net is authoritative for safercar.gov
	Found RRSIG signed by safercar.gov zone
	Query to a24-64.akam.net for safercar.gov/A
	Received 165 bytes from 2.16.130.64
	;; Response received from [2.16.130.64] 165 octets ;; HEADER SECTION ;; id = 54121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	safercar.gov A RR has value 204.68.194.196
	Found 1 RRSIGs over A RRset
	`safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the A RRset

safercar.gov

	Query to a11-65.akam.net for safercar.gov/A
	Received 165 bytes from 84.53.139.65
	;; Response received from [84.53.139.65] 165 octets ;; HEADER SECTION ;; id = 44745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-65.akam.net is authoritative for safercar.gov
	Found RRSIG signed by safercar.gov zone
	Query to a11-65.akam.net for safercar.gov/A
	Received 165 bytes from 84.53.139.65
	;; Response received from [84.53.139.65] 165 octets ;; HEADER SECTION ;; id = 19742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	safercar.gov A RR has value 204.68.194.196
	Found 1 RRSIGs over A RRset
	`safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the A RRset

safercar.gov

	Query to a14-64.akam.net for safercar.gov/A
	Received 165 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 165 octets ;; HEADER SECTION ;; id = 14786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for safercar.gov
	Found RRSIG signed by safercar.gov zone
	Query to a14-64.akam.net for safercar.gov/A
	Received 165 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 165 octets ;; HEADER SECTION ;; id = 23343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	safercar.gov A RR has value 204.68.194.196
	Found 1 RRSIGs over A RRset
	`safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the A RRset

safercar.gov

	Query to a12-64.akam.net for safercar.gov/A
	Received 165 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 165 octets ;; HEADER SECTION ;; id = 17982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-64.akam.net is authoritative for safercar.gov
	Found RRSIG signed by safercar.gov zone
	Query to a12-64.akam.net for safercar.gov/A
	Received 165 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 165 octets ;; HEADER SECTION ;; id = 64870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; safercar.gov. IN A ;; ANSWER SECTION (2 records) safercar.gov. 900 IN A 204.68.194.196 safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	safercar.gov A RR has value 204.68.194.196
	Found 1 RRSIGs over A RRset
	`safercar.gov. 900 IN RRSIG ( A 13 2 900 20260319121829 20260316111829 42351 safercar.gov. 6urIzJFK3ZlBSvljXTw2oH1sIiXmPEwGyHcd3T+1RCFrV9jUKB5jOEZk2O2Qknh2AYpVXiVuch1A FtpOaCjgrA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test safercar.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: