DNSSEC Debugger - nrel.gov

Domain Name:

Time: 2026-04-05 06:50:23 UTC

Analyzing DNSSEC problems for nrel.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1414 octets ;; HEADER SECTION ;; id = 39889 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260422000000 20260401000000 20326 . Nt4x7yqmsincs4ioIgZsndCkDnX0VGYvrwktw71R5xqyzdE8no8GBFuMSWBfOe7t64hIVApinTCZ ozwhiHQ9vjxEzz1vOf/3AjXXYclWI2UtaLlkJnb+Kv5ZFQH5j98nmRo1d0DKHg5rVUUQKY0VsfxP mnJ0y+ZWA7RWzQSR0zKvZbrX2wjtaUe5ZqpWk/+Yk3e4MiC1P9wMs5w6X+MkidQDlMQsrYQW57Xt 8iqTK2Wm66WIXzDkP7OSl8jTLINhz+o/3OOMLgkG8zTwh4BTWI36ySyZIUtqXdrsIZrX60U1nutq AMONInBHXGLfw3VODBlMvIeD0WLk3e52pYP/Tg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260422000000 20260401000000 20326 . Nt4x7yqmsincs4ioIgZsndCkDnX0VGYvrwktw71R5xqyzdE8no8GBFuMSWBfOe7t64hIVApinTCZ ozwhiHQ9vjxEzz1vOf/3AjXXYclWI2UtaLlkJnb+Kv5ZFQH5j98nmRo1d0DKHg5rVUUQKY0VsfxP mnJ0y+ZWA7RWzQSR0zKvZbrX2wjtaUe5ZqpWk/+Yk3e4MiC1P9wMs5w6X+MkidQDlMQsrYQW57Xt 8iqTK2Wm66WIXzDkP7OSl8jTLINhz+o/3OOMLgkG8zTwh4BTWI36ySyZIUtqXdrsIZrX60U1nutq AMONInBHXGLfw3VODBlMvIeD0WLk3e52pYP/Tg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	Query to d.root-servers.net for nrel.gov/A
	Received 615 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 615 octets ;; HEADER SECTION ;; id = 56711 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260417170000 20260404160000 54393 . KRMwYWQMVnwhbaS0UsqxGciVUowDtO+1hi/IrHk9uRiy3AF/YVZXxSF5xtIAZIJB7R+cxu4l/GPL 7VdCRWY8YW5Ggv+EYj6ov5xF34jEWUbWp2/L5Vuyh3KNRFo2R1edq5hUmxgsJ4QAew6FSy7/wToC VvsvJYkBtNRl/8+MexE83M7guZM8XPnmUmrQ6ozcr4oymt3Tj/1iFFetn23qkQmYbBawG6BCePY4 CoAAR1bavE4LO8kb/z9JpXbt1oC9twoVQSX6ifo2rBdcC2TrJBSe+6EWPorUiMBf8EasMpkIWN27 VxcDk206AfjEyzINhdeMfo9vLPtadmDvYhM8qQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for gov/DNSKEY
	Received 613 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 613 octets ;; HEADER SECTION ;; id = 913 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260417170000 20260404160000 54393 . KRMwYWQMVnwhbaS0UsqxGciVUowDtO+1hi/IrHk9uRiy3AF/YVZXxSF5xtIAZIJB7R+cxu4l/GPL 7VdCRWY8YW5Ggv+EYj6ov5xF34jEWUbWp2/L5Vuyh3KNRFo2R1edq5hUmxgsJ4QAew6FSy7/wToC VvsvJYkBtNRl/8+MexE83M7guZM8XPnmUmrQ6ozcr4oymt3Tj/1iFFetn23qkQmYbBawG6BCePY4 CoAAR1bavE4LO8kb/z9JpXbt1oC9twoVQSX6ifo2rBdcC2TrJBSe+6EWPorUiMBf8EasMpkIWN27 VxcDk206AfjEyzINhdeMfo9vLPtadmDvYhM8qQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 16557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260417170000 20260404160000 54393 . KRMwYWQMVnwhbaS0UsqxGciVUowDtO+1hi/IrHk9uRiy3AF/YVZXxSF5xtIAZIJB7R+cxu4l/GPL 7VdCRWY8YW5Ggv+EYj6ov5xF34jEWUbWp2/L5Vuyh3KNRFo2R1edq5hUmxgsJ4QAew6FSy7/wToC VvsvJYkBtNRl/8+MexE83M7guZM8XPnmUmrQ6ozcr4oymt3Tj/1iFFetn23qkQmYbBawG6BCePY4 CoAAR1bavE4LO8kb/z9JpXbt1oC9twoVQSX6ifo2rBdcC2TrJBSe+6EWPorUiMBf8EasMpkIWN27 VxcDk206AfjEyzINhdeMfo9vLPtadmDvYhM8qQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260417170000 20260404160000 54393 . KRMwYWQMVnwhbaS0UsqxGciVUowDtO+1hi/IrHk9uRiy3AF/YVZXxSF5xtIAZIJB7R+cxu4l/GPL 7VdCRWY8YW5Ggv+EYj6ov5xF34jEWUbWp2/L5Vuyh3KNRFo2R1edq5hUmxgsJ4QAew6FSy7/wToC VvsvJYkBtNRl/8+MexE83M7guZM8XPnmUmrQ6ozcr4oymt3Tj/1iFFetn23qkQmYbBawG6BCePY4 CoAAR1bavE4LO8kb/z9JpXbt1oC9twoVQSX6ifo2rBdcC2TrJBSe+6EWPorUiMBf8EasMpkIWN27 VxcDk206AfjEyzINhdeMfo9vLPtadmDvYhM8qQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 56965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for nrel.gov/A
	Received 537 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 537 octets ;; HEADER SECTION ;; id = 29179 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) nrel.gov. 10800 IN NS adns1.es.net. nrel.gov. 10800 IN NS adns2.es.net. nrel.gov. 10800 IN NS helios.nrel.gov. nrel.gov. 10800 IN NS ns1.nlr.gov. nrel.gov. 10800 IN NS ns2.nlr.gov. nrel.gov. 10800 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN DS ( 39160 13 2 dbd8d4e45c00dab10f860a112f9a483ce0dc975676f7f8142c470a7a787db5ad ) nrel.gov. 3600 IN DS ( 46974 13 2 4bad6b763a9f0d0a7f81a837f66bdd37d794bdebf719bff21ed14b4b1de89424 ) nrel.gov. 3600 IN RRSIG ( DS 13 2 3600 20260406075023 20260404055023 35496 gov. t5tODbrzBg8qW0cclr50MO/ft3CFIq2XNtqxkajQuqMuRkz91bBgATJMJsEHPeD3gVg3fpVZMIxU O3lB49+n9Q== ) ;; ADDITIONAL SECTION (9 records) helios.nrel.gov. 3600 IN A 192.174.58.2 helios.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::20 ns1.nlr.gov. 3600 IN A 192.174.58.2 ns1.nlr.gov. 3600 IN AAAA 2620:d0:8000:3::20 ns2.nlr.gov. 3600 IN A 192.174.58.253 ns2.nlr.gov. 3600 IN AAAA 2620:d0:8000:3::21 phaeton.nrel.gov. 3600 IN A 192.174.58.253 phaeton.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::21 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for nrel.gov/DNSKEY
	Received 537 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 537 octets ;; HEADER SECTION ;; id = 2549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) nrel.gov. 10800 IN NS adns1.es.net. nrel.gov. 10800 IN NS adns2.es.net. nrel.gov. 10800 IN NS helios.nrel.gov. nrel.gov. 10800 IN NS ns1.nlr.gov. nrel.gov. 10800 IN NS ns2.nlr.gov. nrel.gov. 10800 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN DS ( 39160 13 2 dbd8d4e45c00dab10f860a112f9a483ce0dc975676f7f8142c470a7a787db5ad ) nrel.gov. 3600 IN DS ( 46974 13 2 4bad6b763a9f0d0a7f81a837f66bdd37d794bdebf719bff21ed14b4b1de89424 ) nrel.gov. 3600 IN RRSIG ( DS 13 2 3600 20260406075023 20260404055023 35496 gov. 3sAmYbG7XSyW83JfbufzEWC3e2KADmX5YpCM9hB2RekF0wpgFM63u+YHCC5PiuhimLrjFfblde46 FuWAyarRcQ== ) ;; ADDITIONAL SECTION (9 records) helios.nrel.gov. 3600 IN A 192.174.58.2 helios.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::20 ns1.nlr.gov. 3600 IN A 192.174.58.2 ns1.nlr.gov. 3600 IN AAAA 2620:d0:8000:3::20 ns2.nlr.gov. 3600 IN A 192.174.58.253 ns2.nlr.gov. 3600 IN AAAA 2620:d0:8000:3::21 phaeton.nrel.gov. 3600 IN A 192.174.58.253 phaeton.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::21 ;; { "EDNS-VERSION": 0 }
	Found child zone nrel.gov

nrel.gov

	Checking DS between gov and nrel.gov
	Query to c.ns.gov for nrel.gov/DS
	Received 232 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 232 octets ;; HEADER SECTION ;; id = 30661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN DS ;; ANSWER SECTION (3 records) nrel.gov. 3600 IN DS ( 39160 13 2 dbd8d4e45c00dab10f860a112f9a483ce0dc975676f7f8142c470a7a787db5ad ) nrel.gov. 3600 IN DS ( 46974 13 2 4bad6b763a9f0d0a7f81a837f66bdd37d794bdebf719bff21ed14b4b1de89424 ) nrel.gov. 3600 IN RRSIG ( DS 13 2 3600 20260406075023 20260404055023 35496 gov. YNJokJi0HA8D8HAzXEf+euZOpcMplFqWXVChBJ/UTpAoHny7TW+EzCuPgnunEJHkiAX1xmY6Mv/b waRLq+OQ7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for nrel.gov in the gov zone
	DS=39160/SHA-256 has algorithm ECDSAP256SHA256
	DS=46974/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nrel.gov. 3600 IN RRSIG ( DS 13 2 3600 20260406075023 20260404055023 35496 gov. YNJokJi0HA8D8HAzXEf+euZOpcMplFqWXVChBJ/UTpAoHny7TW+EzCuPgnunEJHkiAX1xmY6Mv/b waRLq+OQ7Q== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=39160/SHA-256 is now in the chain-of-trust
	DS=46974/SHA-256 is now in the chain-of-trust
	`nrel.gov. 3600 IN DS ( 39160 13 2 dbd8d4e45c00dab10f860a112f9a483ce0dc975676f7f8142c470a7a787db5ad )`
	`nrel.gov. 3600 IN DS ( 46974 13 2 4bad6b763a9f0d0a7f81a837f66bdd37d794bdebf719bff21ed14b4b1de89424 )`
	Query to phaeton.nrel.gov for nrel.gov/DNSKEY
	Received 773 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 773 octets ;; HEADER SECTION ;; id = 5345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN DNSKEY ;; ANSWER SECTION (8 records) nrel.gov. 172800 IN DNSKEY ( 256 3 13 a9rmhUwRcY8KynDnvzJZyXhKcNID0imzAjyDUuXMog1j+QLQJLaZexDLHTVsm/0x7KuzH9UCvcTf qIwwFExdwQ== ) ; keytag 39433 nrel.gov. 172800 IN DNSKEY ( 257 3 13 zFqjklw30kGyKMOKNwhBFO93vkZlxTgbfKTAbSlRyAHzUuZ0R/q3+bHybPnQ3I1+hKaKKkdEwjK9 xxy7KOMb/g== ) ; keytag 39160 nrel.gov. 172800 IN DNSKEY ( 257 3 13 gAO/eb2ItiMHnzpvyUEsXzf4vWcqF49h11uga736Oq1+ZvUdiVc6QXnl2E3rJBz4SydjdvhvM3sY 7RLh7DMlVw== ) ; keytag 46974 nrel.gov. 172800 IN DNSKEY ( 256 3 13 BX1InYxIUpVNXy7k0CdtHnoH2j8ivtPiYBWsv6TN8ogE1DaVru5vMdnZ9nJPxPAU1qhpny/YUjsC nUzeIXgqEg== ) ; keytag 41139 nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 39160 nrel.gov. 8GoJcT6wFjdshlKIKogt0f9xL+I8oYQ0NrsT5CuRRINy+kgl25feF9XfKVPHgUw8y2q9xWopBf1S lPGHdIEtPw== ) nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 39433 nrel.gov. +UJkVwo4TYpbmrs6ykkrWLfK46tpN6OOpVwTew7Qt7xGGlkwCujiaoLk9yfAq/7e7ednMtZsDcaP w2d3jjtdZQ== ) nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 41139 nrel.gov. aTpbGGREnlTRQVqrEOA5Wpo6mLaUFoJFnzWRtNZMTdB3Q7ljd752Y9AK1rxxBOMFdKG2AzulV8kT Bf6pwwW4DQ== ) nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 46974 nrel.gov. vU5iBH/x+dmgSWH9SJgqe42oIJlpOWr6/R3NZYYsTAGU12VhESJFk/+MgCX/9QBbXyHrasOXRZOf GQJxq9a/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for nrel.gov
	`nrel.gov. 172800 IN DNSKEY ( 256 3 13 a9rmhUwRcY8KynDnvzJZyXhKcNID0imzAjyDUuXMog1j+QLQJLaZexDLHTVsm/0x7KuzH9UCvcTf qIwwFExdwQ== ) ; keytag 39433`
	`nrel.gov. 172800 IN DNSKEY ( 257 3 13 zFqjklw30kGyKMOKNwhBFO93vkZlxTgbfKTAbSlRyAHzUuZ0R/q3+bHybPnQ3I1+hKaKKkdEwjK9 xxy7KOMb/g== ) ; keytag 39160`
	`nrel.gov. 172800 IN DNSKEY ( 257 3 13 gAO/eb2ItiMHnzpvyUEsXzf4vWcqF49h11uga736Oq1+ZvUdiVc6QXnl2E3rJBz4SydjdvhvM3sY 7RLh7DMlVw== ) ; keytag 46974`
	`nrel.gov. 172800 IN DNSKEY ( 256 3 13 BX1InYxIUpVNXy7k0CdtHnoH2j8ivtPiYBWsv6TN8ogE1DaVru5vMdnZ9nJPxPAU1qhpny/YUjsC nUzeIXgqEg== ) ; keytag 41139`
	DNSKEY=39160/SEP is now in the chain-of-trust
	DS=39160/SHA-256 verifies DNSKEY=39160/SEP
	DNSKEY=46974/SEP is now in the chain-of-trust
	DS=46974/SHA-256 verifies DNSKEY=46974/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 39160 nrel.gov. 8GoJcT6wFjdshlKIKogt0f9xL+I8oYQ0NrsT5CuRRINy+kgl25feF9XfKVPHgUw8y2q9xWopBf1S lPGHdIEtPw== )`
	`nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 39433 nrel.gov. +UJkVwo4TYpbmrs6ykkrWLfK46tpN6OOpVwTew7Qt7xGGlkwCujiaoLk9yfAq/7e7ednMtZsDcaP w2d3jjtdZQ== )`
	`nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 41139 nrel.gov. aTpbGGREnlTRQVqrEOA5Wpo6mLaUFoJFnzWRtNZMTdB3Q7ljd752Y9AK1rxxBOMFdKG2AzulV8kT Bf6pwwW4DQ== )`
	`nrel.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260408105710 20260404104050 46974 nrel.gov. vU5iBH/x+dmgSWH9SJgqe42oIJlpOWr6/R3NZYYsTAGU12VhESJFk/+MgCX/9QBbXyHrasOXRZOf GQJxq9a/QA== )`
	RRSIG=39160 and DNSKEY=39160/SEP verifies the DNSKEY RRset
	RRSIG=39433 and DNSKEY=39433 verifies the DNSKEY RRset
	RRSIG=41139 and DNSKEY=41139 verifies the DNSKEY RRset
	RRSIG=46974 and DNSKEY=46974/SEP verifies the DNSKEY RRset
	DNSKEY=39433 is now in the chain-of-trust
	DNSKEY=41139 is now in the chain-of-trust
	Query to phaeton.nrel.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 1065 octets ;; HEADER SECTION ;; id = 17032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	phaeton.nrel.gov is authoritative for nrel.gov
	Found RRSIG signed by nrel.gov zone
	Query to adns1.es.net for nrel.gov/SOA
	Received 315 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 315 octets ;; HEADER SECTION ;; id = 3502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN SOA ;; ANSWER SECTION (3 records) nrel.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019533369 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 39433 nrel.gov. GWYHQl1d2XdiSkl/kQ1EletLxbITZCa30fTKSgFgoDA0LwArGI0llwr6k8gKUuXZOPoInQeeOQfz v+QGlGzaPA== ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 41139 nrel.gov. T5kFStblR0wgXA0curjBxhxtP2P5mayc2JiU5gnuCO1O3NLKBFXVE+MUDTs+5So/WejD4F+F6Y+k JGOJpJ/ZZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns2.es.net for nrel.gov/SOA
	Received 1095 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 1095 octets ;; HEADER SECTION ;; id = 11905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN SOA ;; ANSWER SECTION (3 records) nrel.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019533369 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 39433 nrel.gov. GWYHQl1d2XdiSkl/kQ1EletLxbITZCa30fTKSgFgoDA0LwArGI0llwr6k8gKUuXZOPoInQeeOQfz v+QGlGzaPA== ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 41139 nrel.gov. T5kFStblR0wgXA0curjBxhxtP2P5mayc2JiU5gnuCO1O3NLKBFXVE+MUDTs+5So/WejD4F+F6Y+k JGOJpJ/ZZQ== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) ;; { "EDNS-VERSION": 0 }
	Query to helios.nrel.gov for nrel.gov/SOA
	Received 1095 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 1095 octets ;; HEADER SECTION ;; id = 8158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN SOA ;; ANSWER SECTION (3 records) nrel.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019533369 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 39433 nrel.gov. GWYHQl1d2XdiSkl/kQ1EletLxbITZCa30fTKSgFgoDA0LwArGI0llwr6k8gKUuXZOPoInQeeOQfz v+QGlGzaPA== ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 41139 nrel.gov. T5kFStblR0wgXA0curjBxhxtP2P5mayc2JiU5gnuCO1O3NLKBFXVE+MUDTs+5So/WejD4F+F6Y+k JGOJpJ/ZZQ== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.nlr.gov for nrel.gov/SOA
	Received 1095 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 1095 octets ;; HEADER SECTION ;; id = 52013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN SOA ;; ANSWER SECTION (3 records) nrel.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019533369 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 39433 nrel.gov. GWYHQl1d2XdiSkl/kQ1EletLxbITZCa30fTKSgFgoDA0LwArGI0llwr6k8gKUuXZOPoInQeeOQfz v+QGlGzaPA== ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 41139 nrel.gov. T5kFStblR0wgXA0curjBxhxtP2P5mayc2JiU5gnuCO1O3NLKBFXVE+MUDTs+5So/WejD4F+F6Y+k JGOJpJ/ZZQ== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.nlr.gov for nrel.gov/SOA
	Received 1095 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 1095 octets ;; HEADER SECTION ;; id = 48690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN SOA ;; ANSWER SECTION (3 records) nrel.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019533369 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 39433 nrel.gov. GWYHQl1d2XdiSkl/kQ1EletLxbITZCa30fTKSgFgoDA0LwArGI0llwr6k8gKUuXZOPoInQeeOQfz v+QGlGzaPA== ) nrel.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260409064418 20260405054418 41139 nrel.gov. T5kFStblR0wgXA0curjBxhxtP2P5mayc2JiU5gnuCO1O3NLKBFXVE+MUDTs+5So/WejD4F+F6Y+k JGOJpJ/ZZQ== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	Query to phaeton.nrel.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 1065 octets ;; HEADER SECTION ;; id = 47069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	nrel.gov A RR has value 104.17.148.107
	nrel.gov A RR has value 104.17.147.107
	Found 2 RRSIGs over A RRset
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== )`
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== )`
	RRSIG=39433 and DNSKEY=39433 verifies the A RRset
	RRSIG=41139 and DNSKEY=41139 verifies the A RRset

nrel.gov

	Query to helios.nrel.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 1065 octets ;; HEADER SECTION ;; id = 22098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	helios.nrel.gov is authoritative for nrel.gov
	Found RRSIG signed by nrel.gov zone
	Query to helios.nrel.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 1065 octets ;; HEADER SECTION ;; id = 23692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	nrel.gov A RR has value 104.17.148.107
	nrel.gov A RR has value 104.17.147.107
	Found 2 RRSIGs over A RRset
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== )`
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== )`
	RRSIG=39433 and DNSKEY=39433 verifies the A RRset
	RRSIG=41139 and DNSKEY=41139 verifies the A RRset

nrel.gov

	Query to adns1.es.net for nrel.gov/A
	Received 277 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 277 octets ;; HEADER SECTION ;; id = 28856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.es.net is authoritative for nrel.gov
	Found RRSIG signed by nrel.gov zone
	Query to adns1.es.net for nrel.gov/A
	Received 277 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 277 octets ;; HEADER SECTION ;; id = 31420 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nrel.gov A RR has value 104.17.147.107
	nrel.gov A RR has value 104.17.148.107
	Found 2 RRSIGs over A RRset
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== )`
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== )`
	RRSIG=39433 and DNSKEY=39433 verifies the A RRset
	RRSIG=41139 and DNSKEY=41139 verifies the A RRset

nrel.gov

	Query to adns2.es.net for nrel.gov/A
	Received 1065 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 1065 octets ;; HEADER SECTION ;; id = 61617 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) ;; { "EDNS-VERSION": 0 }
	adns2.es.net is authoritative for nrel.gov
	Found RRSIG signed by nrel.gov zone
	Query to adns2.es.net for nrel.gov/A
	Received 1065 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 1065 octets ;; HEADER SECTION ;; id = 17805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) ;; { "EDNS-VERSION": 0 }
	nrel.gov A RR has value 104.17.148.107
	nrel.gov A RR has value 104.17.147.107
	Found 2 RRSIGs over A RRset
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== )`
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== )`
	RRSIG=39433 and DNSKEY=39433 verifies the A RRset
	RRSIG=41139 and DNSKEY=41139 verifies the A RRset

nrel.gov

	Query to ns2.nlr.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 1065 octets ;; HEADER SECTION ;; id = 58995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	ns2.nlr.gov is authoritative for nrel.gov
	Found RRSIG signed by nrel.gov zone
	Query to ns2.nlr.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 1065 octets ;; HEADER SECTION ;; id = 64853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	nrel.gov A RR has value 104.17.148.107
	nrel.gov A RR has value 104.17.147.107
	Found 2 RRSIGs over A RRset
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== )`
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== )`
	RRSIG=39433 and DNSKEY=39433 verifies the A RRset
	RRSIG=41139 and DNSKEY=41139 verifies the A RRset

nrel.gov

	Query to ns1.nlr.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 1065 octets ;; HEADER SECTION ;; id = 46461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	ns1.nlr.gov is authoritative for nrel.gov
	Found RRSIG signed by nrel.gov zone
	Query to ns1.nlr.gov for nrel.gov/A
	Received 1065 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 1065 octets ;; HEADER SECTION ;; id = 38182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrel.gov. IN A ;; ANSWER SECTION (4 records) nrel.gov. 300 IN A 104.17.148.107 nrel.gov. 300 IN A 104.17.147.107 nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== ) nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== ) ;; AUTHORITY SECTION (8 records) nrel.gov. 3600 IN NS adns1.es.net. nrel.gov. 3600 IN NS phaeton.nrel.gov. nrel.gov. 3600 IN NS ns1.nlr.gov. nrel.gov. 3600 IN NS ns2.nlr.gov. nrel.gov. 3600 IN NS adns2.es.net. nrel.gov. 3600 IN NS helios.nrel.gov. nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 39433 nrel.gov. XJ+FFl8+6YPSyl2lDHcwxG7DjWj7wScHyhaZiCI7EMM01DSyhgA5WUvEvIlH18tSE5nX5IFRc14M LoT8gTdOlg== ) nrel.gov. 3600 IN RRSIG ( NS 13 2 3600 20260408234358 20260404224908 41139 nrel.gov. kAirKbww/P4+5gMblYof1lpGyVKIoSdFIo36cye9jdAkr9lCxPZEgNfrTx1yk6m/vrStOtb690+q ui8uO1NgrA== ) ;; ADDITIONAL SECTION (7 records) phaeton.nrel.gov. 3600 IN A 192.174.58.253 helios.nrel.gov. 300 IN A 192.174.58.2 phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 39433 nrel.gov. K5+C6MFna4PGFeGqLCKL1JQWZriqThBwyvvsJdvnbgqb59XsiCeXrrhNpC60pnsy4nhkLjLz4fVj otHJzGXl6w== ) phaeton.nrel.gov. 3600 IN RRSIG ( A 13 3 3600 20260409024312 20260405020328 41139 nrel.gov. iv/0imcD2x6WpqBHyO19w5oHT+n8BET+clCICrod/diHQ0r9rrf/ByUzxw8CKJGWQmadh7DPGd85 zd8DcEGnXw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 39433 nrel.gov. 6e7MJ4wv/8axIajoyAMmLEjEeyL3gDHs/G8MthP6XvoVvZCLt/b7WlVN9bYrgbvYXq/3M9nqMJPD a9PZLJbJZw== ) helios.nrel.gov. 300 IN RRSIG ( A 13 3 300 20260408235053 20260404225204 41139 nrel.gov. LmxcTUiFEJxSqzJwhYnAFWyScgUZyHjXp8bMJ8St480/zoQ1KBePBlI3jr+cChtdDxDgZnDSDse0 nzaRHOOZTA== ) ;; { "EDNS-VERSION": 0 }
	nrel.gov A RR has value 104.17.148.107
	nrel.gov A RR has value 104.17.147.107
	Found 2 RRSIGs over A RRset
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 39433 nrel.gov. BfR7NFil5aZAXeF+8CYjOjzczo0h7jn1TE4zy5HpCsikXUnraHLvtA7tZCvkGfjiS0QRcIGWOEZ2 /sEBdGyjQw== )`
	`nrel.gov. 300 IN RRSIG ( A 13 2 300 20260408092946 20260404083211 41139 nrel.gov. dP3w0vlOJIWjqSY/8l6KHg3SmCZ9YIhJK6WmyK9+kPD7SAxaQyhCy2/tmKCu4qMpw8ytbn4vUcYL S7GJ2XfCvA== )`
	RRSIG=39433 and DNSKEY=39433 verifies the A RRset
	RRSIG=41139 and DNSKEY=41139 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nrel.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: