DNSSEC Debugger - science.gov

Domain Name:

Time: 2025-10-28 07:10:57 UTC

Analyzing DNSSEC problems for science.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 52454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for science.gov/A
	Received 621 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 621 octets ;; HEADER SECTION ;; id = 46895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . xNZ0zJ4vk5jwhOZW7z6PPsIsI1VU8PAjziEA4jhFF4jpIuYl2N+MdJ30CjbRUnej2YvUbSPlaWfZ R9NYY6zDVN0M8qvmRl3f6FXngqBEgF701whhF97381s0nErdb9D/13naDpgLk7sOJT/5CgfHyF7e VtFUMp9ypIFdAZeihFKzM7FVjNtifJOBiglnleq+yI1KopkTSxAiZ2TNd0fWakUJxLxaDzYZUDqV 4y9nrnIgWe6vo/I4GQXEms4fjlMbNEflsArPgZuvK7UW88U5r20f+cTDVU6tKjsFMqmR460E5O4E TeaAqHZJoUe7eMBlDaPYhYoFKh894NTJiAbk+w== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for gov/DNSKEY
	Received 613 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 613 octets ;; HEADER SECTION ;; id = 15459 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . xNZ0zJ4vk5jwhOZW7z6PPsIsI1VU8PAjziEA4jhFF4jpIuYl2N+MdJ30CjbRUnej2YvUbSPlaWfZ R9NYY6zDVN0M8qvmRl3f6FXngqBEgF701whhF97381s0nErdb9D/13naDpgLk7sOJT/5CgfHyF7e VtFUMp9ypIFdAZeihFKzM7FVjNtifJOBiglnleq+yI1KopkTSxAiZ2TNd0fWakUJxLxaDzYZUDqV 4y9nrnIgWe6vo/I4GQXEms4fjlMbNEflsArPgZuvK7UW88U5r20f+cTDVU6tKjsFMqmR460E5O4E TeaAqHZJoUe7eMBlDaPYhYoFKh894NTJiAbk+w== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to g.root-servers.net for gov/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 22065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . xNZ0zJ4vk5jwhOZW7z6PPsIsI1VU8PAjziEA4jhFF4jpIuYl2N+MdJ30CjbRUnej2YvUbSPlaWfZ R9NYY6zDVN0M8qvmRl3f6FXngqBEgF701whhF97381s0nErdb9D/13naDpgLk7sOJT/5CgfHyF7e VtFUMp9ypIFdAZeihFKzM7FVjNtifJOBiglnleq+yI1KopkTSxAiZ2TNd0fWakUJxLxaDzYZUDqV 4y9nrnIgWe6vo/I4GQXEms4fjlMbNEflsArPgZuvK7UW88U5r20f+cTDVU6tKjsFMqmR460E5O4E TeaAqHZJoUe7eMBlDaPYhYoFKh894NTJiAbk+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . xNZ0zJ4vk5jwhOZW7z6PPsIsI1VU8PAjziEA4jhFF4jpIuYl2N+MdJ30CjbRUnej2YvUbSPlaWfZ R9NYY6zDVN0M8qvmRl3f6FXngqBEgF701whhF97381s0nErdb9D/13naDpgLk7sOJT/5CgfHyF7e VtFUMp9ypIFdAZeihFKzM7FVjNtifJOBiglnleq+yI1KopkTSxAiZ2TNd0fWakUJxLxaDzYZUDqV 4y9nrnIgWe6vo/I4GQXEms4fjlMbNEflsArPgZuvK7UW88U5r20f+cTDVU6tKjsFMqmR460E5O4E TeaAqHZJoUe7eMBlDaPYhYoFKh894NTJiAbk+w== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 20358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251219110613 20251019110613 2536 gov. j3FRDkQ+/qhx8n7XWgDk7DC6YuMd0K42x1BaoJP4SEm+WtzI5LbaxO7OS3rDz3G0nG4HtRwBe8wW 1w4LNc5mNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251219110613 20251019110613 2536 gov. j3FRDkQ+/qhx8n7XWgDk7DC6YuMd0K42x1BaoJP4SEm+WtzI5LbaxO7OS3rDz3G0nG4HtRwBe8wW 1w4LNc5mNA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for science.gov/A
	Received 351 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 351 octets ;; HEADER SECTION ;; id = 35283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6 science.gov. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db ) science.gov. 3600 IN RRSIG ( DS 13 2 3600 20251029081057 20251027061057 35496 gov. lISd8fMj9T0fmVrsUmKFCwOBO3on0G18XIkKodmJh0CT7znsM+s4bZToOsqLUiD0GDwU4KznekiQ pDOxKcTXZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for science.gov/DNSKEY
	Received 351 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 351 octets ;; HEADER SECTION ;; id = 58451 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6 science.gov. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db ) science.gov. 3600 IN RRSIG ( DS 13 2 3600 20251029081057 20251027061057 35496 gov. EVn5ac7PuaAetBeXLH8FGk+WdmKqv1btAtwjWXxtyOANlRdAJHsJrbNU3LXXT9bBZFuZNirvJmRW l3q8BH5Osw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone science.gov

science.gov

	Checking DS between gov and science.gov
	Query to d.ns.gov for science.gov/DS
	Received 223 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 223 octets ;; HEADER SECTION ;; id = 63640 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN DS ;; ANSWER SECTION (3 records) science.gov. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6 science.gov. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db ) science.gov. 3600 IN RRSIG ( DS 13 2 3600 20251029081057 20251027061057 35496 gov. Be3RIu3PqeOR2x5TfhWeivS1ONPzwcn9eSXFvBQbrGr12OfURgVJldGCwPzOuO2oRTuiSNqv8JaS HtgiXOk7KA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for science.gov in the gov zone
	DS=52349/SHA-1 uses a deprecated digest algorithm
	DS=52349/SHA-1 has algorithm ECDSAP256SHA256
	DS=52349/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`science.gov. 3600 IN RRSIG ( DS 13 2 3600 20251029081057 20251027061057 35496 gov. Be3RIu3PqeOR2x5TfhWeivS1ONPzwcn9eSXFvBQbrGr12OfURgVJldGCwPzOuO2oRTuiSNqv8JaS HtgiXOk7KA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=52349/SHA-1 is now in the chain-of-trust
	`science.gov. 3600 IN DS 52349 13 1 59effa5a4f680468a2c81cda8fe61e09705e1bc6`
	`science.gov. 3600 IN DS ( 52349 13 2 aa9e9952ae34eb88ead231398b9982cbbbaaaa2a07b1fba7da75c61b7ab668db )`
	Query to edns1.ultradns.com for science.gov/DNSKEY
	Received 307 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 307 octets ;; HEADER SECTION ;; id = 21804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN DNSKEY ;; ANSWER SECTION (3 records) science.gov. 86400 IN DNSKEY ( 256 3 13 jW/pPUrdozGxPuGQIfxtkUs74UEbGN29wTlBTOi+J5Xo7CXnpnZGdxSQD9bsFpaWU11ziK8y5Ami 4a6vJRrdfw== ) ; keytag 5239 science.gov. 86400 IN DNSKEY ( 257 3 13 JnEBeKQSxXQ8RNX8G+Nxki8lfPi+SGpZ6tbEcJ90j1lakkui7E93z0HLBQVZ8iyR57qc0cc1kap6 h2rlAbFIQA== ) ; keytag 52349 science.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20251110211954 20251027211954 52349 science.gov. 1Oz16O/bTQasz1jaxqKQuvL5eRKuqgB6D1Y9xpU4HNhr9s29sYBuOq+BvouT43Nesf/Xuazkrv7C yicNPAMVWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for science.gov
	`science.gov. 86400 IN DNSKEY ( 256 3 13 jW/pPUrdozGxPuGQIfxtkUs74UEbGN29wTlBTOi+J5Xo7CXnpnZGdxSQD9bsFpaWU11ziK8y5Ami 4a6vJRrdfw== ) ; keytag 5239`
	`science.gov. 86400 IN DNSKEY ( 257 3 13 JnEBeKQSxXQ8RNX8G+Nxki8lfPi+SGpZ6tbEcJ90j1lakkui7E93z0HLBQVZ8iyR57qc0cc1kap6 h2rlAbFIQA== ) ; keytag 52349`
	DNSKEY=52349/SEP is now in the chain-of-trust
	DS=52349/SHA-1 verifies DNSKEY=52349/SEP
	DS=52349/SHA-256 verifies DNSKEY=52349/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`science.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20251110211954 20251027211954 52349 science.gov. 1Oz16O/bTQasz1jaxqKQuvL5eRKuqgB6D1Y9xpU4HNhr9s29sYBuOq+BvouT43Nesf/Xuazkrv7C yicNPAMVWA== )`
	RRSIG=52349 and DNSKEY=52349/SEP verifies the DNSKEY RRset
	DNSKEY=5239 is now in the chain-of-trust
	Query to edns1.ultradns.org for science.gov/A
	Received 398 bytes from 204.74.111.1
	;; Response received from [204.74.111.1] 398 octets ;; HEADER SECTION ;; id = 37133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. ZLvIOR8/4U4yBA7vtWhX/NFceQMS+YsBj/kFJI5/+NkwmLJsq8mbFoZWoWplfp7gOz5IEJnrtK34 duhG/g4TKw== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. G4uXD3UEF9qGO3C159I+Ecpvi1FE5KJF7zsxTRlU7W+Y8Bf6+NIrZ9DCox5sd2l1ZJYGUQneKRIt x8RkNElJcQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.org is authoritative for science.gov
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.net for science.gov/SOA
	Received 444 bytes from 204.74.110.1
	;; Response received from [204.74.110.1] 444 octets ;; HEADER SECTION ;; id = 12480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN SOA ;; ANSWER SECTION (2 records) science.gov. 10800 IN SOA ( edns1.ultradns.com. premiumdns.support.neustar. 2019092030 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 10800 ;minimum ) science.gov. 10800 IN RRSIG ( SOA 13 2 10800 20251110211954 20251027211954 5239 science.gov. GjPlLmUeQJBNiP3FcvXa0yZF7HPFoUA01SglBvsAPs9GHrk+SAad2mEXKc30IbUATWSRBjxiw4RK oOc4jLvOQw== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. vZybQP+jyj7Ewfq9CCPchzdnVuE7GYfjtUJI9avkUq6/lRYk7ztpvqMXRE+GFiMFfdk4qrgEPVur J7ohNH7WOg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to edns1.ultradns.biz for science.gov/SOA
	Received 444 bytes from 204.74.67.1
	;; Response received from [204.74.67.1] 444 octets ;; HEADER SECTION ;; id = 8230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN SOA ;; ANSWER SECTION (2 records) science.gov. 10800 IN SOA ( edns1.ultradns.com. premiumdns.support.neustar. 2019092030 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 10800 ;minimum ) science.gov. 10800 IN RRSIG ( SOA 13 2 10800 20251110211954 20251027211954 5239 science.gov. Y9dUARNhji9tmV6OwjChef+0DzzIvE3AfuRLXOmFNGl0RbRPWv+BfNB8mn0Oz+M3PM4x4+CyjDvy PlfL6q7gyA== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. R5F3zJVwqAPlhtssnn4boGr9/am4tI6K/MzSS+9MOu24/lQI1CNeb3FTgV6y5ghQLJYrk6Ocrrs9 STJyvN2szg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to edns1.ultradns.com for science.gov/SOA
	Received 444 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 444 octets ;; HEADER SECTION ;; id = 63212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN SOA ;; ANSWER SECTION (2 records) science.gov. 10800 IN SOA ( edns1.ultradns.com. premiumdns.support.neustar. 2019092030 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 10800 ;minimum ) science.gov. 10800 IN RRSIG ( SOA 13 2 10800 20251110211954 20251027211954 5239 science.gov. Aoaxe5yfbXHws9WGldfOWkU1HF+CsfXBbFFS8q9glfYf1xcEHjIzWclqdFe4q+APdHuiS907GBUI OBWaPmN+KQ== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. 9wsSDtqvAZpElHXEf6cBbiiOwQ1L87LryiqBYJFI9b8U6z3icDPxDkMocbJMG9l9hhYpKHYx79WH 0HA9F4jlOw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to edns1.ultradns.org for science.gov/A
	Received 398 bytes from 204.74.111.1
	;; Response received from [204.74.111.1] 398 octets ;; HEADER SECTION ;; id = 58851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. IBej7KQxZnINf3RwgoryPg/C+NPUrQD4FEqEqUKiiLxLb3AP2zAY5xlWRlN+NQSWSnRWxUqq44Iq 5HRPlgFg4w== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. TgGaw5FRESelyg2N/3UCo09rlwiKm+F87jQ6U/Lqmu9b6+lGZ+7YCaxFdWyN7qEa5E/WfGoQsuRw ZpObb0iDUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	science.gov A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. IBej7KQxZnINf3RwgoryPg/C+NPUrQD4FEqEqUKiiLxLb3AP2zAY5xlWRlN+NQSWSnRWxUqq44Iq 5HRPlgFg4w== )`
	RRSIG=5239 and DNSKEY=5239 verifies the A RRset

science.gov

	Query to edns1.ultradns.com for science.gov/A
	Received 398 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 398 octets ;; HEADER SECTION ;; id = 14656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. DQEwJOr7XWrEaPgmlU9o09/bdz6IGQUTUcy4iL48GpGRNc17SMNEy3FZLURzSOkeCrQT86WT139w asJvuYGfng== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. DEEX9ZzakhogDLNFZQg/i/0OZ7rlA/l9M/UqZU+CyWQcpHKorIwh1A22ol9i328Z+PV3KIofoiX7 91GI+jpnoQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.com is authoritative for science.gov
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.com for science.gov/A
	Received 398 bytes from 204.74.66.1
	;; Response received from [204.74.66.1] 398 octets ;; HEADER SECTION ;; id = 28504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. OOdnKfwtHOxHtcKixijZmmHK+PpVjRswmuL/8IAOARzaA031TIq9NcrHVQtO2UJXkW3O1d1toQ+7 3Cee2XZU+w== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. arQXnP+kPnJF/mmB284iTEfZP8G+t3xBOv6dnUIjGx6phAHG5FpWUO6FxMZl2XaZcykWqQCT57cx +RUYl2NEWg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	science.gov A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. OOdnKfwtHOxHtcKixijZmmHK+PpVjRswmuL/8IAOARzaA031TIq9NcrHVQtO2UJXkW3O1d1toQ+7 3Cee2XZU+w== )`
	RRSIG=5239 and DNSKEY=5239 verifies the A RRset

science.gov

	Query to edns1.ultradns.biz for science.gov/A
	Received 398 bytes from 204.74.67.1
	;; Response received from [204.74.67.1] 398 octets ;; HEADER SECTION ;; id = 2363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. Ke5Zj8adBUiSThAPaDKBCki0UTFRdoSSaDaKZ2H4019TlucbBB69RlmfJ2SYlQXyiQot7sKEm6An o9hrUy/3Xg== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. nkrXwWxI6cUqLixvwhAsHmrKiB+5I+PRbEUpWULytsNitMZxYRqFwpyDfK2d5aTBoPxGO+b/Aa+W qic3UYj+ng== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.biz is authoritative for science.gov
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.biz for science.gov/A
	Received 398 bytes from 204.74.67.1
	;; Response received from [204.74.67.1] 398 octets ;; HEADER SECTION ;; id = 19951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. ntStqHRuIOLlhxeYIfURkb/UizdvRtioln6Jq8ARdnnSXriQxR4Qa5Zg7MBBugzU/fLnfFu26A5+ HAWK0qUbOA== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. wGy6ZGyLd0TEwSvwlDJdWDJJy5tK+0HeadAyHob2ZPaV5XmZ/SHtREEc5r8K/e4YuKMXkkRQBqPA hEoRoUgCzQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	science.gov A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. ntStqHRuIOLlhxeYIfURkb/UizdvRtioln6Jq8ARdnnSXriQxR4Qa5Zg7MBBugzU/fLnfFu26A5+ HAWK0qUbOA== )`
	RRSIG=5239 and DNSKEY=5239 verifies the A RRset

science.gov

	Query to edns1.ultradns.net for science.gov/A
	Received 398 bytes from 204.74.110.1
	;; Response received from [204.74.110.1] 398 octets ;; HEADER SECTION ;; id = 8610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. d38ArWthegBURX15S0aL6mi/IZvE1Vr9UTpOyKkepBdEYso2o/9SGCnBBUt2cy8UjNUCM8ZTHM3y TOYs0IatCQ== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. WLMYEKGrVYZOdI4K31XwLgHtUFWm+FCuVehAfOvUa4P1fi1FTgGL3/S1yGQMSOT6++lTTVu5thzo 9fUrsPAkpg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edns1.ultradns.net is authoritative for science.gov
	Found RRSIG signed by science.gov zone
	Query to edns1.ultradns.net for science.gov/A
	Received 398 bytes from 204.74.110.1
	;; Response received from [204.74.110.1] 398 octets ;; HEADER SECTION ;; id = 19543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; science.gov. IN A ;; ANSWER SECTION (2 records) science.gov. 3600 IN A 192.107.175.71 science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. kdJfYGVy10pYW4RLAgoTIQRStXVTJZpljiKxu80l6XOOklRkKcA1JICgH7B7lE/BmeiFr9Pwn6yu rB3AwBro4w== ) ;; AUTHORITY SECTION (5 records) science.gov. 10800 IN NS edns1.ultradns.biz. science.gov. 10800 IN NS edns1.ultradns.org. science.gov. 10800 IN NS edns1.ultradns.com. science.gov. 10800 IN NS edns1.ultradns.net. science.gov. 10800 IN RRSIG ( NS 13 2 10800 20251110211954 20251027211954 5239 science.gov. ghetd3JjF6OGkcoE0NK41w17YvH6/cw8npl/aweCQbWLDd4X8GqsDLp1aZYyhYItYKQQ+i+VOgUa j5zfVooe3A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	science.gov A RR has value 192.107.175.71
	Found 1 RRSIGs over A RRset
	`science.gov. 3600 IN RRSIG ( A 13 2 3600 20251110211954 20251027211954 5239 science.gov. kdJfYGVy10pYW4RLAgoTIQRStXVTJZpljiKxu80l6XOOklRkKcA1JICgH7B7lE/BmeiFr9Pwn6yu rB3AwBro4w== )`
	RRSIG=5239 and DNSKEY=5239 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test science.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: