DNSSEC Analyzer - servicemembers.gov

Domain Name:

Time: 2021-03-09 08:05:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for servicemembers.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 59662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210323000000 20210302000000 20326 . FNdtAv2V8CYbvlFqTS+GniRmB8onYYWV9Wi/o0nizx91+JlwGaHyh6ZcOkj9jy31+Mw6SlbOUKJx 1x2TzC8PG/gxf7piPBbdHDSdKvY1BczJLivM/BRu3+HKwAGVSPxrE+Uj682sFBGkcoi4jTXwrT/x pII8WSMQlvJrS6Db6jnaFzRVi1FXgfxVZaFmoxjuJg1azjEE6sqd+pS62QpnbI9bYniCwART2gOA 6S4102QbOw/3xGd+SeS91zFwdwec8N93per9eKWV1WidBpWexWcbOL92StJQyDjAPb77ieIojqk2 U8XNnMW7xVXwCY4aHU95iLY77CAtLM6CzyVRPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210323000000 20210302000000 20326 . FNdtAv2V8CYbvlFqTS+GniRmB8onYYWV9Wi/o0nizx91+JlwGaHyh6ZcOkj9jy31+Mw6SlbOUKJx 1x2TzC8PG/gxf7piPBbdHDSdKvY1BczJLivM/BRu3+HKwAGVSPxrE+Uj682sFBGkcoi4jTXwrT/x pII8WSMQlvJrS6Db6jnaFzRVi1FXgfxVZaFmoxjuJg1azjEE6sqd+pS62QpnbI9bYniCwART2gOA 6S4102QbOw/3xGd+SeS91zFwdwec8N93per9eKWV1WidBpWexWcbOL92StJQyDjAPb77ieIojqk2 U8XNnMW7xVXwCY4aHU95iLY77CAtLM6CzyVRPg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to g.root-servers.net for servicemembers.gov/A
	Received 637 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (637 bytes) ;; HEADER SECTION ;; id = 6849 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . mmA2fdPDg94B/ybSR5idg7Eva98FewL7PWGWB+JmrpOkZXd28CSU+QyyD9gjY5/53I/LgHrEjSQo 9OVeMi6lmRNOttFDUjSIU8fsitG1t0ksS/ROOPTZtXfHYU68w4YpXV6s7biczsU/a4tL2pqXEkAK J9kCBEl6MlY0BLIAXbU89Xr7uILZiKYj6u56lc/hXId79r1ZJ3H4BDLFuj8WBZ1J98+FNp7GKCTv P/kk2kmUBhtTvRkXnjvLi9rzeh/x4WvwoDG34zRljKtaFCxJYk4YgYmZOJn6XvuIquRnPlA7OiQT Bmyg5yZjuNBORWw1HjzVIVEsPjO5SvXCbKvneA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (622 bytes) ;; HEADER SECTION ;; id = 55356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . mmA2fdPDg94B/ybSR5idg7Eva98FewL7PWGWB+JmrpOkZXd28CSU+QyyD9gjY5/53I/LgHrEjSQo 9OVeMi6lmRNOttFDUjSIU8fsitG1t0ksS/ROOPTZtXfHYU68w4YpXV6s7biczsU/a4tL2pqXEkAK J9kCBEl6MlY0BLIAXbU89Xr7uILZiKYj6u56lc/hXId79r1ZJ3H4BDLFuj8WBZ1J98+FNp7GKCTv P/kk2kmUBhtTvRkXnjvLi9rzeh/x4WvwoDG34zRljKtaFCxJYk4YgYmZOJn6XvuIquRnPlA7OiQT Bmyg5yZjuNBORWw1HjzVIVEsPjO5SvXCbKvneA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (367 bytes) ;; HEADER SECTION ;; id = 51618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . mmA2fdPDg94B/ybSR5idg7Eva98FewL7PWGWB+JmrpOkZXd28CSU+QyyD9gjY5/53I/LgHrEjSQo 9OVeMi6lmRNOttFDUjSIU8fsitG1t0ksS/ROOPTZtXfHYU68w4YpXV6s7biczsU/a4tL2pqXEkAK J9kCBEl6MlY0BLIAXbU89Xr7uILZiKYj6u56lc/hXId79r1ZJ3H4BDLFuj8WBZ1J98+FNp7GKCTv P/kk2kmUBhtTvRkXnjvLi9rzeh/x4WvwoDG34zRljKtaFCxJYk4YgYmZOJn6XvuIquRnPlA7OiQT Bmyg5yZjuNBORWw1HjzVIVEsPjO5SvXCbKvneA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . mmA2fdPDg94B/ybSR5idg7Eva98FewL7PWGWB+JmrpOkZXd28CSU+QyyD9gjY5/53I/LgHrEjSQo 9OVeMi6lmRNOttFDUjSIU8fsitG1t0ksS/ROOPTZtXfHYU68w4YpXV6s7biczsU/a4tL2pqXEkAK J9kCBEl6MlY0BLIAXbU89Xr7uILZiKYj6u56lc/hXId79r1ZJ3H4BDLFuj8WBZ1J98+FNp7GKCTv P/kk2kmUBhtTvRkXnjvLi9rzeh/x4WvwoDG34zRljKtaFCxJYk4YgYmZOJn6XvuIquRnPlA7OiQT Bmyg5yZjuNBORWw1HjzVIVEsPjO5SvXCbKvneA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 10476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210320200254 20210305195754 7698 gov. r/TnQLZWoCCVnVINHeY63yzRPdJ4gmjaJP4D1IoBo56m+00IcEAaKVJwWXh7nnCOL92dMZPZq0E4 bUBq/OvSR3o3nydn6gn+YhK5mbnlAK6JRZFA7gcAkdoenFH14XmcqmJYkHxEKUkbsFyGaT5G73MW v5fUuEDRgyH7xMOPRLk3jzayo+vr332nZuCOsCStSuCikIRJDuubxVV7oD3pCiThwKZItJauwVgU 9jdrLofWGBmGzHPvVjz4yqTChQkSo1Eb/qOyDZEx7ZWsXuT5IHa88dvWxyD3GIRl5bBYqIuBN+I3 /D0RBi5ttFL2zBDMAjCl8Cr4d5ES6tVaR+JX8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210320200254 20210305195754 7698 gov. r/TnQLZWoCCVnVINHeY63yzRPdJ4gmjaJP4D1IoBo56m+00IcEAaKVJwWXh7nnCOL92dMZPZq0E4 bUBq/OvSR3o3nydn6gn+YhK5mbnlAK6JRZFA7gcAkdoenFH14XmcqmJYkHxEKUkbsFyGaT5G73MW v5fUuEDRgyH7xMOPRLk3jzayo+vr332nZuCOsCStSuCikIRJDuubxVV7oD3pCiThwKZItJauwVgU 9jdrLofWGBmGzHPvVjz4yqTChQkSo1Eb/qOyDZEx7ZWsXuT5IHa88dvWxyD3GIRl5bBYqIuBN+I3 /D0RBi5ttFL2zBDMAjCl8Cr4d5ES6tVaR+JX8Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	Query to c.gov-servers.net for servicemembers.gov/A
	Received 554 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (554 bytes) ;; HEADER SECTION ;; id = 31245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) servicemembers.gov. 86400 IN NS ns-jdcw-01.usdoj.gov. servicemembers.gov. 86400 IN NS ns-jdcw-02.usdoj.gov. servicemembers.gov. 3600 IN DS ( 15055 8 1 a4ba6de46726d0028a91baed48052aed80192cca ) servicemembers.gov. 3600 IN DS ( 33640 8 2 09db39d839a2da0e6e3f7258ddd89ac84081b31b636029d6a9d0b8a170068fbc ) servicemembers.gov. 3600 IN DS ( 15055 8 2 d3d0dc2f50899dc627114d37e0e56a8a8f2fbed3ddd66bc1eadeaa8c8d35b5ee ) servicemembers.gov. 3600 IN DS ( 33640 8 1 68d6dbb0c5aaa65665a6bddf0f9cfd2a223c0a4f ) servicemembers.gov. 3600 IN RRSIG ( DS 8 2 3600 20210316051008 20210309051008 27306 gov. esZJzRbg3GbQLgWL72CPDexqhPs371soCgEx8uI8nHNU8qwuWIkhSz6yBOKK4nFUm/u0SVQBcmXT hSW0HAEnjr/Dzzqkd9S10vNO2HiDTuZ1p+7BFHS5K2dKGR9bkDPoIFv5Y+RlWAOHvHlSEzsxj6w7 Adj92TcNuHVPtzk2jsNn4egFm9HeRA6AqOx1Q9ztP45Bo4Ey+/XBwLo4zzvuWg== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-01.usdoj.gov. 86400 IN A 149.101.180.157 ns-jdcw-01.usdoj.gov. 86400 IN AAAA 2607:f330:6000:107f::86 ns-jdcw-02.usdoj.gov. 86400 IN A 149.101.80.157 ns-jdcw-02.usdoj.gov. 86400 IN AAAA 2607:f330:5000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for servicemembers.gov/DNSKEY
	Received 554 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (554 bytes) ;; HEADER SECTION ;; id = 35189 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) servicemembers.gov. 86400 IN NS ns-jdcw-01.usdoj.gov. servicemembers.gov. 86400 IN NS ns-jdcw-02.usdoj.gov. servicemembers.gov. 3600 IN DS ( 15055 8 1 a4ba6de46726d0028a91baed48052aed80192cca ) servicemembers.gov. 3600 IN DS ( 33640 8 2 09db39d839a2da0e6e3f7258ddd89ac84081b31b636029d6a9d0b8a170068fbc ) servicemembers.gov. 3600 IN DS ( 15055 8 2 d3d0dc2f50899dc627114d37e0e56a8a8f2fbed3ddd66bc1eadeaa8c8d35b5ee ) servicemembers.gov. 3600 IN DS ( 33640 8 1 68d6dbb0c5aaa65665a6bddf0f9cfd2a223c0a4f ) servicemembers.gov. 3600 IN RRSIG ( DS 8 2 3600 20210316051008 20210309051008 27306 gov. esZJzRbg3GbQLgWL72CPDexqhPs371soCgEx8uI8nHNU8qwuWIkhSz6yBOKK4nFUm/u0SVQBcmXT hSW0HAEnjr/Dzzqkd9S10vNO2HiDTuZ1p+7BFHS5K2dKGR9bkDPoIFv5Y+RlWAOHvHlSEzsxj6w7 Adj92TcNuHVPtzk2jsNn4egFm9HeRA6AqOx1Q9ztP45Bo4Ey+/XBwLo4zzvuWg== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-01.usdoj.gov. 86400 IN A 149.101.180.157 ns-jdcw-01.usdoj.gov. 86400 IN AAAA 2607:f330:6000:107f::86 ns-jdcw-02.usdoj.gov. 86400 IN A 149.101.80.157 ns-jdcw-02.usdoj.gov. 86400 IN AAAA 2607:f330:5000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone servicemembers.gov

servicemembers.gov

	Checking DS between gov and servicemembers.gov
	Query to a.gov-servers.net for servicemembers.gov/DS
	Received 410 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (410 bytes) ;; HEADER SECTION ;; id = 50720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN DS ;; ANSWER SECTION (5 records) servicemembers.gov. 3600 IN DS ( 15055 8 1 a4ba6de46726d0028a91baed48052aed80192cca ) servicemembers.gov. 3600 IN DS ( 33640 8 2 09db39d839a2da0e6e3f7258ddd89ac84081b31b636029d6a9d0b8a170068fbc ) servicemembers.gov. 3600 IN DS ( 15055 8 2 d3d0dc2f50899dc627114d37e0e56a8a8f2fbed3ddd66bc1eadeaa8c8d35b5ee ) servicemembers.gov. 3600 IN DS ( 33640 8 1 68d6dbb0c5aaa65665a6bddf0f9cfd2a223c0a4f ) servicemembers.gov. 3600 IN RRSIG ( DS 8 2 3600 20210316051008 20210309051008 27306 gov. esZJzRbg3GbQLgWL72CPDexqhPs371soCgEx8uI8nHNU8qwuWIkhSz6yBOKK4nFUm/u0SVQBcmXT hSW0HAEnjr/Dzzqkd9S10vNO2HiDTuZ1p+7BFHS5K2dKGR9bkDPoIFv5Y+RlWAOHvHlSEzsxj6w7 Adj92TcNuHVPtzk2jsNn4egFm9HeRA6AqOx1Q9ztP45Bo4Ey+/XBwLo4zzvuWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for servicemembers.gov in the gov zone
	DS=15055/SHA-1 has algorithm RSASHA256
	DS=33640/SHA-256 has algorithm RSASHA256
	DS=15055/SHA-256 has algorithm RSASHA256
	DS=33640/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`servicemembers.gov. 3600 IN RRSIG ( DS 8 2 3600 20210316051008 20210309051008 27306 gov. esZJzRbg3GbQLgWL72CPDexqhPs371soCgEx8uI8nHNU8qwuWIkhSz6yBOKK4nFUm/u0SVQBcmXT hSW0HAEnjr/Dzzqkd9S10vNO2HiDTuZ1p+7BFHS5K2dKGR9bkDPoIFv5Y+RlWAOHvHlSEzsxj6w7 Adj92TcNuHVPtzk2jsNn4egFm9HeRA6AqOx1Q9ztP45Bo4Ey+/XBwLo4zzvuWg== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=15055/SHA-1 is now in the chain-of-trust
	DS=33640/SHA-256 is now in the chain-of-trust
	`servicemembers.gov. 3600 IN DS ( 15055 8 1 a4ba6de46726d0028a91baed48052aed80192cca )`
	`servicemembers.gov. 3600 IN DS ( 33640 8 2 09db39d839a2da0e6e3f7258ddd89ac84081b31b636029d6a9d0b8a170068fbc )`
	`servicemembers.gov. 3600 IN DS ( 15055 8 2 d3d0dc2f50899dc627114d37e0e56a8a8f2fbed3ddd66bc1eadeaa8c8d35b5ee )`
	`servicemembers.gov. 3600 IN DS ( 33640 8 1 68d6dbb0c5aaa65665a6bddf0f9cfd2a223c0a4f )`
	Query to ns-jdcw-02.usdoj.gov for servicemembers.gov/DNSKEY
	Received 1881 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (1881 bytes) ;; HEADER SECTION ;; id = 43887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN DNSKEY ;; ANSWER SECTION (8 records) servicemembers.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAdSDK7DhgZULJj505XF4dnNaVSF9absgzkcu8tkTqeYKOJ7ON+K0IudtyIqA36Hnexuwkmbz F1lt55PHVjdtScPgh3J77BuJT7623tQo+H5fM/rIjUOjT/YQgrHhWdRyLShb1hmO3YeILtqqSJGx WgdV3e08m618d5Vdezw8e1BCo2RvO9eTq4+FB2IwcsOL4vosX14TbEvs08/N1zXbPDFsItISsBh5 +MdL9tBZYpSNxaFmksdpYsZDIpkcHuS7JKIrOYRY1lNjh1Edjoz+ksahKG6i5i9UBkWYdMR69LYE kDfaxQvsWYKEvvC8iW69PETnC7nOFwB+2xBz3r80Zhk= ) ; Key ID = 15055 servicemembers.gov. 432000 IN DNSKEY ( 256 3 8 AwEAAcW9Iy5E6JjbCPR+uwzP91p+YRTz8/VHdEGJP3LEPDD0d3XnHFIVqV6vEccu9LAOCwsxnutY j4NRkA0crLhmmlexgllNbr5y4CtlnDnAynIcl6A/K3s57TxEDN8lpET/NbligpblUvGyjnL/p9sP 9qYQZ95GU5KEiQn9LL+vE0Y7 ) ; Key ID = 18816 servicemembers.gov. 432000 IN DNSKEY ( 256 3 8 AwEAAb99LeWzx0ssRVvTIVBYaAWN1W0SdUak9qHS7pOxMaJChb/ZZvA7eqE0jVN2XUd01GGqtfrr SE3N5NfSnQuyuZsc6JHc91Mjiqp/5caMxlMep7YHjw9BuJ/JEdUBWJZH+c9Eqf71dUQhh3j4QelP 3A+Z890TiJ2DHHD4yXe2ILmv ) ; Key ID = 50028 servicemembers.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAb0CqLjKP9YsWtcy+ydmrkkXM0ImLT44OT4IvIkV5RB901Z49TV3ehEriYk9vLzoV3mEDQ3a 2lzfncXDOLG1bdX07ldapDoXYRs99KcPG7IYl559DBTq5eBuGkub5mbK05mS1W8+8f2dWzMUTl3i 8UfT9S3vD9MhuPuXSxSU9VLVwY3ZuHgvJpn5LO1Yvqtilt5RkVfzXSoZ+VxvDhG1vvMuKUS/YC6J bned7oEih0EBraIXEK6ThZMsG3AylHsqfDU0A9OTIkrcVfsHc5UpxRGYXHkkeKDNBfqvOnjuN5n0 2/DxKQw8naso/gZTjZpheFGVsOOi564SNv9dOrQ96Ak= ) ; Key ID = 33640 servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 15055 servicemembers.gov. F2Nin88oADmwHIj3estW4fKWILprddpaATXmDoMx1V4R4khATb+8CtVKaqdXWnyiIlCayYgmwRuc NcTWtpxXNVmxKf6BPEv3Qq9knCivG5Fi8lGhqcwVKLdJifPpsncaz1xUgmjeHWsyzyiN4qegykHO Z86mxPLEncJ1P3M3HrBrG/Zy93iuB++r1vApHYgL0cwgs9ZV+8FEQ5cbUuFnb47L63a68Vvd3CQx Ihnvwcq1K14B9bVJQsr3NSEhGSZWBjSKOyYSzrkih53E3mpt8IEeMKk7AobpZHVCYiDn2Bshtve0 V1W7fTkzPfb8rlWY8tawAO86B0CnDGTy+kGbSA== ) servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 18816 servicemembers.gov. Y91OX8IgbtLVcWe83VbScChUVgJDvX2n1KaH3uLLahOab7M8CSXurmR5pxPjgP6bzesFMJ26O5/4 +Fsxt43Os+hwwTvIcwJj9LpxxCrZXM0jwiQIlR3eGsMLe2ejfjf5rBsPR5PBIaONBkVioHQGBTIR fZi+UTdskFTUoyJfBX0= ) servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 33640 servicemembers.gov. mEvH3VpH8Cy+Owmlbp/qFkj3BaGmF6/rLFx1/Lr8z1kp6l22Cz+qH4UDpwVrJohvQcnpyytF6oNC c+cplM4UVKfBMTyskvR1NxUPAW9d3IxDYMbM/tHJtDqZSmg9ltgloanXkMrokc+prGwRpiUGJPZB OOu7i063XqHwqb4s6ilxnMh0VIK8FoY/niLIHWKg3M55QCFZvvGc/X7SAz5i+Pxp8sLR2u0PjAWG 5pqshI99sv6xak0nxtVGUrOhanpNm4f+/FxsNu6psl9cMCpYBCBMm6Kiam/OmJYki/px65rdIEjo QpUU16mVCtfhdyQq39YPCHUC+QA5dOQ4Kov2oA== ) servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 50028 servicemembers.gov. EyDyVfQqFYvMy6UuADzKJUu7bVhGyAZEA381qjQSLec7oPCaqs/w6t1wSzhGEbCySM4flGlrgxD2 uJKum782eUZYbKpvCEq8HTjWqkmJ9bOypXK84RMFBvG4DEgDDcu9ReHVH7eyV6uzC7FwiFIkZeeZ c61GZkf0p2w8We18BLU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for servicemembers.gov
	`servicemembers.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAdSDK7DhgZULJj505XF4dnNaVSF9absgzkcu8tkTqeYKOJ7ON+K0IudtyIqA36Hnexuwkmbz F1lt55PHVjdtScPgh3J77BuJT7623tQo+H5fM/rIjUOjT/YQgrHhWdRyLShb1hmO3YeILtqqSJGx WgdV3e08m618d5Vdezw8e1BCo2RvO9eTq4+FB2IwcsOL4vosX14TbEvs08/N1zXbPDFsItISsBh5 +MdL9tBZYpSNxaFmksdpYsZDIpkcHuS7JKIrOYRY1lNjh1Edjoz+ksahKG6i5i9UBkWYdMR69LYE kDfaxQvsWYKEvvC8iW69PETnC7nOFwB+2xBz3r80Zhk= ) ; Key ID = 15055`
	`servicemembers.gov. 432000 IN DNSKEY ( 256 3 8 AwEAAcW9Iy5E6JjbCPR+uwzP91p+YRTz8/VHdEGJP3LEPDD0d3XnHFIVqV6vEccu9LAOCwsxnutY j4NRkA0crLhmmlexgllNbr5y4CtlnDnAynIcl6A/K3s57TxEDN8lpET/NbligpblUvGyjnL/p9sP 9qYQZ95GU5KEiQn9LL+vE0Y7 ) ; Key ID = 18816`
	`servicemembers.gov. 432000 IN DNSKEY ( 256 3 8 AwEAAb99LeWzx0ssRVvTIVBYaAWN1W0SdUak9qHS7pOxMaJChb/ZZvA7eqE0jVN2XUd01GGqtfrr SE3N5NfSnQuyuZsc6JHc91Mjiqp/5caMxlMep7YHjw9BuJ/JEdUBWJZH+c9Eqf71dUQhh3j4QelP 3A+Z890TiJ2DHHD4yXe2ILmv ) ; Key ID = 50028`
	`servicemembers.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAb0CqLjKP9YsWtcy+ydmrkkXM0ImLT44OT4IvIkV5RB901Z49TV3ehEriYk9vLzoV3mEDQ3a 2lzfncXDOLG1bdX07ldapDoXYRs99KcPG7IYl559DBTq5eBuGkub5mbK05mS1W8+8f2dWzMUTl3i 8UfT9S3vD9MhuPuXSxSU9VLVwY3ZuHgvJpn5LO1Yvqtilt5RkVfzXSoZ+VxvDhG1vvMuKUS/YC6J bned7oEih0EBraIXEK6ThZMsG3AylHsqfDU0A9OTIkrcVfsHc5UpxRGYXHkkeKDNBfqvOnjuN5n0 2/DxKQw8naso/gZTjZpheFGVsOOi564SNv9dOrQ96Ak= ) ; Key ID = 33640`
	DNSKEY=15055/SEP is now in the chain-of-trust
	DS=15055/SHA-1 verifies DNSKEY=15055/SEP
	DS=15055/SHA-256 verifies DNSKEY=15055/SEP
	DNSKEY=33640/SEP is now in the chain-of-trust
	DS=33640/SHA-256 verifies DNSKEY=33640/SEP
	DS=33640/SHA-1 verifies DNSKEY=33640/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 15055 servicemembers.gov. F2Nin88oADmwHIj3estW4fKWILprddpaATXmDoMx1V4R4khATb+8CtVKaqdXWnyiIlCayYgmwRuc NcTWtpxXNVmxKf6BPEv3Qq9knCivG5Fi8lGhqcwVKLdJifPpsncaz1xUgmjeHWsyzyiN4qegykHO Z86mxPLEncJ1P3M3HrBrG/Zy93iuB++r1vApHYgL0cwgs9ZV+8FEQ5cbUuFnb47L63a68Vvd3CQx Ihnvwcq1K14B9bVJQsr3NSEhGSZWBjSKOyYSzrkih53E3mpt8IEeMKk7AobpZHVCYiDn2Bshtve0 V1W7fTkzPfb8rlWY8tawAO86B0CnDGTy+kGbSA== )`
	`servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 18816 servicemembers.gov. Y91OX8IgbtLVcWe83VbScChUVgJDvX2n1KaH3uLLahOab7M8CSXurmR5pxPjgP6bzesFMJ26O5/4 +Fsxt43Os+hwwTvIcwJj9LpxxCrZXM0jwiQIlR3eGsMLe2ejfjf5rBsPR5PBIaONBkVioHQGBTIR fZi+UTdskFTUoyJfBX0= )`
	`servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 33640 servicemembers.gov. mEvH3VpH8Cy+Owmlbp/qFkj3BaGmF6/rLFx1/Lr8z1kp6l22Cz+qH4UDpwVrJohvQcnpyytF6oNC c+cplM4UVKfBMTyskvR1NxUPAW9d3IxDYMbM/tHJtDqZSmg9ltgloanXkMrokc+prGwRpiUGJPZB OOu7i063XqHwqb4s6ilxnMh0VIK8FoY/niLIHWKg3M55QCFZvvGc/X7SAz5i+Pxp8sLR2u0PjAWG 5pqshI99sv6xak0nxtVGUrOhanpNm4f+/FxsNu6psl9cMCpYBCBMm6Kiam/OmJYki/px65rdIEjo QpUU16mVCtfhdyQq39YPCHUC+QA5dOQ4Kov2oA== )`
	`servicemembers.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210318080204 20210308073145 50028 servicemembers.gov. EyDyVfQqFYvMy6UuADzKJUu7bVhGyAZEA381qjQSLec7oPCaqs/w6t1wSzhGEbCySM4flGlrgxD2 uJKum782eUZYbKpvCEq8HTjWqkmJ9bOypXK84RMFBvG4DEgDDcu9ReHVH7eyV6uzC7FwiFIkZeeZ c61GZkf0p2w8We18BLU= )`
	RRSIG=15055 and DNSKEY=15055/SEP verifies the DNSKEY RRset
	RRSIG=18816 and DNSKEY=18816 verifies the DNSKEY RRset
	RRSIG=33640 and DNSKEY=33640/SEP verifies the DNSKEY RRset
	RRSIG=50028 and DNSKEY=50028 verifies the DNSKEY RRset
	DNSKEY=18816 is now in the chain-of-trust
	DNSKEY=50028 is now in the chain-of-trust
	Query to ns-jdcw-02.usdoj.gov for servicemembers.gov/A
	Received 437 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (437 bytes) ;; HEADER SECTION ;; id = 2047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN A ;; ANSWER SECTION (3 records) servicemembers.gov. 600 IN A 149.101.82.221 servicemembers.gov. 600 IN RRSIG ( A 8 2 600 20210316111247 20210306104624 18816 servicemembers.gov. EWsMGVM8yn0ZpEnZEfsNoa6I+QM7xTuDwtXh5G5kAfrQjJxcCrbvaOfO2HXTRi63fzoWnK8Ya31r cspb5cJqCmHbdTxP+0tObthjxy1i4cH1Hhj06jq0Xzo2CIxn3aQ5dlw7FMMhGMxzGJc/KgoE71iA +agD8KuZwrESZ4ewaJ4= ) servicemembers.gov. 600 IN RRSIG ( A 8 2 600 20210316111247 20210306104624 50028 servicemembers.gov. pNtd3+uMylOyHznxrxbtR1zq4sOlWNKmYoby6WXGBcxHDjpjHFT+tu+2hsYdKVQ5Tu4uPSX593vK YAjNDtBcH9NUjkp8oKp+of2WjeDZwwcreueMo1ZXAvZZOJAcOTN4weNCWYc3PRiCC6/lsGouk4jw XudaufRBHhc9iuod0yA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	servicemembers.gov is authoritative for servicemembers.gov
	Found RRSIG signed by servicemembers.gov zone
	Query to ns-jdcw-02.usdoj.gov for servicemembers.gov/SOA
	Received 492 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (492 bytes) ;; HEADER SECTION ;; id = 15336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN SOA ;; ANSWER SECTION (3 records) servicemembers.gov. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.gov. root.usdoj.gov. 2002068592 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) servicemembers.gov. 600 IN RRSIG ( SOA 8 2 600 20210319064526 20210309054526 18816 servicemembers.gov. SlUWI/E4OkMgKr2oLi1HRJO0zfmggkouKvcJZo5Ow67qhxDyUVZba/C1ee+ugQyadcQq3kCwI98A 32PMpKZtqcFBtR1MIbo1XZuJkHKFnP16czpSR7Hl/uALWQw1TkPfg1fb0fQ0bkuVt7kq641DzImj GdYOPa/bErNJlmLo8kg= ) servicemembers.gov. 600 IN RRSIG ( SOA 8 2 600 20210319064526 20210309054526 50028 servicemembers.gov. fqI7byCaUxZc0yfkQ+Ns0tWJUvtfO39hZGjlKsZhSbhxkV9JU4Waa7OKo/OFGwSam7YZdAfiux6d asgAYvKeCMpam29+fGJ5ntwx+bSXt+/2TcV2d42G990XNfuOXhTZaI9UWXiwhVNSrUX1IPff9FiD jIcl7cX/xZirVogpnfg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-jdcw-01.usdoj.gov for servicemembers.gov/SOA
	Received 492 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (492 bytes) ;; HEADER SECTION ;; id = 50839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN SOA ;; ANSWER SECTION (3 records) servicemembers.gov. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.gov. root.usdoj.gov. 2002068592 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) servicemembers.gov. 600 IN RRSIG ( SOA 8 2 600 20210319064526 20210309054526 18816 servicemembers.gov. SlUWI/E4OkMgKr2oLi1HRJO0zfmggkouKvcJZo5Ow67qhxDyUVZba/C1ee+ugQyadcQq3kCwI98A 32PMpKZtqcFBtR1MIbo1XZuJkHKFnP16czpSR7Hl/uALWQw1TkPfg1fb0fQ0bkuVt7kq641DzImj GdYOPa/bErNJlmLo8kg= ) servicemembers.gov. 600 IN RRSIG ( SOA 8 2 600 20210319064526 20210309054526 50028 servicemembers.gov. fqI7byCaUxZc0yfkQ+Ns0tWJUvtfO39hZGjlKsZhSbhxkV9JU4Waa7OKo/OFGwSam7YZdAfiux6d asgAYvKeCMpam29+fGJ5ntwx+bSXt+/2TcV2d42G990XNfuOXhTZaI9UWXiwhVNSrUX1IPff9FiD jIcl7cX/xZirVogpnfg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-jdcw-02.usdoj.gov for servicemembers.gov/A
	Received 437 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (437 bytes) ;; HEADER SECTION ;; id = 52400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; servicemembers.gov. IN A ;; ANSWER SECTION (3 records) servicemembers.gov. 600 IN A 149.101.82.221 servicemembers.gov. 600 IN RRSIG ( A 8 2 600 20210316111247 20210306104624 18816 servicemembers.gov. EWsMGVM8yn0ZpEnZEfsNoa6I+QM7xTuDwtXh5G5kAfrQjJxcCrbvaOfO2HXTRi63fzoWnK8Ya31r cspb5cJqCmHbdTxP+0tObthjxy1i4cH1Hhj06jq0Xzo2CIxn3aQ5dlw7FMMhGMxzGJc/KgoE71iA +agD8KuZwrESZ4ewaJ4= ) servicemembers.gov. 600 IN RRSIG ( A 8 2 600 20210316111247 20210306104624 50028 servicemembers.gov. pNtd3+uMylOyHznxrxbtR1zq4sOlWNKmYoby6WXGBcxHDjpjHFT+tu+2hsYdKVQ5Tu4uPSX593vK YAjNDtBcH9NUjkp8oKp+of2WjeDZwwcreueMo1ZXAvZZOJAcOTN4weNCWYc3PRiCC6/lsGouk4jw XudaufRBHhc9iuod0yA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	servicemembers.gov A RR has value 149.101.82.221
	Found 2 RRSIGs over A RRset
	`servicemembers.gov. 600 IN RRSIG ( A 8 2 600 20210316111247 20210306104624 18816 servicemembers.gov. EWsMGVM8yn0ZpEnZEfsNoa6I+QM7xTuDwtXh5G5kAfrQjJxcCrbvaOfO2HXTRi63fzoWnK8Ya31r cspb5cJqCmHbdTxP+0tObthjxy1i4cH1Hhj06jq0Xzo2CIxn3aQ5dlw7FMMhGMxzGJc/KgoE71iA +agD8KuZwrESZ4ewaJ4= )`
	`servicemembers.gov. 600 IN RRSIG ( A 8 2 600 20210316111247 20210306104624 50028 servicemembers.gov. pNtd3+uMylOyHznxrxbtR1zq4sOlWNKmYoby6WXGBcxHDjpjHFT+tu+2hsYdKVQ5Tu4uPSX593vK YAjNDtBcH9NUjkp8oKp+of2WjeDZwwcreueMo1ZXAvZZOJAcOTN4weNCWYc3PRiCC6/lsGouk4jw XudaufRBHhc9iuod0yA= )`
	RRSIG=18816 and DNSKEY=18816 verifies the A RRset
	RRSIG=50028 and DNSKEY=50028 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test servicemembers.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: