[arin-announce] ARIN Deploys DNSSEC Zone Signing

Member Services info at arin.net
Wed Jul 1 10:17:41 EDT 2009

On 1 July 2009 ARIN will begin phase two of its DNSSEC project by 
publishing the zones that it is authoritative for under in-addr.arpa.

Because the parent zone (in-addr.arpa) is not signed, you will need to 
place the advertised keys as part of your DNS server configuration as 
defined on ARIN's trust anchor list. The list is available for download 
in BIND-style and zone-file format at:

The DNSSEC project will be completed in three phases. The third and 
final phase is allowing DS records from ARIN-issued delegations that 
have secured zones. View the detailed deployment plan at 

To learn more about DNSSEC, please look at http://www.dnssec.net/.


Mark Kosters
Chief Technology Officer
American Registry for Internet Numbers (ARIN)

More information about the ARIN-announce mailing list