2019-01-11 ARIN.NET DNSSEC Outage – Post-Mortem (was: Re: ARIN NS down?)

[bortzmeyer at nic.fr (Stephane Bortzmeyer)]

On Fri, Jan 11, 2019 at 08:59:10PM +0000,
 John Curran <jcurran at arin.net> wrote 
 a message of 125 lines which said:

> Our monitoring systems reported being green until the signatures
> expired as they presently check that the SOA's match on the internal
> and external nameservers.

For checking of DNSSEC signatures expiration (something which is as
crucial to monitor as the PKIX certificates expiration), I use
<http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html>
and I'm happy with it.