On Fri, Jan 11, 2019 at 08:59:10PM +0000, John Curran <jcur...@arin.net> wrote a message of 125 lines which said:
> Our monitoring systems reported being green until the signatures > expired as they presently check that the SOA's match on the internal > and external nameservers. For checking of DNSSEC signatures expiration (something which is as crucial to monitor as the PKIX certificates expiration), I use <http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html> and I'm happy with it.