[dns-operations] Signatures expired at arin.net

[Stephane Bortzmeyer]

> Our monitoring systems reported being green until the signatures
> expired as they presently check that the SOA's match on the internal
> and external nameservers.

Not monitoring DNSSEC expiration is certainly bad. I use
<http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html>.
There are several other programs. Did anyone wrote a comprehensive
survey / comparison of them?