rsi-dns # zonesigner -verb -verb -verb -verb -verb -gends  -zone robert.wesh.netsec.tislabs.com  robert.wesh.netsec.tislabs.com db.robert.wesh.netsec.tislabs.com.signed
    using default keyrec file robert.wesh.netsec.tislabs.com.krf
    checking options and arguments

        arguments:
                zone     - robert.wesh.netsec.tislabs.com
                zonefile - robert.wesh.netsec.tislabs.com
                zoneftmp - robert.wesh.netsec.tislabs.com.zs
                zoneout  - db.robert.wesh.netsec.tislabs.com.signed

        zonesigner arguments:
                krfile          - <robert.wesh.netsec.tislabs.com.krf>
                nokrfile        - <>
                entropymsg      - <1>
                savekeys        - <0>
                archdir         - <>

        key-signing parameters:
                algorithm       - <-a rsasha1>
                random          - <-r /dev/urandom>
                ksize           - <-b 1024>
                kskdir          - <keys>
                ksklife         - <15768000>
                genksk          - <0>
                usepub          - <0>
                zsize           - <-b 1024>
                zskdir          - <keys>
                zsklife         - <604800>
                genzsk          - <0>
                kgopts          - <>

        zone-signing parameters:
                enddate         - <-e +2592000>
                gends           - <-g>
                ksdir           - <-d sets>
                szopts          - <>

        external commands:
                checkzone       - </usr/local/sbin/named-checkzone>
                keygen          - </usr/local/sbin/dnssec-keygen>
                signzone        - </usr/local/sbin/dnssec-signzone>


        if zonesigner appears hung, strike keys until the program completes
        (see the "Entropy" section in the man page for details)

    initial zone verification