you may have missed that, but IANA decided to properly delegate service.arpa subdomain, just like they did previously to home.arpa - to avoid DNSSEC breakage.

if you’re using BIND to serve your own AS112 instance, it’s enough to add following line:

zone "service.arpa" { type master; file "m/db.dd-empty"; };

(assuming of course, that the file db.dd-empty is in subdirectory m of directory defined as working via directory on named.conf)

if everything went correctly, using dig to check response for this domain should give back something similar to:

% dig @prisoner.iana.org -t ns service.arpa

[...]

;; Got answer:

[...]

;; ANSWER SECTION:
service.arpa.   604800  IN  NS  blackhole-2.iana.org.
service.arpa.   604800  IN  NS  blackhole-1.iana.org.

you can find here a small repository I created to facilitate quick cloning, that’s based on as112.net, RFC 6305, RFC 7534, RFC 7535 and draft-ietf-dnssd-srp-25.

good luck!