General comment - i suggest you remove lists.archlinux.org from your spf
record.
To pass dmarc you only need DKIM to be valid and aligned - spf is not
needed.
Since passing SPF with SPF alignment also passes DMARC, then adding a
3rd party mailing list as a permitted SPF sender is really a bad idea.
Reason being that now you can have mail, which has no dkim signature at
all, coming solely from that IP that can pass dmarc - even if you didn't
sent it. This reduces the value of DMARC for your domain. Doing so, just
gives email carte blanche to a third party for no benefit.
I would therefore recommend that you remove lists.archlinux.org from
your SPF record - at best its not needed, at worst you have reduced your
email security.
Just my view of course.
gene
