ndig
+dnssec [@server] record [TYPE]
nAnswer Flags are relevant
nExample query to a authoritative nameserver
n
u; <<>> DiG 9.1.1 <<>>
+dnssec @193.0.0.202 www.ripencc.dnssec.nl.nl
u;; global options: printcmd
u;; Got answer:
u;; ->>HEADER<<- opcode: QUERY, status:
NOERROR, id: 1947
u;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY:
3, ADDITIONAL: 4
n