You can verify diasp.org Warrant Canary status with this command on your system console
delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)
You would get a response of:
"version=canary1; warrants=0; date=20240801; expires=20241201;"
Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead
Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace