You can verify Warrant Canary status with this command on your system console

delv txt +short
dig txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20190314; expires=20190914;"

version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv txt +vtrace
; fully validated 6659 IN TXT "version=canary1; warrants=0; date=20190314; expires=20190914;" 6659 IN RRSIG TXT 10 3 86400 20190502000000 20190411000000 34464 Vre0kuZLALyUezHHmxsgn3ul65qb4+8tqknDB619MYo1n46Lem8Dt261 maM2z6gkLfy5S9uOpjrTJ8cbcikBDWsTm8/okgBIUllfVMip12hEkHMO GRo0ZLMqOcJQnbl5o8qcA0SOaELbvMr5A/zlvuR9yjPIgrxAMpjL5qNR OUCsJ1kbNKRBKAIWWMZvSNswkRb6tV3asWRuoToEp9hESwxMmoOkzQns uQ9r1vXt/H/o5vVarTtKnli55W0YJVVtWkLeWBDk8ikj7AlPtTnyb1am lzjMqnVY4PNyBLaQ5mmFveJ/SyNc5rzLGC2ByGiJhx8dn7BPKLtvO4jM /m8AWA==

Validate my identity on Keybase