You can verify Warrant Canary status with this command on your system console

delv txt +short
dig txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20190814; expires=20191214;"

version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv txt +vtrace
; fully validated 84293 IN TXT "version=canary1; warrants=0; date=20190814; expires=20191214;" 84293 IN RRSIG TXT 10 3 86400 20190829000000 20190808000000 34464 IQ6Adhq7kZd3Gwlsf9rgcaU8943iHL5AqKcyROB5x08az0Z2c+a6+gjC d0lqRYQgMIeZi/TqDfAtQ+HhNA5Y+IPSCIId++/lARgKxAZGHvL8PNGr G/RLvV34Lkh3taNEkZzqRaQW6qsUw2fG54MuPvDXpGJwyVm8kIfGkeEU T0ziucOKz2JahF3HdpXqdzRtfOxbSbKhi54fT1HXSU6ZrbJ40B3qW5D6 5AP6aBYwkxmeUVAaB3zILlSEAMcerPl3SXlmATDHloap/YNaoi00I+t5 glNrC5aRrhJaNoMT/9+zf8FCCjHJBrJakbSXH6uA3sOUGDDcCTX+VsPw dLEeww==

Validate my identity on Keybase