Verify DNSSEC and view a full trace of each lookup along the way
delv +dnssec +rtrace cloudflare.com
Modify the verbosity level for additional details
delv +dnssec cloudflare.com -d 7
If you're on MacOS and you see the following message, you have a software dependency issue.
$ delv example.com
;; none:29: no crypt support
delv: No trusted keys were loaded
To resolve this, install the bind suit using brew (or however you'd like to do it I suppose)
brew install bind
If you use which on delv now, you should see /opt/homebrew/bin/delv, indicating you're using the delv instance that came packaged when you installed bind. (You may need to close and open a new terminal session to update your environment for your paths to update)