dig <domain> DNSKEY

$ dig mozilla.org +dnssec +noall +answer +multi