def verify_dnssec(dns_cache, domain, refresh=False):
    """Verify the DNSSEC chain to a domain"""
    dns_keys = dns_cache.get_dnskeys(domain, refresh=refresh)
    print("* {} DNSSEC keys:".format(domain))
    for k in dns_keys:
        print("  * {}".format(repr(k)))

    nameservers = dns_cache.get_dns_records(domain, 'NS', refresh=refresh)
    print("* {} nameservers:".format(domain))
    for ns in nameservers:
        print("  * {}".format(ns))
        ipv4_addresses = dns_cache.get_dns_records(ns, 'A', refresh=refresh)
        ipv6_addresses = dns_cache.get_dns_records(ns, 'AAAA', refresh=refresh)
        for addr in ipv4_addresses:
            print("    * IPv4: {}".format(addr))
        for addr in ipv6_addresses:
            print("    * IPv6: {}".format(addr))
    return True