shell:$ nslookup -timeout=2 -retry=1 'crt.rootca1.amazontrust.com'
Server:		1.1.1.1
Address:	1.1.1.1#53

Non-authoritative answer:
Name:	crt.rootca1.amazontrust.com
Address: 108.159.227.109
Name:	crt.rootca1.amazontrust.com
Address: 108.159.227.67
Name:	crt.rootca1.amazontrust.com
Address: 108.159.227.64
Name:	crt.rootca1.amazontrust.com
Address: 108.159.227.43