SendGrid DNS Issues

That looks like you issued a ‘dig’ command for the SOA rather than the CNAME record itself.

Your dig command should just look like: dig s1._domainkey.domain.com
Or just use the ‘host’ command, which should return an alias listing and the final IP address.