Well, examples on WMI are more often in VB scripts.
To query for RDNS Zones, you can start writing function to query normal DNS zones with this example and removing the giant "Select Case" block to modify the zone.
Now you just need to know RDNS zone names are in format of "3.2.1.in-addr.arpa." for IP block of "1.2.3.0/24", where if the least significant part is "0" it will be omitted, and you're done.
======
Here are also examples for PowerShell if you like, you can see command Get-DnsServerZone return multiple zone names ended with "in-addr.arpa".