# diagrid workflow archive trust-anchor

Print the CA bundle that verifies a project's workflow archives

### Description

Print the CA bundle (PEM) that anchors the signing certificates in the workflow
history archives of a project's region. Use it to verify archives offline:

diagrid workflow archive trust-anchor -p my-project > sentry-ca.pem
diagrid workflow archive verify wf-123.json --trust-anchor sentry-ca.pem

The bundle may contain more than one certificate authority, because which one
signs an archive depends on the app that produced it.

Note: this returns the authorities that are current. Because Sentry roots
rotate, it verifies recently-produced archives; verifying older archives may
require the bundle that was current when they were produced.

```
diagrid workflow archive trust-anchor [flags]
```

### Examples

```

  # Print the trust anchor to stdout
  diagrid workflow archive trust-anchor -p my-project

  # Save it to a file
  diagrid workflow archive trust-anchor -p my-project --out sentry-ca.pem

```

### Options

```
  -p, --project string   Name of existing project
      --out string       Write the PEM bundle to this file instead of stdout
  -h, --help             help for trust-anchor
```

### Options inherited from parent commands

```
      --api-key string   Diagrid Cloud API key
```

### SEE ALSO

- [diagrid workflow archive](./archive.md)	 - Work with workflow history archives