SIsilverflow
Trust Anchors

Get Trust Anchor [EXPERIMENTAL]

This operation returns the referenced Trust Anchor.

Requires trustAnchors:Get permission.

get/trustAnchors/{trustAnchorKey}

Request

Path parameters

trustAnchorKeystring required
Example:tra-4Z3saOmareGlixYDolaT

Uniquely identifies a Trust Anchor.

Response

The referenced Trust Anchor

keystring required
agentKeystring required

Uniquely identifies an Agent

fingerprintstring required

The SHA-256 hash of the DER-encoded certificate, as URL-safe base64 with padding (44 characters, using - and _, ending in =). This is the value of the CloudFront-Viewer-Cert-Sha256 header for the certificate. To compute it from a certificate file: openssl x509 -in cert.pem -outform der | openssl dgst -sha256 -binary | openssl base64 -A | tr '+/' '-_'.

status'active' | 'archived' required

The status of the Trust Anchor

descriptionstring
notBeforestring date-time required

The start of the certificate's validity period, taken from the certificate

notAfterstring date-time required

The end of the certificate's validity period, taken from the certificate

createdstring date-time required

The date and time this object was created

lastModifiedstring date-time

The date and time this object was last modified

versioninteger required

The version of this object

Example response

{
  "key": "tra-4Z3saOmareGlixYDolaT",
  "agentKey": "cgt-3jmy9i8u7ywJkKVkxeNO",
  "fingerprint": "89b2QsnoZIU1GnMPBTChiL1VQdUw2iwgzuhIlm_L_Fo=",
  "status": "active",
  "description": "Example Corp Root CA",
  "notBefore": "2026-01-01T00:00:00.000Z",
  "notAfter": "2036-01-01T00:00:00.000Z",
  "created": "2026-10-07T09:00:00.000Z",
  "version": 1
}

Changes

No recorded changes to this operation across all 1 revision of this API.