chromium/chromeos/components/test/data/onc/ikev2_cert.onc

{ "GUID": "guid",
  "Type": "VPN",
  "Name": "MyIKEv2VPN",
  "VPN": {
    "Type": "IPsec",
    "Host": "some.host.org",
    "IPsec": {
      "AuthenticationType": "Cert",
      "ClientCertPKCS11Id": "1:123456abcdef",
      "ClientCertType": "PKCS11Id",
      "IKEVersion": 2,
      "LocalIdentity": "local-id",
      "RemoteIdentity": "remote-id",
      "SaveCredentials": true,
      "ServerCAPEMs": ["1234"],
    },
  }
}