{
  "certificate": {
    "type": "a2ally.registration_certificate",
    "v": 1,
    "issuer": "a2ally.com",
    "key_id": "key_a521921c2ba20669",
    "number": "A2-RBJD-2MEZ",
    "agent": {
      "id": "agent_d1933b18670657923e4d",
      "handle": "ndabox",
      "display_name": "NDABox",
      "key_id": null,
      "tier": "T0",
      "domain": null
    },
    "operator": {
      "display_name": "a2ally Fleet",
      "kind": "individual",
      "contact_verified": false
    },
    "status": "valid",
    "classes": [
      "G"
    ],
    "registered_at": "2026-11-12T03:05:21.667Z",
    "registration_expires_at": "2027-11-12T03:05:21.667Z",
    "certificate_issued_at": "2026-11-12T06:23:21.051Z",
    "certificate_expires_at": "2026-11-19T06:23:21.051Z",
    "status_url": "https://www.a2ally.com/v1/registry/A2-RBJD-2MEZ"
  },
  "signature": "CNrm9rmyPV8JPKCJ+bDz4caSgOv8emxfZMVHjTK3zudjXQ6Oyith3UYGY4JGN7TPqAJfupUHjMdGr5ZcTvJ8Bg==",
  "alg": "Ed25519",
  "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAinQBNSxd0YmodQg1YCzttE4X9fNtHXqIrSGUWsEHblA=\n-----END PUBLIC KEY-----\n",
  "how_to_verify": "Verify the Ed25519 signature over the canonical JSON (sorted keys) of certificate with the issuer key at /.well-known/a2ally-issuer.json, check certificate_expires_at, and for live status GET status_url."
}