The text 3a283a24e95e, as Debian 11 (Bullseye) shipped it.
see if a target IP address would get encrypted or not
ipsec_show(8) on Linux now