Now how am I supposed to test that the outcome is what I'd expect?

Instead of hardcoding a serialized string and testing for an exact match, deserialize the results and test with cmp_deeply or something else which treats a hash as a set.