Had some time to review this today. Pulled rockon.py locally and started debugging. Code checked out fine so I knew it was a host issue.
After a few snapshots and restores later, just running update-ca-trust was enough to solve this for me AFTER using the sed replacements.
Hope this helps someone else!