```
$ rcodesign help keychain-export-certificate-chain
Export Apple CA certificates from the macOS Keychain

Usage: rcodesign[EXE] keychain-export-certificate-chain [OPTIONS] --user-id <USER_ID>

Options:
  -C, --config-file <CONFIG_PATH>
          Explicit configuration file to load.
          
          If provided, the default configuration files are not loaded, even if they exist.
          
          Can be specified multiple times. Files are loaded/merged in the order given.
          
          The special value `/dev/null` can be used to specify an empty/null config file. It can be used to short-circuit loading of default config files.

      --domain <DOMAIN>
          Keychain domain to operate on
          
          [default: user]
          [possible values: user, system, common, dynamic]

  -P, --profile <PROFILE>
          Configuration profile to load.
          
          If not specified, the implicit "default" profile is loaded.

      --password <PASSWORD>
          Password to unlock the Keychain

      --password-file <PASSWORD_PATH>
          File containing password to use to unlock the Keychain

  -v, --verbose...
          Increase logging verbosity. Can be specified multiple times

      --no-print-self
          Print only the issuing certificate chain, not the subject certificate

      --user-id <USER_ID>
          User ID value of code signing certificate to find and whose CA chain to export

  -h, --help
          Print help (see a summary with '-h')

```