Add Use command:

sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/new-root-certificate.crt

Remove Use command:

sudo security delete-certificate -c "<name of existing certificate>"