As Far as I am able to inform, the openssl verify in the very first case will Verify the chain and fail, while the 2nd only will Examine the chain from your signing-ca.crt to the root (not needing the opposite certs, so just ignoring them) Get insights into your Airways https://maps.app.goo.gl/9y4LfCmrsyYSbzTo6