security export -k /System/Library/Keychains/SystemRootCertificates.keychain -t certs -p

Useful for plain Unix/OpenSSL tools.