The RSATrustedSigning class is not disposing the RSA object that is created with GetRSAPublicKey in the PublicKey property.