That's probably NGEN waiting to time out connecting to http://crl.microsoft.com/pki/crl/pro...CodeSigPCA.crl

At least that's what happens with the CU installations:

Description of Update Rollup 2 for Exchange Server 2010 SP3