Turns out I was barking up the wrong tree.
I'm not sure if .NET has an equivalent for JSSE.
My solution turned out to be a lot simpler, concatinate the root certs in a text file and add
trust_store=path\to\file\myrrootcerts.pem
as a parameter to the url aka
BROKER-ID