Signature Generation Time vs Verification Time When comparing the RSA-PSS signature algorithm with an elliptic curve based algorithm such as EdDSA, it is clear that signature verification takes less time for RSA than for EdDSA. For signature generation the situation is vice versa. I am asking myself whether there are use cases were a fast signature verification is an important requirement and were RSA would be actually the preferred choice?
Remark: I know that these elliptic curve based algorithms are generally more secure and have shorter keys then EC based algorithms. Thus, from these perspectives, EdDSA would be more appealing.
I am asking myself whether there are use cases were a fast signature verification is an important requirement and were RSA would be actually the preferred choice?

Well, as you already mentioned the comparison is a bit tricky. For 128 bit security you'd use ECC-256 and RSA-3072 (and using 3072 is on the low end). For most RSA implementations 3072 seems at the high end.
However, the main place where quick verification is important in PKI. Generation of signatures below certificates is generally only performed once, while verification of certificate chains happens all the time. Generally you'd try and cache verified / trusted certificates, but remember that all receivers (such as browsers) must initially verify the certificates none-the-less.
Note that smart cards also may use a PKI using more simplistic Card Verifiable certificates. For smart cards the smaller ECC keys and signatures are an important factor: both IO and RAM is usually limited. So in that case ECC may be more efficient than RSA. There are often other properties than raw CPU time to consider.