using gpg to verify signatures

[Michelle Weeks]

i'm trying to learn how to verify signatures.  i have downloaded and  
installed gnupg.  i have also downloaded the cvs.patch and  
cvs.patch.asc   
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA- 
03:01.cvs.asc and would like to verify the signature.  my rough  
understanding from the gnupg documentation is that i need to import the  
public key into my public keyring before i can use gpg --verify to  
verify the signature.  i believe that i should use gpg --import "public  
key file".  how do i get the public key for the cvs.patch?

thank you,
michelle