Check out the following site:

http://www.rubin.ch/pgp/weboftrust.en.html

It explains the steps necessary to validate a PGP signature.

AJ