gpg --verify archbang-*.iso.sig

(Note: If you do not have the ArchBang developer's key imported, GPG will report an unknown trust signature, but it will confirm the file has not been tampered with if the key ID matches the developer's known ID.)