kou opened a new issue, #47084: URL: https://github.com/apache/arrow/issues/47084
### Describe the enhancement requested Our verification script uses https://dist.apache.org/repos/dist/dev/arrow/KEYS not https://dist.apache.org/repos/dist/release/arrow/KEYS : https://github.com/apache/arrow/blob/45f562aabca3ecef6ee25a10960f54671c894a37/dev/release/verify-release-candidate.sh#L103-L122 There is not a big problem here because we synchronized them. (They have the same content.) But we should use the release/ version: * Users use the release/ version not dev/ version when they verify our artifacts' signature * https://dist.apache.org/ may reject our request when we request many times by CI So https://www.apache.org/dyn/closer.lua?action=download&filename=arrow/KEYS is better than https://dist.apache.org/repos/dist/dev/arrow/KEYS . ### Component(s) Release -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@arrow.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
