Per my presentation at the IPsec meeting yesterday here's the URL to the current snapshot of the IPsec PKI Requirements document: http://www2.internetdevices.com/arch-lab/ietf/draft-ietf-ipsec-pki-req-02e.txt