Problem with validation of signature, or docs to do it?

[rikgig]

Hi
Today I've tried going all the way down to validate the package using the .sig file supplied and I consistently end up with a verification failure.
I'm running on Mac, and tested this with version 1.17 of ibm-pak.

Command executed and output:
openssl dgst -sha256 -verify public.key -signature oc-ibm_pak-darwin-amd64.tar.gz.sig oc-ibm_pak-darwin-amd64.tar.gz
Verification Failure

I've tried on that same machine to validate the Linux packages, same results:
openssl dgst -sha256 -verify public.key -signature oc-ibm_pak-linux-amd64.tar.gz.sig oc-ibm_pak-linux-amd64.tar.gz
Verification Failure

I've probably done something wrong but not sure what. I've re-done the downloads / commands many times, always the same results.
Thanks.