Use curl and check shasum