diff --git a/src/main.rs b/src/main.rs
index 19ed1db..e876342 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -73,8 +73,8 @@ async fn main() -> Result<()> {
     let key_pem = fs::read(&args.key)
         .with_context(|| format!("failed to read private key file: {}", args.key))?;
     let key = to_private_key(&key_pem).context("cannot read private key")?;
-    let root_pem = fs::read(&args.root)
-        .with_context(|| format!("failed to read root certificate file: {}", args.root))?;
+    let root_pem = fs::read(&args.root_ca)
+        .with_context(|| format!("failed to read root certificate file: {}", args.root_ca))?;
     let root_cert = to_root_cert(&root_pem)?;
     let certs = Arc::new(Certs {
         certs: cert.clone(),
diff --git a/src/settings.rs b/src/settings.rs
index f008553..4f0443c 100644
--- a/src/settings.rs
+++ b/src/settings.rs
@@ -34,8 +34,8 @@ pub struct Args {
     pub key: String,
 
     /// Path to the root CA file
-    #[arg(long, value_name = "ROOT_PATH")]
-    pub root: String,
+    #[arg(long, value_name = "ROOT_CA_PATH")]
+    pub root_ca: String,
 
     /// Enable the repair mode
     #[arg(long)]