From f1b909137ab95db66ddd99aa513cc3cf33745306 Mon Sep 17 00:00:00 2001
From: job <job@openbsd.org>
Date: Sat, 13 Jun 2026 19:17:59 +0000
Subject: [PATCH] Provide standards reference for signed object
 displacement/replay warning

OK tb@
---
 usr.sbin/rpki-client/cert.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/usr.sbin/rpki-client/cert.c b/usr.sbin/rpki-client/cert.c
index 1b04b693e09..74622ccbdb3 100644
--- a/usr.sbin/rpki-client/cert.c
+++ b/usr.sbin/rpki-client/cert.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: cert.c,v 1.237 2026/05/16 07:27:03 job Exp $ */
+/*	$OpenBSD: cert.c,v 1.238 2026/06/13 19:17:59 job Exp $ */
 /*
  * Copyright (c) 2022,2025 Theo Buehler <tb@openbsd.org>
  * Copyright (c) 2021 Job Snijders <job@openbsd.org>
@@ -918,8 +918,8 @@ cert_ee_sia(const char *fn, struct cert *cert, const X509_EXTENSION *ext)
 		plen = strlen(p);
 
 		if (fnlen < plen || strcmp(p, fn + fnlen - plen) != 0) {
-			warnx("%s: mismatch between pathname and SIA (%s)",
-			    fn, cert->signedobj);
+			warnx("%s: RFC 9981 section 4: mismatch between "
+			    "pathname and SIA (%s)", fn, cert->signedobj);
 			goto out;
 		}
 	}