<div dir="auto">In our experience, I think, we do a 24 month rpki cert tied the key shared with ARIN. You simply create a new rpki cert in the ARIN hosted service. Due operational reasons we will delete an old cert a month after publishing the new cert just to keep things clean. We don't have a lot of space turnover so we will typically do a new cert 2 or 3 times a year. <div dir="auto"><br></div><div dir="auto">If your underlying resources are pretty much static, just make your cert good for as long as you can.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Sep 9, 2022, 9:08 AM Ca By <<a href="mailto:cb.list6@gmail.com">cb.list6@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Sep 9, 2022 at 9:04 AM Brad Gorman <<a href="mailto:bgorman@arin.net" target="_blank" rel="noreferrer">bgorman@arin.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Menlo">A message is sent to points of contact of an Org one month before expiration of a ROA in the ARIN repository. At any time prior to the ROA expiry, a new (duplicate) ROA can be created for
the same resources with a new expiry date in the future. The soon to expire ROA can be deleted once the new ROA has been published to the repository or you can simply wait for it to expire.
</span></p></div></div><div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word"><div><p class="MsoNormal"><span style="font-size:10.0pt;font-family:Menlo"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Menlo"><u></u> <u></u></span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Menlo;color:black"> </span><span style="color:black"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Menlo;color:black">Brad</span><span style="font-size:10.0pt;font-family:Menlo"><u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Menlo"><u></u></span></p></div></div></blockquote><div dir="auto"><br></div><div dir="auto">Any chance arin can post a step by step guide on the arin website? </div><div dir="auto"><br></div><div dir="auto">Seems like a big deal to have an roa expire, and a well documented process will create a lot of confidence. </div><div dir="auto"><br></div><div dir="auto">As where an expired roa outage will cause a company to never use rpki again. </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word"><div><p class="MsoNormal" dir="auto"><span style="font-size:10.0pt;font-family:Menlo"> <u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">NANOG <nanog-bounces+bgorman=<a href="mailto:arin.net@nanog.org" target="_blank" rel="noreferrer">arin.net@nanog.org</a>> on behalf of Ca By <<a href="mailto:cb.list6@gmail.com" target="_blank" rel="noreferrer">cb.list6@gmail.com</a>><br>
<b>Date: </b>Friday, September 9, 2022 at 10:12 AM<br>
<b>To: </b>John Sweeting <<a href="mailto:jsweeting@arin.net" target="_blank" rel="noreferrer">jsweeting@arin.net</a>><br>
<b>Cc: </b>North American Network Operators' Group <<a href="mailto:nanog@nanog.org" target="_blank" rel="noreferrer">nanog@nanog.org</a>><br>
<b>Subject: </b>Re: ROA Will Expire Soon - ARIN<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:.5in">On Fri, Sep 9, 2022 at 5:21 AM John Sweeting <<a href="mailto:jsweeting@arin.net" target="_blank" rel="noreferrer">jsweeting@arin.net</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal" style="margin-left:.5in">You can contact the ARIN Helpdesk at +1-703-227-0660. Someone will also be sending you an email off list.
<u></u><u></u></p>
</blockquote>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in">John<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in">Where is ARIN’s documented procedure for how hosted ROAs handle renewal prior to expiration ?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><u></u> <u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal" style="margin-left:.5in"><br>
Sent from my iPhone<br>
<br>
> On Sep 9, 2022, at 8:01 AM, Terrance Devor <<a href="mailto:ter.devor@gmail.com" target="_blank" rel="noreferrer">ter.devor@gmail.com</a>> wrote:<br>
> <br>
> <br>
> Can someone from ARIN please reach out to me. We don't want the ROA to expire...<br>
> <br>
> Kind Regards,<br>
> Terrance<u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote></div></div>
</blockquote></div>