When you renew a Vault token, its lifetime cannot exceed the maximum TTL. For example, if you issue a token with a TTL of 5 minutes and a max TTL of 24 hours, you can renew the token just before it expires, extending its validity for additional time, up to a total of 23 hours and 55 minutes. However, the max TTL is set from the token's creation time, and renewing the token does not reset or extend that maximum limit.