you're right--I closed RPA and then upon reopening, no connection. fiddled with firewall settings to no avail.
turned firewall back on and connected via iPhone hotspot.
so PERHAPS I got a false positive a while ago, somehow!
the PAT test in the test tool times out.
but, let's not worry about this since I can connect via my iPhone.
my internet is Metronet, which uses CGNAT. we worked on this last year, and after Ring made some changes, I was able to connect.
my cell service is via Spectrum (formerly Time Warner), who uses the Verizon network.
thanks for your help
ken
update: 10 minutes later, with firewall back on, I can connect via my ISP (not using iPhone). as you said, likely was a server somewhere along the line that was on break.