i've used PGP 20+ times and never had this happen, but the vendor's key is showing up as gray instead of black in my GPG keychain and when clicked on says its expired...sent the vendor an email hopefully he'll see it....it's William_Shatner if anybody cares
Have the vendor sign his new key with the old key to prove he's the same person.