Summary

  • ARIN’s 4 November cumulative file records AS11968 and AS25923 moving from ChoicePoint, Inc. to LEXISNEXIS RISK SOLUTIONS INC. at 16:06:35 UTC on 3 November, then AS30286 moving from ThreatMetrix Inc. to the same registrant at 16:14:01. Exact RDAP puts all three under LRS-95.
  • RIPE RIS snapshots at 16:00 UTC before the transfers and 00:00 UTC on 4 November after them show 66.241.32.0/19 still originating at AS25923 and 192.225.156.0/22 at AS30286, each at 322 of 322 full-table IPv4 peers. AS11968 has zero observed prefixes at both snapshots.

The address cards were only half of ARIN’s merger ledger. At 16:06:35, two ChoicePoint ASNs followed two IPv4 networks into LexisNexis’s registry account. Seven minutes and 26 seconds later a ThreatMetrix ASN accompanied two IPv4 networks and an IPv6 /44. The earlier story about the five network objects found old names still printed on new registrant cards. The three ASN rows show what happened to the route-origin identities at the same administrative counter.

ARIN’s exact RDAP records now name LexisNexis, handle LRS-95, as registrant of AS11968, AS25923 and AS30286. The first pair’s ASN names read LEXISNEXIS-RISK-ASSETS; AS30286 retains THM. Those names are labels on the cards. The route observations give the more operationally useful contrast: AS11968 carried zero prefixes in both fixed snapshots, while AS25923 carried three IPv4 and two IPv6 prefixes, and AS30286 carried 25 IPv4 and five IPv6. The counts were identical on either side of the registry change.

Two exact ranges tie the ASN story back to the address story. 66.241.32.0/19, in the ChoicePoint transfer batch, had AS25923 as its exact origin at both instants. 192.225.156.0/22, in the ThreatMetrix batch, had AS30286. RIS saw each at 322/322 full-table IPv4 peers before and after. The registrant field moved; those two public route identities did not move between the observed frames.

ARIN has recorded the ownership-facing change, and RIS has recorded two unchanged routing snapshots. A route trace between 16:00 and 00:00 would settle whether there was a brief intervening change. The current record already defeats the easy assumption that every transferred ASN either lit up or went dark when its registry card changed.

Official originals: ARIN 4 Nov transfer; AS11968 RDAP; AS25923 RDAP; AS30286 RDAP; RIS AS11968 3 Nov 16 UTC; RIS AS11968 4 Nov 00 UTC; RIS AS25923 3 Nov 16 UTC; RIS AS25923 4 Nov 00 UTC; RIS AS30286 3 Nov 16 UTC; RIS AS30286 4 Nov 00 UTC; RIS 66.241.32.0/19 3 Nov 16 UTC; RIS 66.241.32.0/19 4 Nov 00 UTC; RIS 192.225.156.0/22 3 Nov 16 UTC; RIS 192.225.156.0/22 4 Nov 00 UTC; RIPE RIS API guide.