AS358

AS358 is a legacy 16-bit autonomous system number registered under ARIN to the United States Department of Defense (DoD). It has no standalone RDAP record of its own — a direct query to rdap.arin.net/registry/autnum/358 returns 404, because AS358 is covered entirely by the block-level allocation DNIC-ASBLK-00306-00371, which spans AS306 through AS371 (startAutnum 306, endAutnum 371). That parent record is the authoritative first-party registry source: it names the registrant as "United States Department of Defense (DoD)" (ARIN org handle USDDD, 3990 E. Broad Street, Columbus, OH), carries an autnum top-level registration event of 1989-06-30, was last changed 2025-09-12, and is status Active. Operational and registration management runs through DISA-Columbus (the DoD Network Information Center), whose validated ARIN contacts sit at mail.mil addresses. Unlike the dormant end of the spectrum, AS358 is actively announced: RIPEstat shows one IPv4 prefix (55.52.0.0/16, 65,536 addresses) and two IPv6 /40 prefixes (2609:12a:5800::/40 and 2609:e000:5800::/40), broadly visible across the RIS peer set (323/325 v4 peers, 323/323 v6 peers), first seen originating 55.52.0.0/16 on 2017-06-23. IPinfo classifies it as a Stub AS whose single observed upstream is AS306, its own parent block — i.e., internal DoD/DISA routing rather than public commercial peering, consistent with the absence of any PeeringDB record or published peering policy. No notable public abuse signal was found for AS358 as of 2026-07-01 (AbuseIPDB/Spamhaus-type sources, NANOG archives, BGP-incident research); note this is distinct from the unrelated 2021 "Global Resource Systems" DoD IP-space story, which ran under AS8003, not AS358.

Operator

United States Department of Defense (DoD); block DNIC-ASBLK-00306-00371, ARIN org handle USDDD, operationally managed by DISA-Columbus / DoD Network Information Center (Columbus, OH) [Confirmed] — ARIN RDAP autnum/358 (block record), ipinfo.io/AS358

Country / RIR

US, ARIN (block "Assigned by ARIN", resource range 1-1876 in the IANA 16-bit AS Numbers Registry) [Confirmed] — ARIN RDAP, RIPEstat as-overview

Allocated

1989-06-30 (ARIN autnum top-level registration event for the DNIC-ASBLK-00306-00371 block covering AS306–AS371; a first-party RIR date, corroborated by IPinfo); last changed 2025-09-12 [Confirmed] — ARIN RDAP autnum/358 top-level events, ipinfo.io/AS358

Org status

Active. DISA is a U.S. DoD combat support agency; the DNIC-ASBLK-00306-00371 record shows status Active, last changed 2025-09-12 [Confirmed for registry status; Likely for DISA mission wording, sourced to Wikipedia — disa.mil/about renders via a JS shell and was not scrapable] — ARIN RDAP, en.wikipedia.org/wiki/Defense_Information_Systems_Agency

Contacts

DISA-Columbus — disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil (NOC/technical/abuse), disa.columbus.ns.mbx.arin-registrations@mail.mil (registration); 300 North James Road, Whitehall, OH 43213 [Confirmed] — ARIN RDAP autnum/358 entity vCards

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-01 — nothing in AbuseIPDB/Spamhaus-type sources, NANOG/seclists archives, or BGP-hijack/leak research naming AS358. Sourced null, not a certified clean bill. Distinct from the unrelated 2021 AS8003 "Global Resource Systems" DoD IP-space announcement [Likely for null; Confirmed for AS8003 distinction] — theregister.com/2021/04/26/defense_department_ipv6, kentik.com/blog/the-mystery-of-as8003

Network & routing

Network type

U.S. government/military network; IPinfo classifies AS358 as a Stub AS (single-homed, no transit provided), sole observed upstream is AS306 (its parent block ASN) — internal DoD/DISA routing [Confirmed] — ipinfo.io/AS358

Size

1 IPv4 prefix (55.52.0.0/16, 65,536 addresses) and 2 IPv6 prefixes (2609:12a:5800::/40, 2609:e000:5800::/40; 512 /48-equivalents) [Confirmed] — RIPEstat announced-prefixes / routing-status

Routing/peering

announced and broadly visible — v4 seen by 323/325 RIS peers, v6 by 323/323; first seen 55.52.0.0/16 on 2017-06-23; last seen 2609:12a:5800::/40 on 2026-07-01 [Confirmed] — RIPEstat routing-status. No PeeringDB record or public peering policy found (consistent with a non-commercial DoD ASN)

[Likely] — help.disa.mil/network-connections

RPKI

not evaluated in this pull — the fetch script's rpki-validation step requires an explicit --prefix argument, which was not supplied ("skipped: no --prefix supplied") [Confirmed] — RIPEstat rpki-validation (skipped)

AS rank / customer cone / upstreams / peers

Unknown — the RIPEstat routing-status payload was truncated before CAIDA AS-rank, cone, and neighbour fields; no WebSearch corroboration performed this pass [Unknown]

Notable usage

associated domain is mail.mil; controls a /16 IPv4 block plus IPv6 space under DoD/DISA. No further first-party mission-system detail found on official DoD/DISA pages [Likely] — ipinfo.io/AS358

Related ASNs

AS306 (parent block ASN and sole observed upstream); the DNIC-ASBLK-00306-00371 block spans AS306–AS371 [Confirmed] — ARIN RDAP autnum/358, ipinfo.io/AS358

Analyst note

AS358 has no individual RDAP record (autnum/358 404s); all registration facts derive from the authoritative parent block DNIC-ASBLK-00306-00371. Actively routed government stub AS, single upstream AS306. Clean as of the dated check.