U.S. v. Cookson, 922 F.3d 1079 (2019)

April 26, 2019 · United States Court of Appeals for the Tenth Circuit · Nos. 18-3070; 18-3071
922 F.3d 1079

UNITED STATES of America, Plaintiff-Appellant/Cross-Appellee,
v.
Daniel Eugene COOKSON, Defendant-Appellee/Cross-Appellant.

Nos. 18-3070
18-3071

United States Court of Appeals, Tenth Circuit.

April 26, 2019

Stephen R. McAllister, United States Attorney (Jason W. Hart, Assistant United States Attorney, with him on the briefs), District of Kansas, Wichita, Kansas, for Plaintiff-Appellant/Cross-Appellee.

Daniel T. Hansmeier, Appellate Chief (Melody Brannon, Federal Public Defender, Timothy J. Henry, Assistant Federal Public Defender, with him on the briefs), Kansas City, Kansas, for Defendant-Appellee/Cross-Appellant.

Before TYMKOVICH, Chief Judge, BACHARACH, and McHUGH, Circuit Judges.

McHUGH, Circuit Judge.

Daniel Eugene Cookson pleaded guilty to two counts of possessing child pornography after the FBI identified him in the course of its large-scale sting operation involving the website "Playpen." At his sentencing hearing, the district court determined Mr. Cookson's criminal history and total offense level correlated to a Guidelines range of 97-121 months. The district court announced its intention to sentence Mr. Cookson to a term of seventy-two months' imprisonment. But after entertaining argument from both parties and inviting Mr. Cookson's allocution, the district court imposed a sentence of five years' probation.

The United States appealed, challenging Mr. Cookson's sentence as substantively unreasonable. Mr. Cookson cross-appealed, arguing the district court erred in refusing to suppress evidence obtained from his computer by the FBI pursuant to a warrant issued in the Eastern District of Virginia

We affirm the district court's suppression ruling based on our decision involving the same warrant in United States v. Workman , 863 F.3d 1313 (10th Cir. 2017), but we vacate Mr. Cookson's sentence as unreasonable and remand to the district court for resentencing.

I. BACKGROUND

A. Search and Seizure

In 2015, the FBI tracked down and arrested the operator of Playpen, a website that facilitated the distribution of child pornography. Instead of discontinuing Playpen's operations, however, the FBI decided to use the site to locate individuals using it to access child pornography. Workman , 863 F.3d at 1315.

Finding Playpen's users presented a challenge because Playpen was accessible *1083only through "Tor" (short for "The Onion Router"), a network and software program designed to allow users to browse the internet anonymously. Id. at 1315. To access Playpen, users "had to employ [Tor] software that routed ... connections through [a series of] third-party computers called 'nodes.' " Id. By routing connections in this manner, Tor enabled its users to access Playpen without disclosing their IP addresses (unique numbers assigned to a given user's computer, see United States v. Henderson , 595 F.3d 1198, 1200 n.1 (10th Cir. 2010) ) or other identifying information.

To bypass the steps Playpen took to keep its users anonymous, the FBI, after seizing control of the website, loaded Playpen's contents-pornography and all-onto a government server in the Eastern District of Virginia. Workman , 863 F.3d at 1315. The FBI then sought a warrant in the Eastern District of Virginia which would authorize it to deploy a network investigative technique ("NIT") on the government server hosting Playpen. In support of their application for a search warrant, the FBI obtained an affidavit from Agent Douglas Macfarlane explaining the operation of the proposed NIT as follows:

In the normal course of operation, websites send content to visitors. A user's computer downloads that content and uses it to display web pages on the user's computer. Under the NIT authorized by this warrant, the TARGET WEBSITE [Playpen], which will be located in Newington, Virginia, in the Eastern District of Virginia, would augment that content with additional computer instructions. When a user's computer successfully downloads those instructions from [Playpen] ... the instructions, which comprise the NIT, are designed to cause the user's ... computer to transmit certain information [including IP addresses] to a computer controlled by or known to the government. ... The NIT will not deny the user ... access to any data or the functionality of the user's computer.

App. at 342-43. Essentially, when someone logged in to Playpen by entering a username and password, the NIT would cause that person's computer to transmit identifying information (including the user's IP address) to the FBI. A magistrate judge in the Eastern District of Virginia signed the warrant, and the FBI operated Playpen with the NIT for approximately two weeks.1

On February 22, 2015, someone with the username "shishkabobs" logged into Playpen. Shishkabobs's computer downloaded the NIT, causing it to transmit identifying information to the FBI. Using this identifying information, the government sought an administrative subpoena for the Southern Kansas Telephone Company to identify the physical address associated with the IP address obtained from shiskabobs's computer. Based on information received from the Southern Kansas Telephone Company, the FBI connected shiskabobs's IP address to a home Mr. Cookson shared with his parents and brother in Howard, Kansas. The FBI obtained and executed a search warrant for this home, where they found child pornography on various devices owned by Mr. Cookson. Mr. Cookson later confessed to using Playpen to view child pornography.

*1084The government charged Mr. Cookson with two counts of possessing child pornography under 18 U.S.C. § 2252A(a)(5)(B). Mr. Cookson moved to suppress all evidence derived from the operation of the NIT on his computer, arguing the magistrate judge in the Eastern District of Virginia lacked authority to issue the NIT warrant and the warrant therefore violated the Fourth Amendment. Specifically, Mr. Cookson argued that magistrate judges generally may not issue warrants for the search of persons or property outside of their district. See 28 U.S.C. § 636(a) (provision of the Federal Magistrates Act giving magistrate judges authority "within the district in which [they sit]"). Although he recognized that the version of Fed. R. Crim. P. 41(b) in force at the time created a limited set of exceptions to this general rule, including for warrants concerning the installation of a tracking device, Mr. Cookson contended the exceptions did not include the NIT. He further argued that, if the district court deemed the warrant invalid, the good-faith exception could not save the fruits of the FBI's unconstitutional search from application of the exclusionary rule because (1) the FBI misled the magistrate judge in its warrant application, (2) the magistrate abandoned her judicial role, and (3) the FBI knew the warrant was facially deficient. See Workman , 863 F.3d at 1317-18 (setting forth circumstances in which the good-faith exception does not apply).

The district court denied the suppression motion. The court observed that the same NIT warrant in Mr. Cookson's case had been considered by many other trial courts across the country. Most of these courts found the magistrate judge who issued the NIT warrant lacked the authority to do so, yet they declined to suppress evidence obtained as a result of the NIT under the good-faith exception. See, e.g. , United States v. Ammons , 207 F.Supp.3d 732 (W.D. Ky. 2016) ; United States v. Henderson , No. 15-CR-00565-WHO-1, 2016 WL 4549108 (N.D. Cal. Sept. 1, 2016) ; United States v. Michaud , No. 3:15-CR-05351-RJB, 2016 WL 337263 (W.D. Wash. Jan. 28, 2016). And while two courts decided the good-faith exception did not apply and suppressed the evidence, these decisions were later reversed by the courts' respective circuits. See United States v. Levin , 874 F.3d 316, 325 (1st Cir. 2017) ; United States v. Horton , 863 F.3d 1041, 1052 (8th Cir. 2017). The Tenth Circuit addressed the NIT warrant in United States v. Workman , holding that, even assuming the warrant was invalid, the good-faith exception saved the evidence from suppression. 863 F.3d at 1319-21.

Here, the district court agreed that the Eastern District of Virginia magistrate judge exceeded her authority in issuing the NIT warrant but determined Workman governed the outcome of Mr. Cookson's case. Accordingly, the court applied the good-faith exception and denied Mr. Cookson's suppression motion.

B. Sentencing

After the district court denied his motion to suppress, Mr. Cookson entered into a plea agreement as to both counts of the indictment. As relevant here, the plea agreement set forth Mr. Cookson's understanding that his plea entailed a maximum sentence of twenty years' imprisonment, various fines and assessments, and a minimum of five years' supervised release. Mr. Cookson and the government also agreed to a conditional plea allowing Mr. Cookson to appeal the district court's suppression decision. The government agreed that Mr. Cookson could remain on bond (under conditions of supervision) pending resolution of his appeal.

Prior to sentencing, Mr. Cookson's probation officer prepared a Presentence Investigation Report ("PSR"). The PSR calculated *1085Mr. Cookson's base offense level as 18. This base offense level increased to 28 due to a number of adjustments pursuant to U.S.S.G. § 2G2.2, including a two-level increase under U.S.S.G. § 2G2.2(b)(2) because the material involved a prepubescent minor; a four-level increase under U.S.S.G. § 2G2.2(b)(4) because the material involved sadistic or masochistic conduct or other depictions of violence; a two-level increase under U.S.S.G. § 2G2.2(b)(6) because the offense involved the use of a computer, and a five-level increase under U.S.S.G. § 2G2.2(b)(7)(D) because Mr. Cookson possessed more than 600 images of child pornography. The PSR also listed Mr. Cookson's adult criminal convictions, which resulted in a criminal history score of six and placed him in a criminal history category of III.

Based on an offense level of 28 and a criminal history category of III, the PSR calculated a Guidelines range for Mr. Cookson of 97-121 months' imprisonment. Mr. Cookson's convictions entail a maximum term of imprisonment of twenty years, and a minimum term of five years' supervised release.

The parties filed sentencing memoranda. The United States requested a sentence of ninety-seven months' imprisonment followed by five years' supervised release, emphasizing Mr. Cookson's criminal history and the need to avoid unwarranted sentencing disparities between similarly situated defendants. The government stated that the average sentence for offenders within the 97-121 range was seventy months. The government also stated that the 18 U.S.C. § 3553(a) factors supported a within-Guidelines sentence based on Mr. Cookson's (1) use of Tor anonymizing software; (2) continued involvement with child pornography after being caught by his family; (3) involvement in social networks associated with child exploitation; (4) lengthy involvement with child pornography; (5) sexting with strangers; and (6) involvement with illegal drugs. App. at 171.

Mr. Cookson requested a sentence of five years' probation, focusing on his rehabilitation as shown by holding a job for twenty-one months, being promoted, and recovering from drug addiction. Mr. Cookson also highlighted a policy disagreement with the § 2G2.2 sentencing enhancements, noting they apply in the majority of cases and have been criticized by the U.S. Sentencing Commission and various courts. Mr. Cookson explained that without those enhancements, his Guidelines range would be 24-30 months instead of 97-121.

During the sentencing hearing, the court determined the Guidelines range of 97-121 months had been correctly calculated based on a total offense level of 28 and criminal history category of III. Before hearing from the parties, the court stated the following:

Having considered these factors and the advisory guidelines, the nature and circumstances of the offense, and Mr. Cookson's history and characteristics, I am of the view that the guidelines range, even the low end of the guideline range, is greater than necessary to serve the purposes of sentencing and it is my intention to sentence Mr. Cookson to a term of confinement of 72 months on each of Counts 1 and 2, those terms to run concurrently and not consecutively; to be followed by five years of supervised release on each of the two counts, those counts to run, again, concurrently and not consecutively.
I believe that sentence is sufficient but not greater than necessary to reflect the seriousness of the offense, to promote respect for the law, and to provide just punishment for the offenses, all as set out at 18 U.S.C. Section 3553(a)(2)(A).

*1086App. at 257-58. The court then invited the government to state its position on this tentatively-announced sentence. The government agreed with the sentence of seventy-two months' imprisonment but reminded the court that Mr. Cookson had used "sophisticated anonymizing technology" (i.e., Tor) and had engaged with an "internet community devoted to child exploitation," which distinguished him from the "mine run" of defendants. App. at 260-62.

The court then heard argument from Mr. Cookson. Defense counsel began by disputing the government's characterization of aggravating factors under § 3553(a), arguing the use of Tor did not indicate a level of technical sophistication because the software is widely available and used for legitimate purposes, and that the government was incorrect in asserting Mr. Cookson had engaged in "production conduct." Defense counsel pointed to letters from Mr. Cookson's family and his employer, as well as the fact Mr. Cookson had overcome a drug addiction, as evidence of "extraordinary rehabilitation." App. at 274. Defense counsel also highlighted the overrepresentation of Mr. Cookson's criminal history-four out of six total points for that history coming from a single misdemeanor marijuana and drug paraphernalia possession charge. Defense counsel noted that Mr. Cookson held a good job, stayed clean, attended counseling, and had made "great strides in his life," to the point where he could continue to "live a drug-free and ... law abiding lifestyle." App. at 276-77. Defense counsel argued imprisonment would "have [Mr. Cookson] go backwards rather than forwards," and a sentence of probation would allow Mr. Cookson to continue "contributing to society" and personally moving "in a positive direction." App. at 277. Mr. Cookson then allocuted, apologizing for his actions taken "in the midst of drug addiction [and] depression" and stating that he wished to keep his job and "continue working hard on [his] sobriety." Mr. Cookson asked for a sentence of probation to allow him to "stay on [his] current path of living a healthy, normal life."

After hearing argument from defense counsel and Mr. Cookson's allocution, but before announcing a final sentence, the court stated the following:

Mr. Cookson, it's pretty obvious that you have made some significant progress in terms of your drug addiction. I have no idea, obviously, where you are in terms of child pornography but I'm not aware of any further activity that came up during the course of the presentence investigation with respect to that.
You do have a good job and the fact that you've been at it for two years speaks volumes. Your family is obviously very supportive and they have seen very positive changes in you over a period of time. It does seem that your criminal history is overrepresented given the fact that four of your six points came out of a misdemeanor marijuana possession charge even with all of the subsequent stuff. And, frankly, these are serious offenses ....

App. at 279-280. The court observed that Congress and the Sentencing Commission had "struggled with this area" (presumably, sentencing for child-pornography possession) and they were "hard" and "heartbreaking" cases. And the court recognized that becoming a registered sex offender represented a "very heavy burden." With respect to Mr. Cookson specifically, the court stated:

I've seen a lot of people through here over the years convicted of these types of offenses. Some are people who literally are social recluses, who are up in their mother's attic or something, that's where they spend their time, they have no social life at all, any employment that they have they just go to work and they *1087go home and there's no life even there, and you seem to be the exception to the norm. And I intend to give you credit for the fact that you did go out, you did get a job, [and] the fact that you're doing well with it ....

App. at 282.

The court then sentenced Mr. Cookson to five years' probation, noting it "would have been more inclined not to place [Mr. Cookson] on probation," but it was concerned about imprisoning Mr. Cookson while his appeal was pending because his convictions could be overturned. App. at 283. The government objected to the sentence on procedural and substantive grounds, specifically noting its "procedural objection" to the court's apparent reliance on a concern about imprisoning Mr. Cookson pending resolution of his appeal, because the government had agreed Mr. Cookson could remain on bond for that period.

The court later produced a written "statement of reasons" for its sentence, checking boxes for the following reasons for a variance under 18 U.S.C. § 3553(a) : "the history and characteristics of the defendant" (including the fact that his criminal history had been "over-represented"); "to reflect the seriousness of the offense, to promote respect for the law, and to provide just punishment for the offense;" "to afford adequate deterrence to criminal conduct;" "to protect the public from further crimes of the defendant;" "to provide the defendant with needed educational or vocational training;" "to provide the defendant with other correctional treatment in the most effective manner;" and based on the district court's "policy disagreement with the guidelines," specifically § 2G2.2.

II. DISCUSSION

A. NIT Search

At the outset, the parties do not dispute whether the NIT constituted a search within the meaning of the Fourth Amendment, whether the warrant was valid, or whether the search was reasonable despite the invalid warrant. The only issue before us is whether the good-faith exception to the exclusionary rule applies to the government's search using the NIT. We decided it did in Workman .

There, we assumed the NIT search "violate[d] the Federal Magistrates Act [ § 636(a) ] and the Federal Rules of Criminal Procedure." Workman , 863 F.3d at 1321. But we explained that under United States v. Leon , 468 U.S. 897, 104 S.Ct. 3405, 82 L.Ed.2d 677 (1984), even "improperly obtained evidence remains admissible when the executing agents 'act with an objectively reasonable good-faith belief that their conduct is lawful or when their conduct involves only simple, isolated negligence.' " Id. at 1317 (quoting Davis v. United States , 564 U.S. 229, 238, 131 S.Ct. 2419, 180 L.Ed.2d 285 (2011) ) (internal quotation marks omitted). Because we "expect agents executing warrants to be reasonably well-trained, but we do not expect them to understand legal nuances the way that an attorney would," we concluded in Workman that FBI agents could have reasonably relied on the warrant issued by the magistrate in the Eastern District of Virginia when executing the NIT search. Id. at 1320-21 (internal quotation marks omitted). Had the agents possessed "sophisticated legal training, they might have recognized" the problems posed by Rule 41(b) and 28 U.S.C. § 636(a), but we do not hold law enforcement to such a standard. Id. at 1320. We also observed that eight federal judges had held the NIT warrant complied with federal law and federal rules, suggesting the agents could reasonably "have made the same mistake" when acting in reliance on the warrant. Id. at 1321 (noting "objective reasonableness sometimes turns on the clarity of existing law"); see *1088United States v. Gonzales , 399 F.3d 1225, 1228-29 (10th Cir. 2005) ("[O]fficers are generally not required to second-guess the magistrate's decision in granting a warrant.").

Although Mr. Cookson recognizes Workman involved the same warrant at issue in this case, he argues the record before us contains four new facts that alter the good-faith calculus under Leon . We evaluate each of these four facts not expressly considered by Workman in turn.

First, Mr. Cookson points to an internal guidance document produced by the Department of Justice-Computer Crime & Intellectual Prop. Section, Criminal Div., U.S. Dep't of Justice, Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations (3d ed. 2009), http://www.justice.gov/criminal/cybercrime/docs/ssmanual2009.pdf. This manual advised law enforcement to ensure compliance with Fed. R. Crim. P. 41 by "obtain[ing] multiple warrants if they have reason to believe that a network search will retrieve data stored in multiple locations." Id. at 84. Mr. Cookson argues the manual advises law enforcement to "obtain additional warrants for each location where the data resides" to ensure compliance with Rule 41(b), 2nd Br. on Cross-Appeal at 26, and therefore it suggests that FBI agents (who "worked very closely with the Department of Justice" during the NIT operation, App. at 568) knew the NIT warrant would violate Rule 41(b). A fuller reading of the manual, however, reveals the DOJ bifurcated its advice depending on whether agents would be able to learn, prior to searching, whether the data searched was located within or without the district. Computer Crime & Intellectual Prop. Section, supra , at 84 ("Agents may in some cases be able to learn where the data is located before the search, but in others they will be unable to know the storage site of the data until after the search is completed."). When "agents can learn prior to the search that some or all of the data described by the warrant is stored in a different location than where the agents will execute the search," the manual advises agents to obtain multiple warrants. Id. at 84-85. "When agents do not and even cannot know that data searched from one district is actually located outside the district," the manual expressly advises agents that "evidence seized remotely from another district ordinarily should not lead to suppression of the evidence obtained ." Id. at 85 (emphasis added). The manual goes on to explain that courts will likely not suppress the evidence as either (1) obtained in compliance with Rule 41 ; or (2) even if in violation of Rule 41, obtained in a good-faith manner. See id. at 85 (citing United States v. Ramirez , 112 F.3d 849, 852 (7th Cir. 1997) ; United States v. Denman , 100 F.3d 399, 402 (5th Cir. 1996) ; United States v. Rodriguez , 968 F.2d 130, 135-36 (2d Cir. 1992) ). Because the Tor software used to access Playpen concealed users' IP addresses, agents could not know that data searched pursuant to the NIT warrant was located outside the Eastern District of Virginia. Accordingly, the manual, far from suggesting agents acted in bad faith when obtaining or relying on the NIT warrant, gives support for the FBI's conclusion that the warrant met constitutional muster.

Second, Mr. Cookson points to In re Warrant , 958 F.Supp.2d 753 (S.D. Tex. 2013), in which a magistrate judge denied the FBI's request for a warrant authorizing it to "surreptitiously install data extraction software" on a computer whose location was unknown. Id. at 755. Once installed, the software would search the computer for information, activate the computer's built-in camera, and transmit extracted data back to the FBI within the Southern District of Texas. Id. The magistrate judge held the warrant application *1089satisfied none of the Rule 41(b) criteria. Id. at 756.

The facts of In re Warrant bear substantial similarity to those before us. Nevertheless, In re Warrant is insufficient to show the FBI lacked good faith when relying on the NIT warrant because magistrate judges differed on the question at the time. In re Warrant itself mentions that "in 2007 a magistrate judge is known to have issued a warrant authorizing a similar investigative technique to track the source of e-mailed bomb threats against a Washington state high school." Id. at 756 n.2. Likewise, a separate NIT warrant appears to have been issued against a Tor-based child pornography website in 2012. See United States v. Laurita , No. 8:13CR107, 2016 WL 4179365, at *3 (D. Neb. Aug. 5, 2016) ("Pursuant to court authorization, a NIT was installed on Website A during the period of November 16, 2012, and December 2, 2012."). This disagreement among magistrate judges supports Workman 's conclusion that the FBI reasonably deferred to the issuing magistrate's judgment on a question of unsettled law. See 863 F.3d at 1321 ("[O]bjective reasonableness sometimes turns on the clarity of existing law.").

Third, Mr. Cookson points to a September 2013 letter from the acting Assistant Attorney General ("AAG") to the Chair of the Advisory Committee on Criminal Rules. Letter from Mythili Raman, Acting Attorney Gen., to Judge Reena Raggi, Chair, Advisory Committee on the Criminal Rules (Sept. 18, 2013). In this letter, the AAG proposes an amendment to Rule 41 that would allow a magistrate judge "in a district where activities related to a crime have occurred to issue a warrant-to be executed via remote access-for electronic storage media and electronically stored information located within or outside that district." App. at 397. This letter cites In re Warrant , observing:

[E]ven when investigators can satisfy the Fourth Amendment's threshold for obtaining a warrant for [a] remote search ... a magistrate judge may decline to issue the requested warrant. For example, in a fraud investigation, one magistrate judge recently ruled that an application for a warrant for a remote search did not satisfy the territorial jurisdiction requirements of Rule 41.

Id. at 398. Although this letter lends credence to Mr. Cookson's argument that the FBI was aware of In re Warrant and Rule 41(b)'s territorial restrictions, it does not suggest the AAG believed the magistrate judge's decision in In re Warrant was correct. Rather, the AAG sought an amendment to Rule 41(b) because the rule "does not directly address the special circumstances that arise when officers execute search warrants, via remote access, over modern communications networks such as the Internet." App. at 397. The AAG hoped to "clarify" the rule because "while the Fourth Amendment permits warrants to issue for remote access to electronic storage media or electronically stored information, Rule 41's language does not anticipate those types of warrants in all cases." Id. at 399. Accordingly, the AAG letter does not show the AAG (or, by extension, the FBI) knew Rule 41(b) in its then-current form did not authorize the NIT warrant.

Finally, Mr. Cookson notes that Rule 41 was amended in 2016 to allow a magistrate judge to "issue a warrant to use remote access to search electronic storage media ... within or outside [her] district if ... the district where the media or information is located has been concealed through technological means." Fed. R. Crim. P. 41(b)(6)(A). The parties do not dispute that this amendment, had it been adopted two years earlier, would have expressly authorized the NIT warrant. But we disagree with Mr. Cookson's contention that "there *1090would have been no need to amend Rule 41" had the NIT search been authorized at the time. 2nd Br. on Cross-Appeal at 28. The amendment fails to show the FBI's lack of good faith for the same reason the AAG letter does-the amendment of Rule 41 is consistent with an aim to clarify , but not necessarily change , the rule. Therefore, the proposed and actual amendment bear no clear indications that the pre-amendment Rule 41 forbade the NIT warrant, let alone that the FBI knew as much.

Taken together, Mr. Cookson's four new facts, at most, support Workman 's conclusion that the territorial restrictions of Rule 41(b) were unclear at the time the NIT warrant issued. See 863 F.3d at 1321. A review of decisions before and since confirms courts could and did differ on, for example, whether the NIT amounted to a "tracking device" expressly authorized by Rule 41. Compare, e.g. , United States v. Jones , 230 F.Supp.3d 819, 824-25 (S.D. Ohio 2017), with Ryan Anthony Adams , 2016 WL 4212079, at *6 ("[T]he NIT does not track; it searches."). Accordingly, these new facts do not remove us from Workman 's ambit, and we decline Mr. Cookson's invitation to distinguish or overrule binding precedent.

B. Sentencing

On appeal, the government challenges Mr. Cookson's five-year probationary sentence as substantively unreasonable and purports to waive any challenge as to the sentence's procedural reasonableness. Yet much of the government's argument focuses on the district court's explanation for Mr. Cookson's sentence-specifically its brevity, reliance on a misunderstanding of the terms of Mr. Cookson's plea agreement, failure to consider various § 3553(a) factors, and unexplained deviation from an initially-announced seventy-two-month period of imprisonment. We typically consider such arguments as pertaining to a sentence's procedural reasonableness. United States v.Huckins , 529 F.3d 1312, 1317 (10th Cir. 2008) ("Procedural reasonableness addresses whether the district court incorrectly calculated ... the Guidelines sentence, treated the Guidelines as mandatory, failed to consider the § 3553(a) factors, relied on clearly erroneous facts, or failed to adequately explain the sentence.") Indeed, the government itself framed some of these objections as "procedural" at Mr. Cookson's sentencing hearing.

Still, we have recently acknowledged a blurring of the line between procedural and substantive reasonableness when it comes to the district court's explanation for a given sentence. See United States v. Barnes , 890 F.3d 910, 917 (10th Cir. 2018). Therefore, after stating the standard for our review of the district court's sentencing decision, we review the distinction between procedural and substantive reasonableness and its impact on our decision before evaluating the substantive reasonableness of Mr. Cookson's sentence.

1. Standard of Review

We review a district court's sentencing decision for substantive reasonableness under an abuse-of-discretion standard, looking at the "totality of the circumstances." United States v. Balbin-Mesa , 643 F.3d 783, 787 (10th Cir. 2011). "A district court abuses its discretion when it renders a judgment that is arbitrary, capricious, whimsical, or manifestly unreasonable." United States v. Friedman , 554 F.3d 1301, 1307 (10th Cir. 2009). Our abuse-of-discretion standard applies "without regard to whether the district court imposes a sentence within or outside the advisory guidelines range," so we do not apply a presumption of unreasonableness to sentences outside the guidelines range. Id. Instead, we "give due deference to the district court's decision that the § 3553(a) factors, on [the] whole, justify the extent *1091of the variance." Id. (quotation marks omitted). "That we might reasonably have concluded a different sentence was appropriate is insufficient to justify reversal of the district court." Id. (quotation marks and alterations omitted). We bear in mind that the "sentencing judge is in a superior position to find facts and judge their import under § 3553(a) in the individual case," Gall v. United States , 552 U.S. 38, 51, 128 S.Ct. 586, 169 L.Ed.2d 445 (2007), because "[t]he judge sees and hears the evidence, makes credibility determinations, has full knowledge of the facts and gains insights not conveyed by the record." United States v. Barnes , 890 F.3d 910, 915-16 (10th Cir. 2018) (quoting Gall , 552 U.S. at 51, 128 S.Ct. 586 ). Finally, "when we review a downward variance from the recommended guidelines range, as we do here, even more solicitude to the sentencing court is appropriate." Id . at 916.

2. Procedural Versus Substantive Unreasonableness

In the wake of United States v. Booker , 543 U.S. 220, 125 S.Ct. 738, 160 L.Ed.2d 621 (2005), which converted the mandatory federal sentencing scheme into a discretionary one, we review sentences imposed by the district court for reasonableness. Friedman , 554 F.3d at 1307. Our reasonableness review has two aspects: procedural and substantive. Id. When reviewing a sentence for procedural reasonableness, we consider "whether the district court committed any error in calculating or explaining the sentence." Id. ; see also Gall , 552 U.S. at 51, 128 S.Ct. 586 (stating appellate courts must first "ensure that the district court committed no significant procedural error, such as failing to calculate (or improperly calculating) the Guidelines range, treating the Guidelines as mandatory, failing to consider the § 3553(a) factors, selecting a sentence based on clearly erroneous facts, or failing to adequately explain the chosen sentence ...."). When reviewing a sentence for substantive reasonableness, we focus on "whether the length of the sentence is reasonable given all the circumstances of the case in light of the factors set forth in 18 U.S.C. § 3553(a)." Friedman , 554 F.3d at 1307 (quotation marks omitted).

This distinction turns murky, however, when we consider that the district court's explanation for a given sentence serves a "dual purpose." See Barnes , 890 F.3d at 917. First, a district court's explanation of how the § 3553(a) factors apply "is a procedural requirement," id. , and the "absence of explanation could constitute procedural error" as could the failure to address a defendant's material, non-frivolous arguments under the § 3553(a) factors. United States v. Lente , 647 F.3d 1021, 1031, 1035 (10th Cir. 2011). Second, the content of the district court's explanation "is relevant to whether the length of the sentence is substantively reasonable" because "[a] sentence is more likely to be within the bounds of reasonable choice when the court has provided a cogent and reasonable explanation for it." Barnes , 890 F.3d at 917. Stated another way, we rely on the district court's procedurally-required explanation in order to conduct "meaningful appellate review" of a sentence's substantive reasonableness. Gall , 552 U.S. at 50, 128 S.Ct. 586 ; see Lente , 647 F.3d at 1039 (explaining that "[w]e cannot fulfill our appellate role, however deferential, in assessing the substantive reasonableness of [a] sentence" without an adequate explanation from the district court). A limited, brief, or inconsistent explanation hinders our ability to do so, and therefore "put[s] at risk the substantive reasonableness of any decision [the district court] reached." United States v. Lychock , 578 F.3d 214, 220 (3d Cir. 2009) (quoting United States v. Goff , 501 F.3d 250, 256 (3d Cir. 2007) ); see *1092Friedman , 554 F.3d at 1312 ("[T]he very limited nature of the record and the paucity of reasoning on the part of the district court most certainly bear on our review of the substantive reasonableness of Friedman's sentence."); United States v. Gonzalez , 529 F.3d 94, 98 (2d Cir. 2008) ("Determination of whether the sentence is unreasonable is hampered by the brevity of the reasons given for it."). This is especially true when the sentence varies greatly from the sentencing Guidelines, because "a major [variance] should be supported by a more significant justification than a minor one." Gall , 552 U.S. at 50, 128 S.Ct. 586.

But the heavier our reliance on the inadequacy of the district court's explanation in holding Mr. Cookson's sentence substantively unreasonable, the less our decision restricts the "bounds of reasonable choice" available to the district court in crafting a sentence on remand. Barnes , 890 F.3d at 917. A sentence deemed substantively unreasonable primarily because of an explanation too brief or cursory to justify the extent of its variance from the Guidelines might be substantively reasonable given a more detailed explanation. See United States v. Park , 758 F.3d 193, 202 (2d Cir. 2014) ("In holding that the District Court's probationary sentence was substantively unreasonable , we rely heavily upon the District Court's own evaluation of the case, as revealed by its statements at the sentencing hearing. ... We thus do not foreclose the possibility that the imposition of a probationary sentence on remand, after appropriate consideration of the § 3553(a) factors thus far left unaddressed, could be substantively reasonable as well.").

With that backdrop in place, we consider Mr. Cookson's sentence in light of "all the circumstances of the case," Friedman , 554 F.3d at 1307, using the district court's explanation for the sentence "to assist us in determining whether the district court abused its discretion in weighing the § 3553(a) factors," Barnes , 890 F.3d at 917.

3. Substantive Reasonableness Review

18 U.S.C. § 3553(a) requires district courts to consider seven factors in sentencing: (1) the nature and circumstances of the offense and the history and characteristics of the defendant; (2) the need for a sentence to reflect the "basic aims of sentencing, namely (a) 'just punishment' (retribution), (b) deterrence, (c) incapacitation, and (d) rehabilitation," United States v. Walker ("Walker I") , 844 F.3d 1253, 1253 (10th Cir. 2017) ; (3) the kinds of sentences available; (4) the Sentencing Commission Guidelines; (5) Sentencing Commission policy statements; (6) the need to avoid unwarranted sentencing disparities; and (7) the need for restitution. See 18 U.S.C. § 3553(a)(1)-(7).

The district court explained Mr. Cookson's sentence primarily in terms of § 3553(a)(1), specifically referencing Mr. Cookson's (1) recovery from drug addiction, (2) success in a new job, and (3) support from his family. The court acknowledged that Mr. Cookson's offenses were serious and that possession of child pornography causes significant harm to the children depicted. See United States v. DeRusse , 859 F.3d 1232, 1239 (10th Cir. 2017) ("Viewing the entire sentencing transcript in context ... we are convinced that the district court was fully aware of the seriousness of the offense and took very seriously the harm suffered by the [victims].") But after hearing argument from defense counsel about Mr. Cookson's three-year recovery from addiction and from Mr. Cookson himself attributing his conduct to "a bad place in [his] life at the time in the midst of drug addiction [and] depression," App. at 278, the district court remarked that Mr. Cookson's pre-sentencing *1093rehabilitation made him the "exception to the norm," App. at 282. The district court observed that Mr. Cookson had obviously made "significant progress in terms of ... drug addiction," App. at 279, and that Mr. Cookson had "a good job and the fact that [Mr. Cookson has] been at it for two years speaks volumes," id. at 280. Finally, the court noted, "It does seem that [Mr. Cookson's] criminal history is overrepresented given the fact that four of [his] six points came out of a misdemeanor marijuana possession charge."2 App. at 280. The combination of these circumstances could reasonably support a downward variance, even a large one, under 18 U.S.C. § 3553(a)(1). See Walker I , 844 F.3d at 1257.

The district court's written statement of reasons also expressed its policy disagreement with U.S.S.G. § 2G2.2 as a reason for the downward variance. We have described arguments criticizing the § 2G2.2 enhancements as "quite forceful" and have "specifically cautioned district courts to carefully apply the child pornography distribution guideline and remain mindful that they possess broad discretion in fashioning sentences under § 2G2.2." United States v. Wireman , 849 F.3d 956, 962 (10th Cir. 2017) (internal quotation marks and alterations omitted); see also United States v. Grigsby , 749 F.3d 908, 911 (10th Cir. 2014) (referencing a "number of reported cases where district courts have rejected application of § 2G2.2 for want of an empirical basis"); United States v. Dorvee , 616 F.3d 174, 186-87 (2d Cir. 2010) (noting that the ubiquitous application of the § 2G2.2 enhancements resulted in "virtually no distinction between the sentences for defendants [who merely possessed child pornography] ... and the sentences for the most dangerous offenders who, for example, distribute child pornography for pecuniary gain"). Accordingly, the district court did not abuse its discretion in determining that its policy disagreement with § 2G2.2 could support the imposition of a more lenient sentence. But the court did not elaborate on this policy disagreement during the sentencing hearing except to say that "Congress has struggled with this area" and "the Sentencing Commission has struggled with this area." App. at 280. Nor did the court address the extent to which the disagreement weighed in its final decision. Instead, the court's explanation focuses overwhelmingly on Mr. Cookson's presentencing rehabilitation and its desire not to see Mr. Cookson's progress "turned back." Id. at 283.

Although we recognize these concerns as valid, we have cautioned against excessive reliance on a single factor in sentencing. In Walker I , we held substantively unreasonable a time-served sentence for a serial bank robber who pleaded guilty to two bank robberies. See 844 F.3d at 1255.3 We reasoned the district court had focused "almost exclusively on Mr. Walker's newfound sobriety" and had paid "inadequate attention" to a number of other *1094statutory factors, including the "basic aims of punishment" and the need to avoid unwarranted sentencing disparities, in deciding to impose a time-served sentence. Id. 1258-59 ; see 18 U.S.C. § 3553(a)(1), (6). Although the district court in Walker I discussed, for example, the values of specific deterrence and rehabilitation, we criticized its failure to mention incapacitation and its offhand "dismiss[al] [of] the relevance of [general] deterrence." See Walker I , 844 F.3d at 1257-58. Of course, the district court need not afford equal weight to each § 3553(a) factor, United States v. Sanchez-Leon , 764 F.3d 1248, 1267 (10th Cir. 2014), and we will defer on substantive-reasonableness review "not only to a district court's factual findings but also to its determinations of the weight to be afforded to such findings." United States v. Smart , 518 F.3d 800, 808 (10th Cir. 2008). Unlike the district court in Walker I , however, the court here made no mention of deterrence, rehabilitation, or incapacitation in explaining Mr. Cookson's sentence. Nor did it address the potential for "unwarranted sentencing disparities" raised by the government. Although we can extrapolate reasoning from the district court's relatively brief explanation-for example, the district court might have viewed any disparity resulting from Mr. Cookson's sentence as a "warranted" one, see Lente , 759 F.3d at 1169 (explaining that "[o]ur sentencing scheme seeks to eliminate not all sentencing disparities, but only unwarranted disparities") (internal quotation marks omitted)-the explanation itself does little to assist us in understanding how it applied the § 3553(a) factors other than § 3553(a)(1) to Mr. Cookson's case, see Barnes , 890 F.3d at 917. Without any explanation from the district court on the weight it afforded the other § 3553(a) factors in granting Mr. Cookson such a large variance, we consider the sentence as substantively unreasonable. See Smart , 518 F.3d at 808 ; see also Gall , 552 U.S. at 50, 128 S.Ct. 586 ("[A] major [variance] should be supported by a more significant justification than a minor one.").

Comparing the district court's explanation of Mr. Cookson's sentence with other recent cases upholding the substantive reasonableness of large downward variances supports this conclusion. Barnes , for example, considered a large downward variance for former jail employees convicted of conspiracy to violate, and deprivation of, constitutional rights related to abuse they inflicted on the jail's inmates. See 890 F.3d at 914 (affirming a downward variance from a Guidelines range of 70-87 months' imprisonment to a twenty-four-month sentence followed by twenty-four months' supervised release for the first defendant and a twelve-month sentence followed by thirty-six months' supervised release for the second). In upholding the sentences as substantively reasonable, we credited the district court with a "careful" discussion, in which the court "walked through" and "properly addressed each of the § 3553(a) factors before approving a downward variance from the Guidelines range." Id. at 918. The Barnes district court expressly considered, for example, the defendants' personal characteristics, their risk of recidivism, the "specific and general deterrence" advanced by their sentences, and the seriousness of their offenses. Id. at 918-19. Likewise, in DeRusse , we affirmed a downward departure and variance from a Guidelines range of 108-135 months to a sentence of time served followed by five years' supervised release in a kidnapping case. 859 F.3d at 1235-36. We distinguished the district court's explanation of DeRusse's sentence from that in Walker I , describing it as having "thoughtfully considered all of the § 3553 factors, rather than focusing almost exclusively on one particular factor, and concluded based on its assessment of all of these factors that a sentence of time-served *1095would be the most appropriate." Id. at 1240.

Here, the district court's assessment, in addition to focusing almost exclusively on § 3553(a)(1), relied on an apparent misunderstanding of Mr. Cookson's conditional plea agreement. Fearing that Mr. Cookson's challenge to the suppression ruling might be successful, and that Mr. Cookson would then have spent time in prison and lost his job only for the charges against him to be dismissed, the court stated it would have been less inclined to place Mr. Cookson on probation but for his conditional plea. But the government had consented in the conditional plea agreement that Mr. Cookson could remain on bond pending resolution of his appeal. The district court's concern was thus unfounded, and its suggestion that it would have been more inclined to sentence Mr. Cookson to a term of imprisonment absent this concern gives us pause in deferring to its "decision that the § 3553(a) factors, on [the] whole, justify the extent of the variance." Friedman , 554 F.3d at 1307.

In light of this discrepancy, and because the district court placed nearly exclusive focus on Mr. Cookson's presentencing rehabilitation in explaining its decision, the sentence it imposed is substantively unreasonable. We reach this conclusion, in large part, based on the significant variance in Mr. Cookson's sentence and the district court's limited and inconsistent explanation for that variance. See Barnes , 890 F.3d at 917 ("A sentence is more likely to be within the bounds of reasonable choice when the court has provided a cogent and reasonable explanation for it."). We therefore decline the government's request that we direct the district court to impose the seventy-two-month sentence it tentatively announced at the outset of Mr. Cookson's sentencing hearing. See Koon v. United States , 518 U.S. 81, 97, 116 S.Ct. 2035, 135 L.Ed.2d 392 (1996) ("[I]t is not the role of an appellate court to substitute its judgment for that of the sentencing court as to the appropriateness of a particular sentence.") (quoting Williams v. United States , 503 U.S. 193, 205, 112 S.Ct. 1112, 117 L.Ed.2d 341 (1992) ). Nor do we agree the district court's deviation from its tentatively-announced seventy-two-month sentence should weigh heavily in our assessment of whether it reached a substantively unreasonable decision.4 To the contrary, the record indicates the district court, after announcing a tentative sentence, listened carefully to counsel's arguments and *1096Mr. Cookson's allocution.5 Something about these arguments apparently persuaded the district court to change its mind and impose a more lenient sentence than it had initially anticipated. See App. at 283 (explaining the district court "came in ... not expecting to [impose a probationary sentence]"). But the district court undertook a relatively brief explanation of the statutory factors supporting the sentence it finally imposed, which impedes our review. We therefore do not foreclose the possibility that a more detailed explanation from the district court of the weight it afforded § 3553(a) factors other than § 3553(a)(1) could yield a similar, but substantively reasonable, sentence on remand. See Park , 758 F.3d at 202.

III. CONCLUSION

For these reasons, we AFFIRM the district court's denial of Mr. Cookson's motion to suppress the fruits of the NIT search of his computer. We also VACATE the district court's decision sentencing Mr. Cookson to five years' probation and REMAND for resentencing.