It's actually pretty clear that he did if you look at pages 3–10 of the government brief. The government just doesn't know exactly what's on the encrypted external hard drives, but they suspect it's a lot more child pornography, which could bolster the case against him: https://arstechnica.com/wp-content/uploads/2017/02/fedsrawls...