private boolean checkSignatureCMS(SignedData cms, Certificate cert) {
		boolean res = false;

		try {
			Signature sig = Signature.getInstance(Constants.ALGORITHM_SIGN);
			sig.initVerify(cert.getPublicKey());
			SignedAttributes atts = cms.signerInfos.elements[0].signedAttrs;
			for (Attribute a : atts.elements) {
				Asn1DerEncodeBuffer buf = new Asn1DerEncodeBuffer();
				a.values.encode(buf);
				byte[] attrBytes = buf.getMsgCopy();
				for (int i = 0; i < attrBytes.length; i++) {
					sig.update(attrBytes[i]);
			}	}
			SignatureValue signature = cms.signerInfos.elements[0].signature;
			res = sig.verify(signature.value);

		} catch (Exception e) {
			e.printStackTrace();
		}

		return res;
}

TimeStampToken tsToken = response.timeStampToken;
Asn1DerEncodeBuffer encData = new Asn1DerEncodeBuffer();
tsToken.encode(encData);
byte[] contbytes = encData.getMsgCopy();
		
ContentInfo content = new ContentInfo();
content.decode(new Asn1DerDecodeBuffer(contbytes));
					
SignedData cms = (SignedData) content.content;

...
import org.apache.commons.lang3.ArrayUtils;
...
Signature sig = Signature.getInstance(JCP.CRYPTOPRO_SIGN_NAME);
...
ArrayUtils.reverse(signature.value);
// Теперь проверяем
res = sig.verify(signature.value);