...
CAdESSignature cadesSignature = new CAdESSignature(true);
// Создаем подписанта CAdES-BES.
cadesSignature.addSigner(conf.getKeys()[0],
conf.getCertificatesChain(), CAdESType.CAdES_BES, null);
byte[] cadesCms = cadesSignature.sign(data);


Asn1BerDecodeBuffer asnBuf = new Asn1BerDecodeBuffer(cadesCms);
ContentInfo сInfo = new ContentInfo();
сInfo.decode(asnBuf);
SignedData cms = (SignedData) сInfo.content;
SignerInfo signerInfo = cms.signerInfos.elements[0];
addSignatureTimeStamp(signerInfo, signerInfo.signature.toString().getBytes());

Asn1BerEncodeBuffer asnBuf2 = new Asn1BerEncodeBuffer();
сInfo.encode(asnBuf2, true);
return asnBuf2.getMsgCopy();

private void addSignatureTimeStamp(SignerInfo signerInfo, byte[] sign) {
TimeStampToken token = timestampData(sign).timeStampToken;
Attribute timeStamp = new Attribute(CMStools.OBJ_OID_ATTR_SIGNATURE_TIMESTAMP, new Attribute_values(1));
timeStamp.values.elements[0] = token;
signerInfo.unsignedAttrs = new UnsignedAttributes(1);
signerInfo.unsignedAttrs.elements[0] = timeStamp;
}


public TimeStampResp timestampData(byte[] signature) {

try {
final String hashAlg = TSPAlgorithms.GOST3411;
byte[] imprint = getMessageImprint(signature, hashAlg);

byte[] request = createTimestampRequest(imprint, hashAlg);

org.bouncycastle.asn1.tsp.TimeStampResp resp = getTimeStampResp(conf.getTspServerAddress(), request);
// response.validate(req);

TimeStampResp response = new TimeStampResp();
response.decode(new Asn1DerDecodeBuffer(resp.getEncoded()));
return response;
} catch (IOException | NoSuchAlgorithmException | Asn1Exception e) {
throw new ErlJCPException("Cannot obtain timestamp data", e);
}
}


private byte[] createTimestampRequest(byte[] imprint, String hashAlg) throws IOException {
TimeStampRequestGenerator reqgen = new TimeStampRequestGenerator();
BigInteger nonce = BigInteger.valueOf(System.currentTimeMillis());
// imprint - хеш данных, hashAlg - OID алгоритма хеширования
TimeStampRequest req = reqgen.generate(hashAlg, imprint, nonce);
return req.getEncoded();
}

private byte[] getMessageImprint(byte[] signature, String hashAlg)
throws NoSuchAlgorithmException {
MessageDigest messageDigest = MessageDigest.getInstance(hashAlg);
messageDigest.update(signature, 0, signature.length);
return messageDigest.digest();
}