Right, timezones aren't an issue here, as it is expressed in UTC. However, I think system times could be off regardless, creating a potentially small window where the signature could have expired already without the client refreshing.