Ok, I think I can answer my own question. In S32DS_ARM_Installation_Guide.pdf I found this note...
Note: Make sure that TLS 1.2 protocol is enabled:
• Open Windows Control Panel > Network and Internet > Internet Options > Advanced >
Settings.
• In the Security section make sure the Use TLS 1.2 checkbox is checked. If not, check it and click
the Apply button.
So TLS implies it is a HTTPS request, presumably on the standard port 443? So if the machine has internet access working to https sites then the required port for license activation is open. I'm pretty sure TLS 1.2 is enabled by default on Ubuntu 22.04, but it can be checked.
eg. https://support.messagemedia.com/hc/en-us/articles/4765182432399-How-to-check-if-you-re-TLS-1-2-comp...