Figured this one out - it's a resold SIM from TracFone. While it technically registers back through AT&T, it isn't from AT&T. May not be technically supported, but will work if you change the APN to "Reseller" and specify IPv4.
Interesting that the same SIM works fine in a Cradle Point modem, probably worth Meraki looking into.