That looks legit: https://www.sammobile.com/firmwares/galaxy-tab-a-/SM-T280/XAR/download/T280XXS0ARK3/249347/. Notice the build date. Really strange, but maybe C Spire (aka Cellular South) realized there was some critical security flaw that had to be updated.