My thought is that the poison 5 is damage. It is listed with the damage. I think how this works is that a single attack roll is made Did it beat your Ref Def? Yes, it hit. Did it beat your Fort Def? Yes, then poisoned as well, otherwise your not poisoned.