The main element of the crime here was creating imaginary people to 'sign' the affidavits submitted to ARIN. Phony companies, phony people, etc.
Then the jail time is calculated based on the value of what was taken as a result of the fraud.
5 years seems fairly reasonable for a multi-million dollar scheme, involving multiple employees, explicitly designed to defraud.