Seeing Is Believing: Black-Box Membership Inference Attacks Against Retrieval Augmented Generation