Having just had to go through ITAR training for my new job, it is my impression that a) it is your responsibility to make sure you comply with the law, which means knowing what is export-controlled and who you are dealing with, and b) export control violations are punishable by at least a decade in federal prison, if you should be so unlucky.