setfacl gets soooo much more useful after you realise you can also getfacl.
facl.
getfacl --access --tabular -R -P ... ah that's why you can't do anything on that server, Jer...
getfacl --access --tabular -R -P