diff --git a/cli/zkac_cli/main.py b/cli/zkac_cli/main.py
index 6990e94..d62a982 100644
--- a/cli/zkac_cli/main.py
+++ b/cli/zkac_cli/main.py
@@ -176,6 +176,14 @@ def _cmd_credentials_list(args):
     for reg_hex, role in local:
         print(f"  {reg_hex}:{role}")
 
+    owned = store.list_admin_registries(args.userid)
+    print("\nowner admin capability:")
+    if not owned:
+        print("  (none)")
+    else:
+        for reg_hex in owned:
+            print(f"  {reg_hex}:__admin__ (reserved owner role)")
+
     print("\npending grants: removed (use direct p2p listener)")