How to list all object paths under a dbus service only usign dbus command-line utility?

How can I list the object path under a dbus services using ONLY dbus-send command line utility? For now, I can only list services: dbus-send --system --dest=org.freedesktop.DBus --type=method_call --print-reply /org/freedesktop/DBus org.freedesktop.DBus.ListNames or interfaces: dbus-send --system --dest=org.freedesktop.DBus --type=method_call --print-reply /org/freedesktop/DBus org.freedesktop.DBus.Introspectable.Introspect This question is very similar to: https://unix.stackexchange.com/questions/203410/how-to-list-all-object-paths-under-a-dbus-service but it requires to use some utilities that are not available to me. I use a closed embedded system and I cannot install anything, so I cannot use any of the following utilities: - qdbusviewer - qdbus - d-feet - python