This is my workflow and might not be applicable to yours. I am not rotating subkeys but only extending their expiration.
- Boot to Tails
- Go to the place of backedup GPG folder and run
export GNUPGHOME="$(pwd)"
gpg --list-keys
export KEY="<<KEYID>>"
gpg --edit-key $KEY
key 1
and repeat for2
and3
expire
and set the new expirationsave
gpg --output public.pub --armor --export $KEY
- Go to online machine
gpg --import public.pub
gpg --send-key $KEY
- Update website with new key