Yeah I pipe it out to a file. Then on cold machine I specify it as one of the pieces in the cert generation:
cardano-cli stake-pool registration-certificate
……
–metadata-url Pool/poolMetaData.json at main · applesmash/Pool · GitHub
–metadata-hash $(cat poolMetaDataHash.txt)
–out-file pool.cert